WordPress/wp-includes
davidbaumwald 809137df1f Grouped backports to the 4.2 branch.
- Comments: Prevent users who can not see a post from seeing comments on it.
- Shortcodes: Restrict ajax handler for media shortcode.
- Prevent unintended behavior when certain objects are unserialized.

Merges [56835], [56836], and [56838] to the 4.1 branch.
Props xknown, jorbin, joehoyle, peterwilsoncc, ehtis, tykoted, antpb.
Built from https://develop.svn.wordpress.org/branches/4.2@56851


git-svn-id: http://core.svn.wordpress.org/branches/4.2@56363 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2023-10-12 14:26:21 +00:00
..
ID3 Update getID3 library to 1.9.8. 2014-09-11 19:07:17 +00:00
SimplePie
Text
certificates WP_HTTP: Revert r30491 which updated the bundled root certificates. There's a report that this is breaking under certain PHP/OpenSSL versions (which we've encountered before), and we're safer with a slighty out of date CA bundle than breaking HTTPS communication on affected sites. 2014-12-07 03:13:22 +00:00
css Build/Test Tools: Backport GitHub Action and build improvements to the 4.2 branch. 2021-04-02 15:50:22 +00:00
fonts Dashicons: Update to the latest files. 2014-12-09 19:34:23 +00:00
images Smilies: Update our few remaining smilies to better align with Twemoji, and add frownie.png until Twemoji provide a build containing it. 2015-04-10 06:20:26 +00:00
js External Librairies: Update jQuery.query to version 2.2.3. 2022-03-10 21:50:20 +00:00
pomo Replace `array_shift()` with `reset()` where appropriate for performance. 2015-03-19 03:56:27 +00:00
theme-compat Theme Compat: Make string translatable and add translator comments. Added in [31941]. 2015-04-08 18:15:28 +00:00
admin-bar.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
atomlib.php
author-template.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
bookmark-template.php Ensure inline code is markdown-escaped as such, and that code snippets in descriptions are properly indented. 2014-11-24 04:42:22 +00:00
bookmark.php Grouped backports to the 4.2 branch. 2022-08-30 15:52:20 +00:00
cache.php User: Invalidate `user_activation_key` on password update. 2020-04-29 16:52:22 +00:00
canonical.php If the URL being visited has non-breaking spaces at the end of it, they were probably inserted by an errant URL copy/paste. Instead of showing a 404 for no obvious reason, let's just trim them. 2015-03-20 01:02:28 +00:00
capabilities.php Capabilities: Fall back to the `edit_posts` capability for orphaned comments. 2015-09-09 06:01:28 +00:00
category-template.php Fix description alignment for the `category_css_class` filter docs. 2015-04-05 14:49:27 +00:00
category.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
class-IXR.php XML-RPC: Send 405 Method Not Allowed for GET requests. 2014-12-30 20:41:23 +00:00
class-feed.php In PHP 5.0.0, `is_a()` became deprecated in favour of the `instanceof` operator. Calling `is_a()` would result in an `E_STRICT` warning. 2015-01-16 01:06:24 +00:00
class-http.php `self` should be used for accessing local static members. 2015-03-09 02:22:26 +00:00
class-json.php
class-oembed.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
class-phpass.php Prevent high resource usage when hashing large passwords. props mdawaffe, pento 2014-11-20 16:03:24 +00:00
class-phpmailer.php External libraries: Improve attachment handling in PHPMailer 2021-05-12 22:35:03 +00:00
class-pop3.php
class-simplepie.php
class-smtp.php Update PHPMailer to 5.2.22. 2017-01-11 05:25:28 +00:00
class-snoopy.php Snoopy: use escapeshellarg instead of escapeshellcmd 2016-03-30 14:08:28 +00:00
class-wp-admin-bar.php Accessibility: Add landmark roles to WordPress admin areas. 2015-04-01 13:17:27 +00:00
class-wp-ajax-response.php `WP_Ajax_Response` has one property only, `$responses`. It was public until [28508], when it became `private` in name only. Is it worth 4 magic methods to pretend that this property is `private`? It is not. 2015-01-11 00:13:23 +00:00
class-wp-customize-control.php Theme Switcher: Provide an easier way to reset back to the current active theme. 2015-04-22 16:15:27 +00:00
class-wp-customize-manager.php Customize: Ignore invalid customization sessions. 2017-05-16 12:19:29 +00:00
class-wp-customize-panel.php Add a missing file header to wp-includes/class-wp-customize-panel.php, separate out the class DocBlock for `WP_Customize_Panel`. 2015-02-25 08:09:25 +00:00
class-wp-customize-section.php Customizer Theme Switcher: Use text input for the search field to prevent double tap issues for Preview and Customize buttons on iOS. 2015-04-14 17:45:27 +00:00
class-wp-customize-setting.php Add missing `@access` tags to two DocBlocks in `WP_Customize_Setting`. 2015-04-05 15:17:27 +00:00
class-wp-customize-widgets.php Customizer: Use `hash_equals()` for widgets. 2015-08-04 04:52:16 +00:00
class-wp-editor.php Remove some old backwards compatilibity code from TinyMCE. 2015-04-20 05:50:27 +00:00
class-wp-embed.php Backport r33469 and r33470 to 4.2. 2015-07-30 19:41:27 +00:00
class-wp-error.php In PHP 5.0.0, `is_a()` became deprecated in favour of the `instanceof` operator. Calling `is_a()` would result in an `E_STRICT` warning. 2015-01-16 01:06:24 +00:00
class-wp-http-ixr-client.php Improve various `@param` docs for `src/wp-includes/*`. 2014-12-01 01:34:24 +00:00
class-wp-image-editor-gd.php In the `->multi_resize()` method of the `WP_Image_Editor` subclasses, when looping through potential crops, we need to make sure the crop isn't the exact same dimensions as the original image before copying it as a new crop. 2015-02-27 19:38:27 +00:00
class-wp-image-editor-imagick.php In the `->multi_resize()` method of the `WP_Image_Editor` subclasses, when looping through potential crops, we need to make sure the crop isn't the exact same dimensions as the original image before copying it as a new crop. 2015-02-27 19:38:27 +00:00
class-wp-image-editor.php Fix some `@param` docs that have chars too close them. 2015-01-10 06:57:22 +00:00
class-wp-theme.php Grouped backports to the 4.2 branch. 2023-10-12 14:26:21 +00:00
class-wp-walker.php `Walker::$has_children` should be public for backward compatibility. 2015-01-11 01:56:22 +00:00
class-wp-xmlrpc-server.php General: WordPress updates 2020-10-29 19:08:22 +00:00
class-wp.php Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
class.wp-dependencies.php Ensure inline code is markdown-escaped as such, and that code snippets in descriptions are properly indented. 2014-11-24 04:58:22 +00:00
class.wp-scripts.php Revert [31030] and [31033]. Incidentally, there is no lazy-loading happening here anyway. 2015-04-14 15:13:28 +00:00
class.wp-styles.php Ensure that inline styles attached to conditional stylesheets are also conditional. 2015-01-03 04:10:21 +00:00
comment-template.php In `comment_form()`, ensure that filtered arguments contain all required default values. 2015-07-17 06:14:26 +00:00
comment.php Grouped backports to the 4.2 branch. 2022-10-17 17:56:20 +00:00
compat.php WPDB: When checking that a string can be sent to MySQL, we shouldn't use `mb_convert_encoding()`, as it behaves differently to MySQL's character encoding conversion. 2015-05-06 03:30:30 +00:00
cron.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
date.php Grouped backports to the 4.2 branch. 2022-10-17 17:56:20 +00:00
default-constants.php Remove obsolete inline comment. 2015-01-06 01:57:22 +00:00
default-filters.php Clean up wp_staticize_emoji() and friends. 2015-04-20 04:15:26 +00:00
default-widgets.php Grouped backports to the 4.2 branch. 2022-10-17 17:56:20 +00:00
deprecated.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
feed-atom-comments.php
feed-atom.php
feed-rdf.php Improve various hook and filter docs so they are correctly parsed for the code reference. 2014-12-06 21:32:24 +00:00
feed-rss.php
feed-rss2-comments.php Improve various hook and filter docs so they are correctly parsed for the code reference. 2014-12-06 21:32:24 +00:00
feed-rss2.php Improve various hook and filter docs so they are correctly parsed for the code reference. 2014-12-06 21:32:24 +00:00
feed.php Hardening: Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds. 2017-11-29 16:34:32 +00:00
formatting.php Grouped backports to the 4.2 branch. 2022-01-06 18:20:40 +00:00
functions.php Grouped backports to the 4.2 branch. 2022-10-17 17:56:20 +00:00
functions.wp-scripts.php Revert [31030] and [31033]. Incidentally, there is no lazy-loading happening here anyway. 2015-04-14 15:13:28 +00:00
functions.wp-styles.php Add a missing return description for `wp_styles()`. 2015-04-05 15:56:26 +00:00
general-template.php Multisite: Improve messaging for previously activated users. 2018-12-13 00:56:19 +00:00
http.php Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
kses.php Update `wp_kses_bad_protocol()` to recognize `:` on uri attributes, 2019-12-12 18:41:21 +00:00
l10n.php Don't blindly trust the output of `glob()` to be an array. 2015-07-29 06:53:28 +00:00
link-template.php Press This: check the bookmarklet version and add the update notice from PHP. 2015-04-10 21:08:29 +00:00
load.php Add useremail and userslugs as global cache groups. fixes #31243. 2015-02-06 03:24:23 +00:00
locale.php Adding a `@return` annotation to constructors is generally not recommended as a constructor does not have a meaningful return value. Constructors do not have meaningful return values, anything that is returned from here is discarded. 2015-01-10 06:54:23 +00:00
media-template.php Revert editing of video embed parameters in the media modal, [31620] and [31626] for now. Plan on revisiting in 4.3. 2015-04-21 22:41:26 +00:00
media.php Grouped backports to the 4.2 branch. 2023-10-12 14:26:21 +00:00
meta.php Grouped backports to the 4.2 branch. 2022-01-06 18:20:40 +00:00
ms-blogs.php Remove leading space from the definition of a global cache group. 2015-02-06 03:26:22 +00:00
ms-default-constants.php
ms-default-filters.php There are some random `add_action()` and `add_filter()` calls littered around some files in `wp-includes/`. These should be moved to `wp-includes/default-filters.php` with the rest of the registered hooks. It seems like this was the best practice for awhile and then we randomly stopped. This file loads way before any of the includes, so the hooks will be registered for any request that loads WordPress, even `SHORTINIT` - a lot of the hooks registered won't run anyways (that's already the case). 2015-01-12 16:40:23 +00:00
ms-deprecated.php Multisite: Validate activation links. 2018-12-13 01:51:37 +00:00
ms-files.php
ms-functions.php Multisite: Use `wp_rand()` in signup key creation. 2017-01-11 05:34:56 +00:00
ms-load.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
ms-settings.php
nav-menu-template.php There are some random `add_action()` and `add_filter()` calls littered around some files in `wp-includes/`. These should be moved to `wp-includes/default-filters.php` with the rest of the registered hooks. It seems like this was the best practice for awhile and then we randomly stopped. This file loads way before any of the includes, so the hooks will be registered for any request that loads WordPress, even `SHORTINIT` - a lot of the hooks registered won't run anyways (that's already the case). 2015-01-12 16:40:23 +00:00
nav-menu.php Nav menus: Return to calling links "Custom Links". 2015-03-12 06:15:27 +00:00
option.php Allow `$autoload` setting to be changed for existing options using `update_option()`. 2015-03-06 13:57:26 +00:00
pluggable-deprecated.php Improve the `@param` docs for `src/wp-includes/pluggable*`. 2014-11-30 22:19:25 +00:00
pluggable.php Grouped backports to the 4.2 branch. 2022-10-17 17:56:20 +00:00
plugin.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
post-formats.php Replace `array_shift()` with `reset()` where appropriate for performance. 2015-03-19 03:56:27 +00:00
post-template.php Grouped backports to the 4.2 branch. 2022-08-30 15:52:20 +00:00
post-thumbnail-template.php Adjust DocBlocks for `get_|the_post_thumbnail()` to clarify the difference between the 'thumbnail' and 'post-thumbnail' image sizes. 2015-03-20 19:57:26 +00:00
post.php Grouped backports to the 4.2 branch. 2022-01-06 18:20:40 +00:00
query.php User: Invalidate `user_activation_key` on password update. 2020-04-29 16:52:22 +00:00
registration-functions.php
registration.php
revision.php Improve various `@param` docs. 2014-11-30 22:56:25 +00:00
rewrite.php When shifting `WP_Rewrite::flush_rules()` to a later action if it was called too early, make sure to do a hard flush if requested. 2015-04-01 19:06:29 +00:00
rss-functions.php
rss.php Fill in the `@param` types for the args for functions missing them in `wp-admin/includes/deprecated.php` (pour one out). 2014-11-03 06:08:22 +00:00
script-loader.php External Librairies: Update jQuery.query to version 2.2.3. 2022-03-10 21:50:20 +00:00
session.php Fix some internal types that are passed to functions to avoid changing the acceptable types passed as arguments to those functions: 2015-01-16 22:51:21 +00:00
shortcodes.php Grouped backports to the 4.2 branch. 2023-10-12 14:26:21 +00:00
taxonomy.php Grouped backports to the 4.2 branch. 2022-01-06 18:20:40 +00:00
template-loader.php
template.php In PHP 5.0.0, `is_a()` became deprecated in favour of the `instanceof` operator. Calling `is_a()` would result in an `E_STRICT` warning. 2015-01-16 01:06:24 +00:00
theme.php Themes: Fix some broken links in the legacy theme preview. 2015-08-04 04:56:47 +00:00
update.php Background Updates: Remove the 7am/7pm background update check. 2016-01-06 13:24:33 +00:00
user.php User: Invalidate `user_activation_key` on password update. 2020-04-29 16:52:22 +00:00
vars.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
version.php Grouped backports to the 4.2 branch. 2023-05-16 15:24:21 +00:00
widgets.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
wlwmanifest.xml
wp-db.php WPDB: Check that `AUTH_SALT` is not empty, Fix a PHP notice when `AUTH_SALT` is undefined. 2017-11-27 01:12:56 +00:00
wp-diff.php Add a missing description for the `$_diff_threshold` property in the `WP_Text_Diff_Renderer_Table` class. 2015-01-29 11:36:22 +00:00