WordPress-C/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2025-03-04 20:39:46 +00:00
Code Issues Packages Projects Releases Wiki Activity
WordPress/wp-includes
History
John Blackbourn 9bde3962d9 Hardening: Remove the ability to upload JavaScript files for users who do not have the unfiltered_html capability. 
Merges [42261] to the 4.3 branch.

Built from https://develop.svn.wordpress.org/branches/4.3@42291


git-svn-id: http://core.svn.wordpress.org/branches/4.3@42120 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-11-29 16:32:55 +00:00
..
certificates
Revert [33845]
2015-09-03 03:33:24 +00:00
css
Customize: Fix logic for determining the container element when focusing on a panel, section, or control.
2015-09-07 06:05:23 +00:00
fonts
Revert [33845]
2015-09-03 03:33:24 +00:00
ID3
Revert [33845]
2015-09-03 03:33:24 +00:00
images
Revert [33845]
2015-09-03 03:33:24 +00:00
js
TinyMCE: Improve the previews for shortcodes.
2017-09-19 12:44:02 +00:00
pomo
Revert [33845]
2015-09-03 03:33:24 +00:00
SimplePie
Revert [33845]
2015-09-03 03:33:24 +00:00
Text
Revert [33845]
2015-09-03 03:33:24 +00:00
theme-compat
Revert [33845]
2015-09-03 03:33:24 +00:00
admin-bar.php
Revert [33845]
2015-09-03 03:33:24 +00:00
atomlib.php
Revert [33845]
2015-09-03 03:33:24 +00:00
author-template.php
Revert [33845]
2015-09-03 03:33:24 +00:00
bookmark-template.php
Revert [33845]
2015-09-03 03:33:24 +00:00
bookmark.php
Revert [33845]
2015-09-03 03:33:24 +00:00
cache.php
Revert [33845]
2015-09-03 03:33:24 +00:00
canonical.php
Revert [33845]
2015-09-03 03:33:24 +00:00
capabilities.php
Revert [33845]
2015-09-03 03:33:24 +00:00
category-template.php
In Walker_CategoryDropdown::start_el(), cast values to strings before deciding whether to append 'selected' attribute.
2015-09-08 19:04:23 +00:00
category.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-feed.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-http.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-IXR.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-json.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-oembed.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-phpass.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-phpmailer.php
Update PHPMailer to 5.2.22.
2017-01-11 05:24:24 +00:00
class-pop3.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-simplepie.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-smtp.php
Update PHPMailer to 5.2.22.
2017-01-11 05:24:24 +00:00
class-snoopy.php
Snoopy: use escapeshellarg instead of escapeshellcmd
2016-03-30 14:05:24 +00:00
class-wp-admin-bar.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-ajax-response.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-customize-control.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-customize-manager.php
Customize: Ignore invalid customization sessions.
2017-05-16 12:18:26 +00:00
class-wp-customize-nav-menus.php
Customize: Fix live previewing of menu changes on subdirectory installs.
2015-09-18 05:50:25 +00:00
class-wp-customize-panel.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-customize-section.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-customize-setting.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-customize-widgets.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-editor.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-embed.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-error.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-http-ixr-client.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-image-editor-gd.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-image-editor-imagick.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-image-editor.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-theme.php
Themes: Fix markup for theme name fallbacks.
2017-01-11 11:11:26 +00:00
class-wp-walker.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class-wp-xmlrpc-server.php
Adjust post meta checks
2017-05-16 08:52:26 +00:00
class-wp.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class.wp-dependencies.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class.wp-scripts.php
Revert [33845]
2015-09-03 03:33:24 +00:00
class.wp-styles.php
Revert [33845]
2015-09-03 03:33:24 +00:00
comment-template.php
Revert [33845]
2015-09-03 03:33:24 +00:00
comment.php
Revert [33845]
2015-09-03 03:33:24 +00:00
compat.php
Revert [33845]
2015-09-03 03:33:24 +00:00
cron.php
Revert [33845]
2015-09-03 03:33:24 +00:00
date.php
Revert [33845]
2015-09-03 03:33:24 +00:00
default-constants.php
Revert [33845]
2015-09-03 03:33:24 +00:00
default-filters.php
Revert [33845]
2015-09-03 03:33:24 +00:00
default-widgets.php
Customizer: Collapse any expanded panel/sections before expanding other panel/sections.
2015-09-07 06:20:23 +00:00
deprecated.php
Revert [33845]
2015-09-03 03:33:24 +00:00
feed-atom-comments.php
Revert [33845]
2015-09-03 03:33:24 +00:00
feed-atom.php
Revert [33845]
2015-09-03 03:33:24 +00:00
feed-rdf.php
Revert [33845]
2015-09-03 03:33:24 +00:00
feed-rss2-comments.php
Revert [33845]
2015-09-03 03:33:24 +00:00
feed-rss2.php
Revert [33845]
2015-09-03 03:33:24 +00:00
feed-rss.php
Revert [33845]
2015-09-03 03:33:24 +00:00
feed.php
Hardening: Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds.
2017-11-29 16:32:31 +00:00
formatting.php
Media: Improve handling of extensionless filenames.
2016-06-21 14:55:52 +00:00
functions.php
Hardening: Remove the ability to upload JavaScript files for users who do not have the unfiltered_html capability.
2017-11-29 16:32:55 +00:00
functions.wp-scripts.php
Revert [33845]
2015-09-03 03:33:24 +00:00
functions.wp-styles.php
Revert [33845]
2015-09-03 03:33:24 +00:00
general-template.php
Hardening: Add escaping to the language attributes used on html elements.
2017-11-29 16:31:22 +00:00
http.php
HTTP: Improve detection of valid IP addresses.
2016-03-30 15:51:47 +00:00
kses.php
Revert [33845]
2015-09-03 03:33:24 +00:00
l10n.php
Revert [33845]
2015-09-03 03:33:24 +00:00
link-template.php
Revert [33845]
2015-09-03 03:33:24 +00:00
load.php
Revert [33845]
2015-09-03 03:33:24 +00:00
locale.php
Revert [33845]
2015-09-03 03:33:24 +00:00
media-template.php
Revert [33845]
2015-09-03 03:33:24 +00:00
media.php
Embeds: URL encode YouTube video IDs for broader compatibility.
2017-03-06 12:06:59 +00:00
meta.php
Revert [33845]
2015-09-03 03:33:24 +00:00
ms-blogs.php
Revert [33845]
2015-09-03 03:33:24 +00:00
ms-default-constants.php
Revert [33845]
2015-09-03 03:33:24 +00:00
ms-default-filters.php
Revert [33845]
2015-09-03 03:33:24 +00:00
ms-deprecated.php
Revert [33845]
2015-09-03 03:33:24 +00:00
ms-files.php
Revert [33845]
2015-09-03 03:33:24 +00:00
ms-functions.php
Multisite: Use wp_rand() in signup key creation.
2017-01-11 05:34:27 +00:00
ms-load.php
Revert [33845]
2015-09-03 03:33:24 +00:00
ms-settings.php
Revert [33845]
2015-09-03 03:33:24 +00:00
nav-menu-template.php
Revert [33845]
2015-09-03 03:33:24 +00:00
nav-menu.php
Revert [33845]
2015-09-03 03:33:24 +00:00
option.php
Revert [33845]
2015-09-03 03:33:24 +00:00
pluggable-deprecated.php
Revert [33845]
2015-09-03 03:33:24 +00:00
pluggable.php
Strip control characters before validating redirect.
2017-03-06 13:43:55 +00:00
plugin.php
Revert [33845]
2015-09-03 03:33:24 +00:00
post-formats.php
Revert [33845]
2015-09-03 03:33:24 +00:00
post-template.php
Admin: Escape attachment name in case it contains special characters
2016-06-21 14:25:24 +00:00
post-thumbnail-template.php
Revert [33845]
2015-09-03 03:33:24 +00:00
post.php
Database: Restore numbered placeholders in wpdb::prepare().
2017-10-31 12:49:26 +00:00
query.php
Query: Ensure that queries work correctly with post type names with special characters.
2017-01-26 13:51:29 +00:00
registration-functions.php
Revert [33845]
2015-09-03 03:33:24 +00:00
registration.php
Revert [33845]
2015-09-03 03:33:24 +00:00
revision.php
Revert [33845]
2015-09-03 03:33:24 +00:00
rewrite.php
Revert [33845]
2015-09-03 03:33:24 +00:00
rss-functions.php
Revert [33845]
2015-09-03 03:33:24 +00:00
rss.php
Revert [33845]
2015-09-03 03:33:24 +00:00
script-loader.php
TinyMCE: Improve the previews for shortcodes.
2017-09-19 12:44:02 +00:00
session.php
Revert [33845]
2015-09-03 03:33:24 +00:00
shortcodes.php
Shortcodes: don't allow unclosed HTML elements in attributes
2015-09-14 22:47:23 +00:00
taxonomy.php
Taxonomies: make sure taxonomy functions work correctly with taxonomy names with special characters
2016-03-30 17:23:24 +00:00
template-loader.php
Revert [33845]
2015-09-03 03:33:24 +00:00
template.php
Revert [33845]
2015-09-03 03:33:24 +00:00
theme.php
Revert [33845]
2015-09-03 03:33:24 +00:00
update.php
Background Updates: Remove the 7am/7pm background update check.
2016-01-06 13:24:33 +00:00
user.php
Passwords: Deprecate second parameter of wp_new_user_notification().
2015-09-14 13:03:24 +00:00
vars.php
Revert [33845]
2015-09-03 03:33:24 +00:00
version.php
Bump 4.3 branch to version 4.3.13.
2017-10-31 13:33:26 +00:00
widgets.php
WP_Filesystem: SSH2 handler: Remove support for is_writable() via SSH, it turns out PHP doesn't verify the writability via SFTP and instead uses a comparison based on the current php system process user instead of the ssh user.
2015-09-03 04:38:15 +00:00
wlwmanifest.xml
Revert [33845]
2015-09-03 03:33:24 +00:00
wp-db.php
WPDB: Check that AUTH_SALT is not empty, Fix a PHP notice when AUTH_SALT is undefined.
2017-11-27 01:12:26 +00:00
wp-diff.php
Revert [33845]
2015-09-03 03:33:24 +00:00