WordPress

Compress scripts/styles: 3.6-alpha-23875.

2013-03-29 20:58:38 +00:00

Post Format UI.

2013-03-29 03:35:41 +00:00

Since post format meta for images now takes an attachment ID only, make sure we label it appropriately and don't do things like esc_url() the value. fixes #23900 .

2013-03-29 20:56:18 +00:00

js

Compress scripts/styles: 3.6-alpha-23875.

2013-03-29 20:58:38 +00:00

maint

Use correct escaping function. fixes #23334 .

2013-02-14 05:52:23 +00:00

network

Update Network Dashboard help text. props DrewAPicture, raggedrobins. see #23163 .

2013-03-09 03:18:26 +00:00

user

…

about.php

Remove 'Insert Multiple Images' from the about page as it is now completely invisible in the UI. Requiring shift-click but not mentioning it is a bad omen. props helenyhou. fixes #22455 .

2012-12-07 20:58:34 +00:00

admin-ajax.php

Logged out warnings, heartbeat: remove nopriv_autosave as it doubles the functionality of the logged out warnings, move wp_ajax_nopriv_heartbeat() under No-privilege Ajax handlers in ajax-actions.php, see #23295 , see #23216

2013-03-13 23:54:12 +00:00

admin-footer.php

…

admin-functions.php

…

admin-header.php

Move utils.js (cookie and user setting functions) to wp-includes to enable front-end use.

2012-12-04 19:29:56 +00:00

admin-post.php

…

admin.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:00:25 +00:00

async-upload.php

…

comment.php

…

credits.php

…

custom-background.php

Revert 23416, 23419, 23445 except for wp_reset_vars() changes. We are going a different direction with the slashing cleanup, so resetting to a clean slate. see #21767

2013-03-01 16:28:40 +00:00

custom-header.php

Sanity checks on image metadata to avoid warnings, etc.

2013-03-29 20:51:35 +00:00

customize.php

Refactor the Customizer accordion so that it can be used in other locations.

2013-02-14 22:58:04 +00:00

edit-comments.php

Ensure the referer functions operate completely on unslashed data: wp_referer_field(), wp_original_referer_field(), wp_get_referer(), wp_get_original_referer().

2013-03-01 17:58:43 +00:00

edit-form-advanced.php

Fix incorrect script handle and a notice. props ocean90. fixes #23896 .

2013-03-29 17:33:35 +00:00

edit-form-comment.php

Ensure the referer functions operate completely on unslashed data: wp_referer_field(), wp_original_referer_field(), wp_get_referer(), wp_get_original_referer().

2013-03-01 17:58:43 +00:00

edit-link-form.php

Revert 23416, 23419, 23445 except for wp_reset_vars() changes. We are going a different direction with the slashing cleanup, so resetting to a clean slate. see #21767

2013-03-01 16:28:40 +00:00

edit-tag-form.php

…

edit-tags.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:00:25 +00:00

edit.php

Bulk actions: do not move locked posts to the trash, props pdclark, see #23792

2013-03-18 21:11:06 +00:00

export.php

…

freedoms.php

…

import.php

…

index.php

We no longer care if wp-admin/index.php is parseable by PHP 4. (And it's not, anyway.) If a user hits the root or wp-admin/install.php, they do get a proper warning.

2012-12-11 16:08:58 +00:00

install-helper.php

…

install.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

link-add.php

Remove unused variables reset by wp_reset_vars(). Many of these haven't been used since b2. see #21767 .

2013-02-16 18:28:41 +00:00

link-manager.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

link-parse-opml.php

…

link.php

Remove unused variables reset by wp_reset_vars(). Many of these haven't been used since b2. see #21767 .

2013-02-16 18:28:41 +00:00

load-scripts.php

Script loader: Chunk the script names as passed to load-scripts.php into 128-character pieces. Avoids hitting a limit for the length of a single variable, such as suhosin.get.max_value_length which defaults to 512. fixes #22757 .

2012-12-05 18:57:56 +00:00

load-styles.php

…

media-new.php

Escape form action urls with esc_url() rather than esc_attr().

2013-03-18 14:01:25 +00:00

media-upload.php

…

media.php

Revert 23416, 23419, 23445 except for wp_reset_vars() changes. We are going a different direction with the slashing cleanup, so resetting to a clean slate. see #21767

2013-03-01 16:28:40 +00:00

menu-header.php

Add "Customize" as first item under Appearance menu.

2013-03-29 20:39:54 +00:00

menu.php

Add "Customize" as first item under Appearance menu.

2013-03-29 20:39:54 +00:00

moderation.php

…

ms-admin.php

…

ms-delete-site.php

…

ms-edit.php

…

ms-options.php

…

ms-sites.php

…

ms-themes.php

…

ms-upgrade-network.php

…

ms-users.php

…

my-sites.php

…

nav-menus.php

Nav Menus help tab updates.

2013-03-29 03:39:34 +00:00

network.php

Make get_home_path() return consistent slashes. fixes #23175 .

2013-03-12 11:04:14 +00:00

options-discussion.php

…

options-general.php

…

options-head.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

options-media.php

Only show help for upload_path and upload_url_path if those fields are visible. fixes #21720 .

2012-12-09 17:04:08 +00:00

options-permalink.php

Consistently use $wp_rewrite->index instead of hardcoding "index.php".

2013-01-18 13:44:22 +00:00

options-reading.php

…

options-writing.php

Make sure .widefat border and background coloring only applies to tables. props MikeHansenMe. fixes #21936 .

2013-01-22 14:44:04 +00:00

options.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

plugin-editor.php

Don't unslash variables that came from wp_reset_vars(). see #21767 .

2013-03-01 18:59:54 +00:00

plugin-install.php

…

plugins.php

…

post-new.php

…

post.php

Fix a longstanding "off by one" revision authorship bug.

2013-03-27 20:21:38 +00:00

press-this.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

profile.php

…

revision.php

Kill the HR on revisions page. see #23497

2013-03-28 03:17:03 +00:00

setup-config.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

theme-editor.php

Don't unslash variables that came from wp_reset_vars(). see #21767 .

2013-03-01 18:59:54 +00:00

theme-install.php

…

themes.php

Add "Customize" as first item under Appearance menu.

2013-03-29 20:39:54 +00:00

tools.php

Make sure .widefat border and background coloring only applies to tables. props MikeHansenMe. fixes #21936 .

2013-01-22 14:44:04 +00:00

update-core.php

Escape form action urls with esc_url() rather than esc_attr().

2013-03-18 14:01:25 +00:00

update.php

Revert 23416, 23419, 23445 except for wp_reset_vars() changes. We are going a different direction with the slashing cleanup, so resetting to a clean slate. see #21767

2013-03-01 16:28:40 +00:00

upgrade-functions.php

…

upgrade.php

Always wp_unslash() the return of wp_get_referer().

2013-03-01 17:20:32 +00:00

upload.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

user-edit.php

Cleanup additional capabilities display in user-edit.php. Mark a string for translation.

2013-03-18 13:27:57 +00:00

user-new.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-03 16:30:38 +00:00

users.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-03 16:30:38 +00:00

widgets.php

…