Sergey Biryukov c9f57045c7 Grouped backports to the 4.4 branch.
- Media: Prevent CSRF setting attachment thumbnails.
- Embeds: Add protocol validation for WordPress Embed code.

Merges [55763] and [55764] to the 4.4 branch.
Props dd32, isabel_brison, martinkrcho, matveb, ocean90, paulkevan, peterwilsoncc, timothyblynjacobs, xknown, youknowriad.
Built from https://develop.svn.wordpress.org/branches/4.4@55779


git-svn-id: http://core.svn.wordpress.org/branches/4.4@55291 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2023-05-16 15:38:21 +00:00
..
2023-05-16 15:38:21 +00:00
2017-01-11 05:24:00 +00:00
2015-09-26 07:04:28 +00:00
2019-10-14 19:09:23 +00:00
2022-10-17 18:01:21 +00:00
2023-05-16 15:38:21 +00:00
2019-10-14 19:09:23 +00:00
2015-11-18 20:30:25 +00:00
2023-05-16 15:38:21 +00:00
2020-10-29 19:04:23 +00:00
2022-01-06 18:19:21 +00:00
2019-10-14 19:09:23 +00:00