John Blackbourn 6c7de13e11 Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues. ...

Merges [41457] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@41465


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41298 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2017-09-19 14:44:20 +00:00

..

admin.php

…

ajax-actions.php

Revisions: Change the capability needed to view revision diffs to edit_post.

2016-06-21 14:46:22 +00:00

bookmark.php

…

class-ftp-pure.php

…

class-ftp-sockets.php

…

class-ftp.php

…

class-pclzip.php

…

class-wp-comments-list-table.php

Ensure post titles are correctly escaped on the Dashboard. Merge of [32175] to the 4.1 branch.

2015-04-20 07:42:23 +00:00

class-wp-filesystem-base.php

Use the correct hash notation syntax for the WP_Filesystem_Base::dirlist() DocBlock.

2014-12-03 10:11:22 +00:00

class-wp-filesystem-direct.php

Convert various uses of (optional) in core parameter descriptions to use the style prescribed in the inline documentation standards for PHP.

2014-12-06 21:24:45 +00:00

class-wp-filesystem-ftpext.php

…

class-wp-filesystem-ftpsockets.php

…

class-wp-filesystem-ssh2.php

…

class-wp-importer.php

…

class-wp-links-list-table.php

Improve various hook and filter docs so they are correctly parsed for the code reference.

2014-12-06 21:32:24 +00:00

class-wp-list-table.php

…

class-wp-media-list-table.php

Fix the search field width in the media modal, media library grid and on the install new plugins screen.

2014-12-11 09:32:44 +00:00

class-wp-ms-sites-list-table.php

…

class-wp-ms-themes-list-table.php

…

class-wp-ms-users-list-table.php

List tables: escape user e-mails

2015-09-14 22:42:23 +00:00

class-wp-plugin-install-list-table.php

Plugins: move the recommender results to a separate tab. Any outstanding quality issues will be fixed on the API side without needing core changes. Props tellyworth, fixes #30337.

2014-12-07 23:40:24 +00:00

class-wp-plugins-list-table.php

General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.

2017-09-19 13:39:24 +00:00

class-wp-posts-list-table.php

Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field.

2017-01-26 14:18:24 +00:00

class-wp-terms-list-table.php

…

class-wp-theme-install-list-table.php

…

class-wp-themes-list-table.php

…

class-wp-upgrader-skins.php

…

class-wp-upgrader.php

Upgrade/Install: Sanitize file name in File_Upload_Upgrader.

2016-09-06 17:57:23 +00:00

class-wp-users-list-table.php

List tables: escape user e-mails

2015-09-14 22:42:23 +00:00

comment.php

…

continents-cities.php

…

dashboard.php

Capabilities: When creating an auto-draft, ensure that the current user still has permission to do so.

2015-07-23 03:54:21 +00:00

deprecated.php

…

export.php

Improve various hook and filter docs so they are correctly parsed for the code reference.

2014-12-06 21:32:24 +00:00

file.php

Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues.

2017-09-19 14:44:20 +00:00

image-edit.php

…

image.php

…

import.php

…

list-table.php

…

media.php

Fix broken audio/video functions when sanitizing ID3 data

2017-04-17 13:29:25 +00:00

menu.php

…

meta-boxes.php

…

misc.php

…

ms-deprecated.php

…

ms.php

…

nav-menu.php

…

plugin-install.php

Pass locale to wordpress.org theme/plugin API.

2014-12-16 23:24:23 +00:00

plugin.php

…

post.php

Admin: escape URL-encoded permalinks

2016-06-21 14:56:22 +00:00

revision.php

Correct the default value of the show_split_view argument for revisions so they are correctly displayed side by side ins

2014-12-04 14:36:24 +00:00

schema.php

Adjust [29806] and revert [29807] to restore placeholder and email copy order.

2014-12-05 01:15:26 +00:00

screen.php

Add nonce for widget accessibility mode.

2017-01-11 01:50:26 +00:00

taxonomy.php

Default $parent in category_exists() should default to null rather than 0.

2015-02-09 02:22:23 +00:00

template.php

General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.

2017-09-19 13:39:24 +00:00

theme-install.php

…

theme.php

Pass locale to wordpress.org theme/plugin API.

2014-12-16 23:24:23 +00:00

translation-install.php

…

update-core.php

When upgrading WordPress remove genericons example.html files

2015-05-06 19:58:22 +00:00

update.php

…

upgrade.php

Upgrade: $wpdb->get_col_length() sanity check: bail on unexpected return value.

2015-05-06 23:13:22 +00:00

user.php

…

widgets.php

…