Jeremy Felt 40bcb404a3 Update home and siteurl after path slashes are validated in update_blog_details() ...

When editing a site, if `home` and `siteurl` are checked to be updated along with a site's domain and path, they should receive the results of any modifications in `update_blog_details()` rather than trusting the POST data.

Previously, it was possible to save a value without a leading slash on the path, causing an invalid URL to be stored.

Props earnjam.

Fixes #30417.

Built from https://develop.svn.wordpress.org/trunk@31156


git-svn-id: http://core.svn.wordpress.org/trunk@31137 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2015-01-12 01:57:23 +00:00

..

css

Themes: Fix position of admin notice with .notice class.

2015-01-05 20:06:23 +00:00

images

TwentyFifteen:

2014-11-25 06:12:22 +00:00

includes

In WP_List_Table, only call magic method internals again whitelists of properties and methods, $compat_fields and $compat_methods.

2015-01-11 22:20:22 +00:00

js

TinyMCE editor-expand: when kitchensink is off hide the statusbar on loading, and when the editor is shorter then the viewport. Props avryl, fixes #30961.

2015-01-10 01:32:26 +00:00

maint

Remove the WordPress logo from the focusable elements on the install/update screens. Fixes #28674. Props stompweb

2014-06-29 14:10:15 +00:00

network

Update home and siteurl after path slashes are validated in update_blog_details()

2015-01-12 01:57:23 +00:00

user

Ensure the requires for the admin bootstrap are documented in all wp-admin/user/ files.

2014-11-04 16:32:22 +00:00

about.php

About page: CDN images.

2014-12-18 17:55:22 +00:00

admin-ajax.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

admin-footer.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

admin-functions.php

First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin.

2013-12-24 18:57:12 +00:00

admin-header.php

Add a blank line preceding a Markdown-formatted ordered list in the DocBlock for the admin_body_class filter.

2014-12-06 23:21:24 +00:00

admin-post.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

admin.php

Admin globals:

2015-01-10 05:29:22 +00:00

async-upload.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

comment.php

Declare $action as a global in wp-admin/comment.php.

2015-01-10 20:42:24 +00:00

credits.php

About page, text only (not released for translation), first pass.

2014-12-11 10:16:22 +00:00

custom-background.php

In Custom_Background:

2015-01-10 21:59:22 +00:00

custom-header.php

In Custom_Image_Header:

2015-01-10 22:11:22 +00:00

customize.php

Customizer - Widgets: add feedback for screen readers when moving up or down. Props adamsilverstein, afercia. Fixes #28892.

2014-12-07 00:45:24 +00:00

edit-comments.php

Switch to a 403 response code in places where it is more appropriate than a 500 due to permissions errors.

2014-11-16 06:16:22 +00:00

edit-form-advanced.php

In edit-form-advanced.php:

2015-01-10 21:21:22 +00:00

edit-form-comment.php

Pass comment author name and comment ID to 'get_comment_author_link' filter on Edit Comment screen, for consistency with [30092].

2015-01-05 19:10:23 +00:00

edit-link-form.php

In edit-link-form.php, hackificator bails because there is a </form> with no open <form>. It exists, but is needlessly constructed with PHP. It always returns a <form>, only the id and name are different. The dynamic piece just returns the ID now.

2014-05-18 22:07:15 +00:00

edit-tag-form.php

Apply 'taxonomy_parent_dropdown_args' filter when editing terms.

2014-12-29 15:27:22 +00:00

edit-tags.php

Admin globals:

2015-01-10 05:29:22 +00:00

edit.php

Admin globals:

2015-01-10 05:29:22 +00:00

export.php

The keyword elseif should be used instead of else if so that all control keywords look like single words.

2015-01-08 07:05:25 +00:00

freedoms.php

About page, text only (not released for translation), first pass.

2014-12-11 10:16:22 +00:00

import.php

Use SSL when linking to WordPress.org. see #27115.

2014-03-08 04:14:15 +00:00

index.php

Ensure inline code is markdown-escaped as such, HTML tags are removed from summaries, and that code snippets in descriptions are properly indented.

2014-11-24 05:39:22 +00:00

install-helper.php

Ensure inline code is markdown-escaped as such, HTML tags are removed from summaries, and that code snippets in descriptions are properly indented.

2014-11-24 05:47:23 +00:00

install.php

Declare $wp_version, $required_php_version, and $required_mysql_version as globals in install and upgrade admin files.

2015-01-10 05:57:22 +00:00

link-add.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

link-manager.php

Use SSL when linking to WordPress.org. see #27115.

2014-03-08 04:14:15 +00:00

link-parse-opml.php

Fix syntax for single- and multi-line comments in wp-admin-directory files.

2014-07-17 09:14:16 +00:00

link.php

Fix syntax for single- and multi-line comments in wp-admin-directory files.

2014-07-17 09:14:16 +00:00

load-scripts.php

When outputting JS with a Content-Type header:

2015-01-03 02:57:21 +00:00

load-styles.php

Simplify the setup-config.php UI flow and load process.

2014-07-03 19:57:14 +00:00

media-new.php

Use SSL when linking to WordPress.org. see #27115.

2014-03-08 04:14:15 +00:00

media-upload.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

media.php

Fix syntax for single- and multi-line comments in wp-admin-directory files.

2014-07-17 09:14:16 +00:00

menu-header.php

After [31105], don't ditch the isset() calls for BC. Declare $page_hook as null so it is initialized for all execution paths but will still fail isset() checks.

2015-01-08 22:52:22 +00:00

menu.php

The menu items for users.php and profile.php that require the promote_users cap should be wrapped in an is_multisite() conditional a la user-new.php.

2014-11-30 19:18:23 +00:00

moderation.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-admin.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-delete-site.php

Always decode special characters for email subjects.

2014-03-28 02:44:15 +00:00

ms-edit.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-options.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-sites.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-themes.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-upgrade-network.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-users.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

my-sites.php

Use SSL when linking to WordPress.org. see #27115.

2014-03-08 04:14:15 +00:00

nav-menus.php

Switch to a 403 response code in places where it is more appropriate than a 500 due to permissions errors.

2014-11-16 06:16:22 +00:00

network.php

Add line breaks at the end of network setup rules to avoid unintended merging with a subsequent line.

2014-10-15 14:13:20 +00:00

options-discussion.php

Collapse additional avatar settings if avatars are disabled.

2015-01-08 17:01:24 +00:00

options-general.php

Declare $wp_version, $required_php_version, and $required_mysql_version as globals in install and upgrade admin files.

2015-01-10 05:57:22 +00:00

options-head.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

options-media.php

Use SSL when linking to WordPress.org. see #27115.

2014-03-08 04:14:15 +00:00

options-permalink.php

The keyword elseif should be used instead of else if so that all control keywords look like single words.

2015-01-08 07:05:25 +00:00

options-reading.php

Inline <script>s that are only printed in the admin for pages that are served with the HTML5 doctype absolutely do not need CDATA comments.

2015-01-03 05:46:25 +00:00

options-writing.php

Priority fixes for various existing hook documentation.

2014-04-12 00:01:15 +00:00

options.php

Switch to a 403 response code in places where it is more appropriate than a 500 due to permissions errors.

2014-11-16 06:16:22 +00:00

plugin-editor.php

In wp-admin/plugin-editor.php, break is unreachabled after exit.

2014-05-06 18:12:14 +00:00

plugin-install.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

plugins.php

Use correct file name in a hook comment.

2014-10-30 18:35:28 +00:00

post-new.php

Admin globals:

2015-01-10 05:29:22 +00:00

post.php

Admin globals:

2015-01-10 05:29:22 +00:00

press-this.php

Inline <script>s that are only printed in the admin for pages that are served with the HTML5 doctype absolutely do not need CDATA comments.

2015-01-03 05:46:25 +00:00

profile.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

revision.php

Add a single responsibility function for outputting Revisions JS templates: wp_print_revision_templates().

2014-11-01 00:15:24 +00:00

setup-config.php

iOS: do not autofocus the readonly textarea with the code for wp-config.php in setup-config.php.

2014-12-14 00:11:24 +00:00

theme-editor.php

Inline <script>s that are only printed in the admin for pages that are served with the HTML5 doctype absolutely do not need CDATA comments.

2015-01-03 05:46:25 +00:00

theme-install.php

Pinking Shears.

2015-01-08 05:03:23 +00:00

themes.php

Remove a stray $ from [30793].

2014-12-09 11:27:22 +00:00

tools.php

Use SSL when linking to WordPress.org. see #27115.

2014-03-08 04:14:15 +00:00

update-core.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

update.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

upgrade-functions.php

First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin.

2013-12-24 18:57:12 +00:00

upgrade.php

Declare $wp_version, $required_php_version, and $required_mysql_version as globals in install and upgrade admin files.

2015-01-10 05:57:22 +00:00

upload.php

After [31037], ensure that the library is passed as a map to the Media Grid instance. Remove useless query vars.

2015-01-04 02:07:23 +00:00

user-edit.php

Remove obsolete help sentence on Edit User screen.

2015-01-07 08:23:23 +00:00

user-new.php

No need for wp_get_password_hint() to be prefixed as if it is private.

2014-12-15 08:34:23 +00:00

users.php

Switch to a 403 response code in places where it is more appropriate than a 500 due to permissions errors.

2014-11-16 06:16:22 +00:00

widgets.php

Customizer: Use deep-links for Backgrounds, Headers, and Widgets.

2014-11-20 15:29:23 +00:00