WordPress/wp-includes
audrasjb 8eeccbf75d Editor: Fix Path Traversal issue on Windows in Template-Part Block.
Merges [58470] to the 4.9 branch.
Props xknown, jorbin.



Built from https://develop.svn.wordpress.org/branches/4.9@58493


git-svn-id: http://core.svn.wordpress.org/branches/4.9@57942 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2024-06-24 15:44:28 +00:00
..
ID3 Media: update the `getID3` library to version `1.9.14` to avoid fatal errors in PHP7. 2017-07-31 19:50:45 +00:00
IXR XML-RPC: Add default values to IXR_Message for PHP 7.2 compatibility to avoid PHP Warnings. 2018-03-08 19:56:40 +00:00
Requests Grouped backports to the 4.9 branch. 2023-10-12 18:15:06 +00:00
SimplePie
Text External Libraries: Remove usage of `each()` from the `Text_Diff_Engine_native` class. 2017-10-26 12:52:53 +00:00
certificates
css Build/Test Tools: Backport GitHub Action and build improvements to the 4.9 branch. 2021-03-31 19:34:28 +00:00
customize Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
fonts
images
js Grouped backports to the 4.9 branch. 2023-05-16 15:54:27 +00:00
pomo General: PHP 7.3 throws an `E_WARNING` when using continue to target a switch. 2018-09-24 20:05:29 +00:00
random_compat Avoid PHP Linting errors in the Random_Compat library under PHP7. 2017-12-01 03:07:42 +00:00
rest-api Grouped backports to the 4.9 branch. 2023-10-12 18:15:06 +00:00
theme-compat Embeds: Avoid "Division by zero" warning in `embed-content.php` template if a thumbnail has a zero height. 2017-10-18 15:09:48 +00:00
widgets Customize: Ensure media playlists get initialized after selective refresh; expose new `wp.playlist.initialize()` API. 2018-01-30 14:56:41 +00:00
admin-bar.php Users: Remove some links to the dashboard from My Sites for users who cannot access it. 2017-10-09 15:22:46 +00:00
atomlib.php
author-template.php Editor: Add CodeMirror-powered code editor with syntax highlighting, linting, and auto-completion. 2017-09-13 06:08:47 +00:00
bookmark-template.php
bookmark.php Grouped backports to the 4.9 branch. 2022-08-30 15:44:26 +00:00
cache.php Customize: Add additional filters to Customizer to prevent JSON corruption. 2020-04-29 16:16:26 +00:00
canonical.php Canonical: Strip trailing punctuation from permalinks. 2017-10-24 14:18:48 +00:00
capabilities.php REST API: Support meta registration for specific object subtypes. 2018-07-19 18:49:25 +00:00
category-template.php Taxonomy: Restore deprecated argument to `term_description()` signature. 2017-12-22 02:50:39 +00:00
category.php
class-IXR.php
class-feed.php
class-http.php Docs: Correct type and description for the `$data` parameter in `WP_Http::browser_redirect_compatibility()`. 2017-10-18 16:38:48 +00:00
class-json.php
class-oembed.php Embeds: Add oEmbed support for someecards.com. 2017-10-02 19:10:49 +00:00
class-phpass.php
class-phpmailer.php External libraries: Improve attachment handling in PHPMailer 2021-05-12 22:32:26 +00:00
class-pop3.php
class-requests.php
class-simplepie.php
class-smtp.php
class-snoopy.php
class-walker-category-dropdown.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-walker-category.php Taxonomy: Revert [43620] from the 4.9 branch. 2018-10-11 04:42:25 +00:00
class-walker-comment.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-walker-nav-menu.php Menus: Remove an extra space in the `<ul>` tag in `Walker_Nav_Menu::start_lvl()`. 2017-10-20 10:40:46 +00:00
class-walker-page-dropdown.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-walker-page.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-admin-bar.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-ajax-response.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-comment-query.php Docs: Remove `&` prefixes from parameter documentation to avoid doc parsing errors. 2017-10-02 22:03:33 +00:00
class-wp-comment.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-customize-control.php Customize: Deprecate nav menu classes that are no longer used, instead of removing them immediately. 2017-10-28 05:48:47 +00:00
class-wp-customize-manager.php Customize: Add additional filters to Customizer to prevent JSON corruption. 2020-04-29 16:16:26 +00:00
class-wp-customize-nav-menus.php Customize: Do not attempt to count uncountable value. 2018-07-17 14:40:23 +00:00
class-wp-customize-panel.php Accessibility: CodeMirror editing areas minor improvements. 2017-09-24 16:00:46 +00:00
class-wp-customize-section.php Customize: Deprecate nav menu classes that are no longer used, instead of removing them immediately. 2017-10-28 05:48:47 +00:00
class-wp-customize-setting.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-customize-widgets.php Customize: Revert [43611] from the 4.9 branch. 2018-10-11 03:48:25 +00:00
class-wp-dependency.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-editor.php Editor: Use `apply_filters_deprecated()` for some deprecated filters. 2018-07-17 15:05:25 +00:00
class-wp-embed.php Embeds: Improve consistency of update and refresh logic for oEmbed caching between `oembed_cache` and post meta. 2017-10-24 23:10:48 +00:00
class-wp-error.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-feed-cache-transient.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-feed-cache.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-hook.php Docs: Use correct order of arguments in the DocBlock for `WP_Hook::has_filter()`. 2017-09-21 10:00:48 +00:00
class-wp-http-cookie.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-http-curl.php I18N: Replace function name in error message in `WP_Http_Curl::request()` and `WP_Http_Streams::request()` with a placeholder. 2017-10-18 15:04:51 +00:00
class-wp-http-encoding.php
class-wp-http-ixr-client.php
class-wp-http-proxy.php
class-wp-http-requests-hooks.php Docs: Remove superfluous `@package WordPress` and `@subpackage` notations used outside of file headers in a variety of core files. 2017-07-01 16:58:42 +00:00
class-wp-http-requests-response.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-http-response.php HTTP API: Use `WP_HTTP_Response::set_data()` in `::__construct()` instead of directly accessing the `$data` property. 2017-10-03 15:18:46 +00:00
class-wp-http-streams.php I18N: Replace function name in error message in `WP_Http_Curl::request()` and `WP_Http_Streams::request()` with a placeholder. 2017-10-18 15:04:51 +00:00
class-wp-image-editor-gd.php Media: Rename several attachment related parameters from `$post_id` to `$attachment_id` for clarity, and improve related 2017-08-22 11:12:44 +00:00
class-wp-image-editor-imagick.php Media: Rename several attachment related parameters from `$post_id` to `$attachment_id` for clarity, and improve related 2017-08-22 11:12:44 +00:00
class-wp-image-editor.php Media: In WP_Image_Editor::make_image(), close previously opened output buffer if the file could not be created. 2018-09-18 22:02:28 +00:00
class-wp-list-util.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-locale-switcher.php General: Improve terminology used when referring to installations of WordPress and its extensions. 2017-08-22 11:52:48 +00:00
class-wp-locale.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-matchesmapregex.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-meta-query.php Grouped backports to the 4.9 branch. 2022-01-06 18:16:25 +00:00
class-wp-metadata-lazyloader.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-network-query.php Multisite: Document all return types in get_networks(). 2017-10-18 18:13:50 +00:00
class-wp-network.php Multisite: Pass network object instead of ID to `pre_get_main_site_id`. 2017-10-30 19:56:47 +00:00
class-wp-oembed-controller.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-post-type.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-post.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-query.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
class-wp-rewrite.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-role.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-roles.php Multisite: Improve initializing available roles when switch sites. 2017-09-27 21:44:44 +00:00
class-wp-session-tokens.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-simplepie-file.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-simplepie-sanitize-kses.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-site-query.php Multisite: Document all return types in `get_sites()`. 2017-10-18 17:39:46 +00:00
class-wp-site.php Multisite: Revert [41719]. 2017-10-16 22:29:48 +00:00
class-wp-tax-query.php Grouped backports to the 4.9 branch. 2022-01-06 18:16:25 +00:00
class-wp-taxonomy.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-term-query.php Docs: Correct param documentation for `WP_Term_Query`. 2018-09-03 21:26:26 +00:00
class-wp-term.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-text-diff-renderer-inline.php
class-wp-text-diff-renderer-table.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-theme.php Grouped backports to the 4.9 branch. 2023-10-12 18:15:06 +00:00
class-wp-user-meta-session-tokens.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-user-query.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-user.php Multisite: Initialize a user's roles correctly when setting them up for a different site. 2017-09-27 21:10:45 +00:00
class-wp-walker.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-widget-factory.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-widget.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-xmlrpc-server.php General: WordPress updates 2020-10-29 18:53:27 +00:00
class-wp.php Backporting several bug fixes. 2019-10-14 18:39:28 +00:00
class.wp-dependencies.php Docs: Remove `@access` notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class.wp-scripts.php Docs: Remove `&` prefixes from parameter documentation to avoid doc parsing errors. 2017-10-02 22:03:33 +00:00
class.wp-styles.php Docs: Remove `&` prefixes from parameter documentation to avoid doc parsing errors. 2017-10-02 22:03:33 +00:00
comment-template.php Privacy: Revert [43525]. 2018-07-24 17:08:26 +00:00
comment.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
compat.php General: Backport polyfills for `str_ends_with()` and `str_starts_with()`. 2024-01-30 18:11:26 +00:00
cron.php Docs: Use third-person singular verbs in the summaries for `wp_unschedule_hook()` and `wp_clear_scheduled_hook()`. 2017-06-30 04:54:41 +00:00
date.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
default-constants.php Docs: Document `$wp_version` global in `wp_initial_constants()`. 2017-10-20 22:04:56 +00:00
default-filters.php Dashboard: Remove the Try Gutenberg callout. 2018-12-13 09:07:26 +00:00
default-widgets.php Widgets: Introduce Gallery widget for displaying image galleries. 2017-09-25 06:28:45 +00:00
deprecated.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
embed-template.php
embed.php Grouped backports to the 4.9 branch. 2023-05-16 15:54:27 +00:00
feed-atom-comments.php
feed-atom.php
feed-rdf.php
feed-rss.php
feed-rss2-comments.php
feed-rss2.php
feed.php Hardening: Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds. 2017-11-29 16:11:38 +00:00
formatting.php Grouped backports to the 4.9 branch. 2022-01-06 18:16:25 +00:00
functions.php Editor: Fix Path Traversal issue on Windows in Template-Part Block. 2024-06-24 15:44:28 +00:00
functions.wp-scripts.php
functions.wp-styles.php
general-template.php Multisite: Improve messaging for previously activated users. 2018-12-13 00:34:26 +00:00
http.php Backporting several bug fixes. 2019-10-14 18:39:28 +00:00
kses.php Ensure that a user can publish_posts before making a post sticky. 2019-12-12 18:57:27 +00:00
l10n.php I18N: Make sure `wp_dropdown_languages()` does not print out empty `name` and `id` attributes. 2017-10-04 15:23:46 +00:00
link-template.php Privacy: Use the actual Privacy Policy page title in `get_the_privacy_policy_link()`. 2018-07-18 11:52:25 +00:00
load.php Docs: Document `$ini_all` staticvar in `wp_is_ini_value_changeable()`. 2017-10-18 19:54:48 +00:00
locale.php
media-template.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
media.php Grouped backports to the 4.9 branch. 2023-10-12 18:15:06 +00:00
meta.php General: WordPress updates 2020-10-29 18:53:27 +00:00
ms-blogs.php Multisite: Document all return types in get_networks(). 2017-10-18 18:13:50 +00:00
ms-default-constants.php Multisite: Use `get_current_blog_id()` instead of `$wpdb->blogid`. 2017-10-02 01:44:47 +00:00
ms-default-filters.php Multisite: Only update a site's `post` count when post types of `post` are updated. 2017-10-02 03:09:44 +00:00
ms-deprecated.php Multisite: Validate activation links. 2018-12-13 01:33:26 +00:00
ms-files.php
ms-functions.php Email: Don't send notifications for site or network admin email address change to the default 'admin_email' value. 2018-01-23 13:47:40 +00:00
ms-load.php Multisite: Use `WP_Network_Query` in `ms_load_current_site_and_network()`. 2017-10-03 19:26:49 +00:00
ms-settings.php Multisite: Explicitly globalize global variables in `ms-settings.php`. 2017-10-16 17:06:48 +00:00
nav-menu-template.php Menus: Make sure `current-menu-parent` and `current-menu-ancestor` classes are properly set for parent items of post type archive submenu items. 2017-07-05 21:31:44 +00:00
nav-menu.php Menus: Add `menu-$i` slugs to mapping groups 2017-10-25 22:29:49 +00:00
option.php Transients: After [41963], add missing cron task for `delete_expired_transients()`. 2017-10-24 23:00:47 +00:00
pluggable-deprecated.php
pluggable.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
plugin.php Revert "Add `wp.hooks` - JavaScript actions and filters." 2017-10-04 20:25:49 +00:00
post-formats.php Docs: Improve the return description for `get_post_format_slugs()` to note that the array contains slugs as both keys and values. 2017-08-20 20:03:54 +00:00
post-template.php Grouped backports to the 4.9 branch. 2022-08-30 15:44:26 +00:00
post-thumbnail-template.php Post Thumbnails: Pass post ID to `post_thumbnail_size` filter. 2017-08-18 18:19:44 +00:00
post.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
query.php Docs: Correct $id parameter type for old_slug_redirect_post_id filter. 2018-04-29 22:37:28 +00:00
registration-functions.php
registration.php
rest-api.php Grouped backports to the 4.9 branch. 2023-10-12 18:15:06 +00:00
revision.php
rewrite.php Rewrite: In `url_to_postid()`, bail early if the URL does not belong to the site. 2017-10-06 23:29:51 +00:00
rss-functions.php
rss.php
script-loader.php External Librairies: Update jQuery.query to version 2.2.3. 2022-03-10 21:28:26 +00:00
session.php
shortcodes.php Grouped backports to the 4.9 branch. 2023-10-12 18:15:06 +00:00
spl-autoload-compat.php General: Move the `__autoload()` compat function into its own file to prevent deprecated notices being thrown by the compiler in PHP 7.2. 2017-07-28 01:15:52 +00:00
taxonomy.php Revert [43632] from the 4.9 branch. 2018-10-10 04:17:13 +00:00
template-loader.php
template.php Docs: Don't reference non-existent hooks inline in the DocBlock descriptions for the following template functions: 2017-06-29 16:05:41 +00:00
theme.php Themes: Avoid a PHP 7.2 warning in `get_theme_roots()` when `$wp_theme_directories` is an uncountable value. 2018-04-30 04:55:26 +00:00
update.php Updates: Partially revert [42584], as this branch of code should always be run after a core update check. 2018-02-06 12:47:42 +00:00
user.php Customize: Add additional filters to Customizer to prevent JSON corruption. 2020-04-29 16:16:26 +00:00
vars.php General: Introduce a `wp_is_mobile` filter for controlling whether a request should be treated as coming from a mobile device. 2017-06-15 12:05:42 +00:00
version.php WordPress 4.9.25. 2024-01-30 16:19:27 +00:00
widgets.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
wlwmanifest.xml
wp-db.php WPDB: Use a PCRE syntax which supports PCRE compiled between 2003 and 2006. 2018-01-23 03:40:42 +00:00
wp-diff.php