WordPress-C/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2025-02-25 16:25:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
WordPress/wp-includes
History
Rachel Baker d054b9afba REST API: Allow schema sanitization_callback to be set to null to bypass fallback sanitization functions. 
The logic in WP_REST_Request->sanitize_params() added in [39091] did not account for `null` or `false` being the sanitization_callback preventing overriding `rest_parse_request_arg()`. This fixes that oversight, allowing the built in sanitization function to be bypassed. See #38593.

Props kkoppenhaver, rachelbaker, jnylen0.
Fixes #39042.

Built from https://develop.svn.wordpress.org/trunk@39563


git-svn-id: http://core.svn.wordpress.org/trunk@39503 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-12-11 21:26:43 +00:00
..
certificates
…
css
Toolbar: remove some unnecessary CSS lines.
2016-12-07 17:45:45 +00:00
customize
Customize: Prevent single quotes (apostrophes) in custom_css values from unexpectedly causing false positives for unbalanced character validation errors.
2016-12-10 06:45:42 +00:00
fonts
…
ID3
…
images
…
IXR
XML-RPC: Fix truncated warning message added in [38883].
2016-10-29 21:32:33 +00:00
js
Customize: Fix ability to shift-click on placeholder/pre-saved nav menu items in preview to focus on corresponding control.
2016-12-10 23:47:41 +00:00
pomo
Docs: Fix multiple trivial typos throughout a variety of core files.
2016-10-31 06:28:32 +00:00
random_compat
…
Requests
…
rest-api
REST API: Allow schema sanitization_callback to be set to null to bypass fallback sanitization functions.
2016-12-11 21:26:43 +00:00
SimplePie
…
Text
…
theme-compat
…
widgets
Docs: Fix an incorrect pseudo-parameter referenced in the hook doc for the widget_tag_cloud_args filter.
2016-10-31 06:40:49 +00:00
admin-bar.php
Multisite: Replace is_super_admin() with manage_network for admin bar permissions.
2016-12-04 21:21:42 +00:00
atomlib.php
General: Check to see that the PHP-XML module is enabled before using XML functions.
2016-10-24 04:45:31 +00:00
author-template.php
…
bookmark-template.php
…
bookmark.php
Docs: Improve the documentation for parameters which accept OBJECT, ARRAY_A, and ARRAY_N as parameters.
2016-11-09 23:00:32 +00:00
cache.php
Docs: Fix multiple trivial typos throughout a variety of core files.
2016-10-31 06:28:32 +00:00
canonical.php
…
capabilities.php
Role/Capability: Don't assign the delete_site capability to anyone on single site installs.
2016-12-04 22:07:39 +00:00
category-template.php
Taxonomy: Introduce get_term_parents_list().
2016-12-09 16:10:42 +00:00
category.php
Docs: Improve the documentation for parameters which accept OBJECT, ARRAY_A, and ARRAY_N as parameters.
2016-11-09 23:00:32 +00:00
class-feed.php
Load: Re-add class-feed.php.
2016-12-03 03:30:42 +00:00
class-http.php
WP_HTTP: Map internal Requests hooks to WordPress actions.
2016-11-13 10:36:29 +00:00
class-IXR.php
…
class-json.php
…
class-oembed.php
Embeds: Realign the provider list after [38693].
2016-10-25 20:16:56 +00:00
class-phpass.php
…
class-phpmailer.php
…
class-pop3.php
Docs: Fix multiple trivial typos throughout a variety of core files.
2016-10-31 06:28:32 +00:00
class-requests.php
…
class-simplepie.php
…
class-smtp.php
…
class-snoopy.php
…
class-walker-category-dropdown.php
…
class-walker-category.php
…
class-walker-comment.php
…
class-walker-nav-menu.php
…
class-walker-page-dropdown.php
…
class-walker-page.php
Docs: Fix multiple trivial typos throughout a variety of core files.
2016-10-31 06:28:32 +00:00
class-wp-admin-bar.php
Accessibility: Revert [38984] as it needs to be better communicated to plugin authors.
2016-11-05 16:28:33 +00:00
class-wp-ajax-response.php
…
class-wp-comment-query.php
Comments: Clean up unused code after [38446].
2016-12-07 15:52:44 +00:00
class-wp-comment.php
…
class-wp-customize-control.php
Customize: Clean up docs and code style for customize changes in 4.7.
2016-11-23 06:05:32 +00:00
class-wp-customize-manager.php
Customize: Trim whitespace for URLs supplied for external_header_video to prevent esc_url_raw() from making them invalid.
2016-12-10 07:00:45 +00:00
class-wp-customize-nav-menus.php
Customize: Fix inability to delete nav menus by preventing preview filters from being added during customize_save admin ajax request.
2016-12-10 06:30:46 +00:00
class-wp-customize-panel.php
…
class-wp-customize-section.php
Customize: Introduce custom CSS for extending theme styles.
2016-10-19 18:15:31 +00:00
class-wp-customize-setting.php
Customize: Ensure WP_Customize_Setting::value() returns previewed value for custom types utilizing the customize_value_{$id_base} filter.
2016-11-19 06:00:34 +00:00
class-wp-customize-widgets.php
Customize: Use selected user language for edit shortcuts in preview instead of site language.
2016-12-08 19:32:59 +00:00
class-wp-dependency.php
…
class-wp-editor.php
TinyMCE: after chats in #core-editor and #desing on Slack, the decision is to not remove Heading 1 for beta1.
2016-10-26 22:01:33 +00:00
class-wp-embed.php
…
class-wp-error.php
…
class-wp-feed-cache-transient.php
…
class-wp-feed-cache.php
…
class-wp-hook.php
Plugins: Add a current_priority() method to WP_Hook.
2016-12-02 07:10:43 +00:00
class-wp-http-cookie.php
…
class-wp-http-curl.php
…
class-wp-http-encoding.php
…
class-wp-http-ixr-client.php
…
class-wp-http-proxy.php
…
class-wp-http-requests-hooks.php
WP_HTTP: Map internal Requests hooks to WordPress actions.
2016-11-13 10:36:29 +00:00
class-wp-http-requests-response.php
…
class-wp-http-response.php
…
class-wp-http-streams.php
…
class-wp-image-editor-gd.php
…
class-wp-image-editor-imagick.php
Media: Allow override of PDF setup for multiple pages or DPI.
2016-11-18 22:22:32 +00:00
class-wp-image-editor.php
…
class-wp-list-util.php
General: Introduce a wp_list_sort() helper function, v2.
2016-10-25 21:26:32 +00:00
class-wp-locale-switcher.php
I18N: Add an additional caching layer for _load_textdomain_just_in_time().
2016-11-21 16:07:33 +00:00
class-wp-locale.php
…
class-wp-matchesmapregex.php
…
class-wp-meta-query.php
…
class-wp-metadata-lazyloader.php
…
class-wp-network-query.php
Cache API: introduce wp_cache_get_last_changed to improve DRY
2016-10-21 02:54:34 +00:00
class-wp-network.php
…
class-wp-oembed-controller.php
…
class-wp-post-type.php
…
class-wp-post.php
Posts, Post Types: Add support for post type templates.
2016-10-26 08:07:30 +00:00
class-wp-query.php
Docs: Correct param definition for WP_Query::query().
2016-12-09 16:23:42 +00:00
class-wp-rewrite.php
…
class-wp-role.php
…
class-wp-roles.php
Roles: Fix a PHP error introduced in [39082].
2016-11-02 05:55:30 +00:00
class-wp-session-tokens.php
…
class-wp-simplepie-file.php
…
class-wp-simplepie-sanitize-kses.php
…
class-wp-site-query.php
Cache API: introduce wp_cache_get_last_changed to improve DRY
2016-10-21 02:54:34 +00:00
class-wp-site.php
Multisite: Deprecate the blog_details filter.
2016-10-25 23:44:30 +00:00
class-wp-tax-query.php
…
class-wp-taxonomy.php
…
class-wp-term-query.php
Taxonomy: Remove redundant 'get_terms_args' filter call from WP_Term_Query.
2016-10-31 15:47:33 +00:00
class-wp-term.php
…
class-wp-text-diff-renderer-inline.php
…
class-wp-text-diff-renderer-table.php
…
class-wp-theme.php
Posts, Post Types: Improve sanitisation of templates' post types.
2016-11-15 03:37:31 +00:00
class-wp-user-meta-session-tokens.php
…
class-wp-user-query.php
…
class-wp-user.php
…
class-wp-walker.php
…
class-wp-widget-factory.php
…
class-wp-widget.php
Docs: Fix multiple trivial typos throughout a variety of core files.
2016-10-31 06:28:32 +00:00
class-wp-xmlrpc-server.php
Text Changes: Merge strings referring to list_users capability.
2016-11-19 02:16:30 +00:00
class-wp.php
Feeds: Always return a valid timestamp for the Last-Modified header of comment or post feeds.
2016-10-25 20:48:29 +00:00
class.wp-dependencies.php
…
class.wp-scripts.php
…
class.wp-styles.php
…
comment-template.php
I18n: Introduce more translator comments for strings that contain placeholders but don't have an accompanying translator comment.
2016-11-21 02:46:30 +00:00
comment.php
Comments: Merge similar strings between comments.php and the REST API comments controller.
2016-12-04 20:32:40 +00:00
compat.php
…
cron.php
…
date.php
…
default-constants.php
Themes: Twenty Seventeen is now the default theme.
2016-10-20 09:13:29 +00:00
default-filters.php
Customize: Remove premature (and verbose) check of fresh_site option due to database not being ready on multisite.
2016-10-28 03:43:30 +00:00
default-widgets.php
…
deprecated.php
Docs: Fix multiple trivial typos throughout a variety of core files.
2016-10-31 06:28:32 +00:00
embed-template.php
…
embed.php
Embeds: Correctly remove security attribute from iframes in IE 10 and IE 11.
2016-11-23 13:38:33 +00:00
feed-atom-comments.php
I18n: Begin introducing translator comments for strings which include placeholders but no accompanying translator comment.
2016-11-21 01:22:32 +00:00
feed-atom.php
Feeds: Always return a valid timestamp for the Last-Modified header of comment or post feeds.
2016-10-25 20:48:29 +00:00
feed-rdf.php
Feeds: Always return a valid timestamp for the Last-Modified header of comment or post feeds.
2016-10-25 20:48:29 +00:00
feed-rss2-comments.php
I18n: Begin introducing translator comments for strings which include placeholders but no accompanying translator comment.
2016-11-21 01:22:32 +00:00
feed-rss2.php
Feeds: Always return a valid timestamp for the Last-Modified header of comment or post feeds.
2016-10-25 20:48:29 +00:00
feed-rss.php
Feeds: Always return a valid timestamp for the Last-Modified header of comment or post feeds.
2016-10-25 20:48:29 +00:00
feed.php
General: Check to see that the PHP-XML module is enabled before using XML functions.
2016-10-24 04:45:31 +00:00
formatting.php
I18n: Introduce more translator comments for strings that contain placeholders but don't have an accompanying translator comment.
2016-11-21 02:46:30 +00:00
functions.php
I18n: Begin introducing translator comments for strings which include placeholders but no accompanying translator comment.
2016-11-21 01:22:32 +00:00
functions.wp-scripts.php
Customize: Implement customized state persistence with changesets.
2016-10-18 20:05:31 +00:00
functions.wp-styles.php
…
general-template.php
I18n: Introduce more translator comments for strings that contain placeholders but don't have an accompanying translator comment.
2016-11-21 02:46:30 +00:00
http.php
Multisite: Use get_network() and get_current_network_id() for current network data.
2016-10-19 04:47:30 +00:00
kses.php
…
l10n.php
I18N: In wp_dropdown_languages() rename the new show_site_locale_default argument to show_option_site_default.
2016-11-21 16:14:30 +00:00
link-template.php
Docs: Clarify descriptions for home_url() and get_home_url() on the true effect of the $scheme parameter.
2016-10-31 07:06:32 +00:00
load.php
I18n: Begin introducing translator comments for strings which include placeholders but no accompanying translator comment.
2016-11-21 01:22:32 +00:00
locale.php
Load: No-op locale.php
2016-12-03 04:16:38 +00:00
media-template.php
Media: Clearly indicate that PDF thumbnails are just document previews.
2016-11-13 16:39:31 +00:00
media.php
Media: Fix regression with display of small images in media library.
2016-12-01 00:02:41 +00:00
meta.php
Update link in register_meta about 4.6 changes
2016-11-01 06:54:34 +00:00
ms-blogs.php
Roles/Capabilities: Add a new wp_roles_init filter.
2016-11-02 00:31:32 +00:00
ms-default-constants.php
Multisite: Use get_network() and get_current_network_id() for current network data.
2016-10-19 04:47:30 +00:00
ms-default-filters.php
…
ms-deprecated.php
Multisite: Replace get_blog_details() in inline documentation.
2016-10-26 03:39:29 +00:00
ms-files.php
…
ms-functions.php
I18n: Begin introducing translator comments for strings which include placeholders but no accompanying translator comment.
2016-11-21 01:22:32 +00:00
ms-load.php
Multisite: Replace get_blog_details() in inline documentation.
2016-10-26 03:39:29 +00:00
ms-settings.php
…
nav-menu-template.php
Menus: Add the menu-item-home class to the static front page item.
2016-10-26 01:58:30 +00:00
nav-menu.php
General: Introduce a wp_list_sort() helper function, v2.
2016-10-25 21:26:32 +00:00
option.php
REST API: Register the admin_email setting in single site only.
2016-12-03 05:39:42 +00:00
pluggable-deprecated.php
…
pluggable.php
I18n: Introduce more translator comments for strings that contain placeholders but don't have an accompanying translator comment.
2016-11-21 02:46:30 +00:00
plugin.php
…
post-formats.php
…
post-template.php
Posts, Post Types: Add support for post type templates.
2016-10-26 08:07:30 +00:00
post-thumbnail-template.php
…
post.php
Customize: Defer populating post_name for auto-draft posts in customized state until posts are published.
2016-12-05 19:33:42 +00:00
query.php
…
registration-functions.php
…
registration.php
…
rest-api.php
REST API: Fix incorrect uses of rest_sanitize_value_from_schema().
2016-12-01 02:12:41 +00:00
revision.php
Docs: Improve the documentation for parameters which accept OBJECT, ARRAY_A, and ARRAY_N as parameters.
2016-11-09 23:00:32 +00:00
rewrite.php
…
rss-functions.php
…
rss.php
Docs: Fix multiple trivial typos throughout a variety of core files.
2016-10-31 06:28:32 +00:00
script-loader.php
I18n: Begin introducing translator comments for strings which include placeholders but no accompanying translator comment.
2016-11-21 01:22:32 +00:00
session.php
Load: Re-add session.php.
2016-12-03 03:51:41 +00:00
shortcodes.php
Docs: Add a missing changelog entry for the point where the $tagnames parameter was added to get_shortcode_regex().
2016-11-23 17:35:32 +00:00
taxonomy.php
Docs: Update an @since as there will not be a 4.6.2 before 4.7.
2016-12-04 17:10:43 +00:00
template-loader.php
…
template.php
Posts, Post Types: Add support for post type templates.
2016-10-26 08:07:30 +00:00
theme.php
Customize: Deprecate page_home nav menu item starter content in favor of home_link; replace usage in Twenty Seventeen.
2016-12-10 23:39:43 +00:00
update.php
I18n: Introduce more translator comments for strings that contain placeholders but don't have an accompanying translator comment.
2016-11-21 02:46:30 +00:00
user.php
Users: Clarify the return value of get_current_user_id() for non-logged-in users.
2016-12-04 19:25:16 +00:00
vars.php
…
version.php
REST API: Allow schema sanitization_callback to be set to null to bypass fallback sanitization functions.
2016-12-11 21:26:43 +00:00
widgets.php
I18N: Merge two 'RSS Error:' strings.
2016-11-19 01:56:31 +00:00
wlwmanifest.xml
…
wp-db.php
I18n: Begin introducing translator comments for strings which include placeholders but no accompanying translator comment.
2016-11-21 01:22:32 +00:00
wp-diff.php
…