iandunn 5b4aa26436 Privacy: Use a CSPRNG in export filenames for more security. ...

`rand()` is deterministic and therefore offers much less protection in this context. `wp_generate_password()` is a convenient wrapper around `wp_rand()`, which uses `random_int()` to generate cryptographically-secure psuedorandom numbers.

See #43546.

Built from https://develop.svn.wordpress.org/trunk@43045


git-svn-id: http://core.svn.wordpress.org/trunk@42874 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2018-04-30 18:53:25 +00:00

..

admin-filters.php

Privacy: add means to export personal data by username or email address. Generate a zipped export file containing all data. First run.

2018-04-27 19:54:21 +00:00

admin.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

ajax-actions.php

Privacy: add means to export personal data by username or email address. Generate a zipped export file containing all data. First run.

2018-04-27 19:54:21 +00:00

bookmark.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-automatic-upgrader-skin.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-bulk-plugin-upgrader-skin.php

Docs: Correct method reference in a comment for Bulk_Plugin_Upgrader_Skin::$plugin_info.

2018-03-23 00:34:29 +00:00

class-bulk-theme-upgrader-skin.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-bulk-upgrader-skin.php

I18N: Use the actual placeholder instead of a number in translator comments if the corresponding string does not use numbered placeholders.

2018-03-11 16:44:34 +00:00

class-core-upgrader.php

Upgrade/Install: Fix the format of the upgrader_process_complete actions after [42343].

2018-03-05 21:44:30 +00:00

class-file-upload-upgrader.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-ftp-pure.php

FTP: ensure that there is only one class named ftp, which is what is expected in the loading of this arcane library. This ensures that an autoload generator, something along the lines of Composer, won't hiccup when it gets to these files.

2016-08-26 18:47:29 +00:00

class-ftp-sockets.php

FTP: ensure that there is only one class named ftp, which is what is expected in the loading of this arcane library. This ensures that an autoload generator, something along the lines of Composer, won't hiccup when it gets to these files.

2016-08-26 18:47:29 +00:00

class-ftp.php

Bootstrap: do not go gentle into that good night r38411, r38412, and parts of r38389.

2016-08-31 16:31:29 +00:00

class-language-pack-upgrader-skin.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-language-pack-upgrader.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-pclzip.php

Filesystem API: Ensure memory limit calculations by PclZip are using integers.

2016-07-19 11:55:30 +00:00

class-plugin-installer-skin.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-plugin-upgrader-skin.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-plugin-upgrader.php

Docs: Standardise and correct documentation relating to parameters which accept plugin names.

2018-03-05 21:50:31 +00:00

class-theme-installer-skin.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-theme-upgrader-skin.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-theme-upgrader.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-walker-category-checklist.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-walker-nav-menu-checklist.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-walker-nav-menu-edit.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-wp-ajax-upgrader-skin.php

General: Introduce WP_Error::has_errors() method and use it where appropriate.

2018-02-27 02:31:31 +00:00

class-wp-automatic-updater.php

Docs: Add missing brace in auto_update_{$type} filter DocBlock.

2018-03-11 10:30:33 +00:00

class-wp-comments-list-table.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-wp-community-events.php

Privacy: add helper function for anonymizing data in a standardized way.

2018-04-12 21:20:23 +00:00

class-wp-filesystem-base.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-wp-filesystem-direct.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-wp-filesystem-ftpext.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-wp-filesystem-ftpsockets.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-wp-filesystem-ssh2.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-wp-importer.php

Import: Avoid counting an uncountable type when reading arguments passed to a script.

2018-03-02 17:17:31 +00:00

class-wp-internal-pointers.php

Docs: Remove @static notations from method DocBlocks in wp-admin/* classes.

2018-02-25 20:06:30 +00:00

class-wp-links-list-table.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-wp-list-table-compat.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-wp-list-table.php

Accessibility: Better color contrast for the tables pagination links.

2018-04-29 16:25:21 +00:00

class-wp-media-list-table.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-wp-ms-sites-list-table.php

Docs: Revert some sneaky debugging code.

2018-03-22 20:29:30 +00:00

class-wp-ms-themes-list-table.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-wp-ms-users-list-table.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-wp-plugin-install-list-table.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-wp-plugins-list-table.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-wp-post-comments-list-table.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-wp-posts-list-table.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-wp-screen.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-wp-site-icon.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-wp-terms-list-table.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-wp-theme-install-list-table.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

class-wp-themes-list-table.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

class-wp-upgrader-skin.php

General: Introduce WP_Error::has_errors() method and use it where appropriate.

2018-02-27 02:31:31 +00:00

class-wp-upgrader-skins.php

Load: Re-add class-wp-upgrader-skins.php.

2016-12-03 03:40:41 +00:00

class-wp-upgrader.php

Docs: Standardise and correct documentation relating to parameters which accept plugin names.

2018-03-05 21:50:31 +00:00

class-wp-users-list-table.php

Docs: Document many more parameters and properties using typed array notation.

2018-03-22 20:27:32 +00:00

comment.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

continents-cities.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

credits.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

dashboard.php

General: Implement editorial, design and accessibility feedback for the PHP version nag.

2018-04-26 14:31:24 +00:00

deprecated.php

Taxonomy: restore TagSearch unit tests and correct deprecated version string.

2018-02-25 16:28:30 +00:00

edit-tag-messages.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

export.php

Docs: Document more parameters and properties using typed array notation.

2018-03-25 18:10:32 +00:00

file.php

Privacy: Use a CSPRNG in export filenames for more security.

2018-04-30 18:53:25 +00:00

image-edit.php

Docs: Add missing @since entries for functions in wp-admin/image-edit.php.

2018-02-26 18:38:31 +00:00

image.php

Media: Pass EXIF data to the wp_read_image_metadata filter.

2018-03-25 20:45:29 +00:00

import.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

list-table.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

media.php

I18N: Use consistent pattern for placeholder references in a translator comment in media_upload_max_image_resize().

2018-04-16 18:37:20 +00:00

menu.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

meta-boxes.php

I18N: Use the actual placeholder instead of a number in translator comments if the corresponding string does not use numbered placeholders.

2018-03-11 16:44:34 +00:00

misc.php

Privacy: add default text for a privacy policy. First run.

2018-04-30 14:47:21 +00:00

ms-admin-filters.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

ms-deprecated.php

Docs: Standardize and add missing deprecation notations in DocBlocks for the following functions:

2017-06-22 17:48:45 +00:00

ms.php

Docs: Document more parameters and properties using typed array notation.

2018-03-25 18:10:32 +00:00

nav-menu.php

Docs: First pass at switching some array parameter documentation to typed notation.

2018-02-09 17:26:31 +00:00

network.php

I18N: Use the actual placeholder instead of a number in translator comments if the corresponding string does not use numbered placeholders.

2018-03-11 16:44:34 +00:00

noop.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

options.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

plugin-install.php

Plugins: Show the required PHP version in the plugin details view, if specified.

2018-04-24 11:41:25 +00:00

plugin.php

Privacy: add better docs for wp_add_privacy_policy_content() and WP_Privacy_Policy_Content::add().

2018-04-25 18:10:21 +00:00

post.php

Docs: Document more parameters and properties using typed array notation.

2018-03-25 18:10:32 +00:00

revision.php

Revisions: improve show_split_view=false support for title.

2018-04-10 16:12:30 +00:00

schema.php

Multisite: Introduce metadata for sites.

2018-03-16 02:15:31 +00:00

screen.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

taxonomy.php

Docs: Correct and improve various inline documentation.

2018-03-25 19:35:29 +00:00

template.php

General: Implement editorial, design and accessibility feedback for the PHP version nag.

2018-04-26 14:31:24 +00:00

theme-install.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

theme.php

Docs: Remove backtick-escaping around a core function in the hook docs for the pre_prepare_themes_for_js filter.

2018-04-29 21:47:22 +00:00

translation-install.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

update-core.php

Docs: Use consistent description for $wp_filesystem global.

2018-03-04 21:58:30 +00:00

update.php

Code is Poetry.

2017-11-30 23:11:00 +00:00

upgrade.php

Fix typo (missing !).

2018-04-16 10:14:21 +00:00

user.php

Privacy: add means to export personal data by username or email address. Generate a zipped export file containing all data. First run.

2018-04-27 19:54:21 +00:00

widgets.php

Accessibility: Widgets: Make the "Available Widgets" section operable with a keyboard.

2018-03-07 22:27:31 +00:00