Sergey Biryukov c9f57045c7 Grouped backports to the 4.4 branch.
- Media: Prevent CSRF setting attachment thumbnails.
- Embeds: Add protocol validation for WordPress Embed code.

Merges [55763] and [55764] to the 4.4 branch.
Props dd32, isabel_brison, martinkrcho, matveb, ocean90, paulkevan, peterwilsoncc, timothyblynjacobs, xknown, youknowriad.
Built from https://develop.svn.wordpress.org/branches/4.4@55779


git-svn-id: http://core.svn.wordpress.org/branches/4.4@55291 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2023-05-16 15:38:21 +00:00
..
2015-09-05 19:53:24 +00:00
2015-09-05 19:53:24 +00:00
2015-03-11 17:15:27 +00:00
2013-12-28 23:53:15 +00:00