Sergey Biryukov c9f57045c7 Grouped backports to the 4.4 branch.
- Media: Prevent CSRF setting attachment thumbnails.
- Embeds: Add protocol validation for WordPress Embed code.

Merges [55763] and [55764] to the 4.4 branch.
Props dd32, isabel_brison, martinkrcho, matveb, ocean90, paulkevan, peterwilsoncc, timothyblynjacobs, xknown, youknowriad.
Built from https://develop.svn.wordpress.org/branches/4.4@55779


git-svn-id: http://core.svn.wordpress.org/branches/4.4@55291 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2023-05-16 15:38:21 +00:00
..
2020-10-29 19:04:23 +00:00
2023-05-16 15:38:21 +00:00
2020-10-29 19:04:23 +00:00
2020-10-29 19:04:23 +00:00
2015-06-27 15:41:25 +00:00
2020-10-29 19:04:23 +00:00
2015-11-18 20:30:25 +00:00