desrosj dc03144cd7 Grouped backports to the 4.4 branch. ...

- Query: Improve sanitization within `WP_Tax_Query`.
- Query: Improve sanitization within `WP_Meta_Query`.
- Upgrade/Install: Avoid using `unserialize()` unnecessarily.
- Formatting: Correctly encode ASCII characters in post slugs.

Merges [52454-52457] to the 4.4 branch.
Props vortfu, dd32, ehtis, zieladam, whyisjake, xknown, peterwilsoncc, desrosj, iandunn.
Built from https://develop.svn.wordpress.org/branches/4.4@52479


git-svn-id: http://core.svn.wordpress.org/branches/4.4@52071 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2022-01-06 18:19:21 +00:00

..

admin-filters.php

Docs: wp-admin/includes/admin-filters.php is part of the Administration subpackage, update the summary.

2015-10-14 22:35:24 +00:00

admin.php

Avoid potential fatal errors after [35718].

2015-11-25 22:19:26 +00:00

ajax-actions.php

Escape the output in wp_ajax_upload_attachment().

2019-09-04 16:38:22 +00:00

bookmark.php

Docs: Fix third-person singular verbs for summaries in wp-admin/includes/bookmarks.php.

2015-10-14 23:25:25 +00:00

class-ftp-pure.php

Updates: FTP/PemFTP Library: Remove the usage of deprecated regular expression functions (ereg replaced by PCRE).

2015-09-18 08:20:27 +00:00

class-ftp-sockets.php

Updates: FTP/PemFTP Library: Remove the usage of deprecated regular expression functions (ereg replaced by PCRE).

2015-09-18 08:20:27 +00:00

class-ftp.php

Updates: FTP: Add a missing PCRE modifer in [34281].

2015-09-18 08:23:25 +00:00

class-pclzip.php

Deprecate php4 style constructors

2015-06-28 15:27:24 +00:00

class-walker-category-checklist.php

Docs: Clarify the file header summary for wp-admin/includes/class-walker-category-checklist.php, introduced in [34241].

2015-09-22 14:33:48 +00:00

class-walker-nav-menu-checklist.php

Docs: Walker_Nav_Menu_Checklist and Walker_Nav_Menu_Edit are part of the Navigation Menu API, but intended for use in the scope of administration.

2015-10-15 17:26:24 +00:00

class-walker-nav-menu-edit.php

Nav Menus: show custom post type Archive item at the top of the View All tab for the post type on the legacy Nav Menu screen.

2015-10-24 17:46:25 +00:00

class-wp-comments-list-table.php

In a similar vein to [34133], escape the email address and IP address of comment authors to increase defence in depth.

2015-11-29 02:43:24 +00:00

class-wp-filesystem-base.php

I18N: Add translator comments for strings in wp-admin/includes/class-wp-filesystem-base.php.

2015-11-18 17:21:26 +00:00

class-wp-filesystem-direct.php

Add @access docs to class-wp-filesystem-* files.

2015-09-10 01:21:24 +00:00

class-wp-filesystem-ftpext.php

Filesystem: Revert [33648] and [34733] unfortunately these have caused issues for some servers, while fixing it for others.

2015-12-15 02:37:26 +00:00

class-wp-filesystem-ftpsockets.php

Filesystem: Revert [33648] and [34733] unfortunately these have caused issues for some servers, while fixing it for others.

2015-12-15 02:37:26 +00:00

class-wp-filesystem-ssh2.php

I18N: Add translator comments for strings in wp-admin/includes/class-wp-filesystem-ftpext.php.

2015-11-18 17:22:27 +00:00

class-wp-importer.php

Docs: Add missing descriptions for the $wpdb global in DocBlocks all the places.

2015-10-14 23:44:25 +00:00

class-wp-internal-pointers.php

Docs: Clarify the file header summary for wp-admin/includes/class-wp-internal-pointers.php, introduced in [34241].

2015-09-22 14:35:25 +00:00

class-wp-links-list-table.php

Docs: Add missing file headers to the list table classes and adjust class DocBlocks accordingly.

2015-10-17 15:13:25 +00:00

class-wp-list-table.php

List Tables: Revert [34728] and [35482].

2015-12-07 20:08:26 +00:00

class-wp-media-list-table.php

Admin: Escape attachment name in case it contains special characters

2016-06-21 14:24:27 +00:00

class-wp-ms-sites-list-table.php

Docs: Add missing file headers to the list table classes and adjust class DocBlocks accordingly.

2015-10-17 15:13:25 +00:00

class-wp-ms-themes-list-table.php

Docs: Add missing file headers to the list table classes and adjust class DocBlocks accordingly.

2015-10-17 15:13:25 +00:00

class-wp-ms-users-list-table.php

Docs: Add missing file headers to the list table classes and adjust class DocBlocks accordingly.

2015-10-17 15:13:25 +00:00

class-wp-plugin-install-list-table.php

Add Nonce to updating wporg_favorites user meta field

2016-03-30 18:41:26 +00:00

class-wp-plugins-list-table.php

General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.

2017-09-19 12:13:31 +00:00

class-wp-post-comments-list-table.php

Docs: Add missing file headers to the list table classes and adjust class DocBlocks accordingly.

2015-10-17 15:13:25 +00:00

class-wp-posts-list-table.php

Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field.

2017-01-26 14:15:28 +00:00

class-wp-press-this.php

Press This: Verify intent before fetching in-page resources using Press This.

2017-03-06 14:02:34 +00:00

class-wp-screen.php

Multisite: Validate activation links.

2018-12-13 01:47:21 +00:00

class-wp-site-icon.php

Site Icon: Get site icon ID only when needed.

2015-10-20 18:23:44 +00:00

class-wp-terms-list-table.php

Accessibility: improvements for the taxonomies Quick Edit form.

2015-11-11 00:24:28 +00:00

class-wp-theme-install-list-table.php

Accessibility: add missing alt attributes to a gaggle of <img>s.

2015-11-07 16:12:27 +00:00

class-wp-themes-list-table.php

Docs: Add missing file headers to the list table classes and adjust class DocBlocks accordingly.

2015-10-17 15:13:25 +00:00

class-wp-upgrader-skins.php

Bump H4 headings to H2 in the Updates screen for better accessibility.

2015-10-16 15:45:28 +00:00

class-wp-upgrader.php

Upgrade/Install: Sanitize file name in File_Upload_Upgrader.

2016-09-06 17:49:40 +00:00

class-wp-users-list-table.php

Docs: Add missing file headers to the list table classes and adjust class DocBlocks accordingly.

2015-10-17 15:13:25 +00:00

comment.php

Docs: Add a version to the file header for wp-admin/includes/comment.php.

2015-10-18 14:34:25 +00:00

continents-cities.php

Docs: Add a proper file header to wp-admin/includes/continents-cities.php.

2015-10-22 19:43:25 +00:00

credits.php

Move ad hoc functions from wp-admin/credits.php to wp-admin/includes/credits.php, which is only included by the former.

2015-09-11 04:55:26 +00:00

dashboard.php

Don't use <a> in translatable strings in `wp-admin/includes/dashboard.php'.

2015-10-30 01:33:25 +00:00

deprecated.php

Docs: Add missing method summaries for the deprecated WP_User_Search class, including prepare_query(), query(), prepare_vars_for_template_usage(), do_paging(), and get_results().

2015-10-05 02:35:25 +00:00

edit-tag-messages.php

Don't redirect to the Term list table after submitting the form on the Edit Term page.

2015-09-15 15:59:42 +00:00

export.php

Docs: Add missing descriptions for the $wpdb global in DocBlocks all the places.

2015-10-14 23:44:25 +00:00

file.php

Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues.

2017-09-19 14:42:01 +00:00

image-edit.php

Accessibility: add missing alt attributes to a gaggle of <img>s.

2015-11-07 16:12:27 +00:00

image.php

Media: In wp_read_image_metadata() make sure that IPTC keywords are UTF8 encoded.

2016-02-01 14:58:28 +00:00

import.php

callback is not a valid type in PHP, PSR-5, or phpDocumentor. callable should be used instead.

2015-09-25 23:58:25 +00:00

list-table.php

List Tables: in _WP_List_Table_Compat::get_column_info(), also return $primary, which is expected since [33016].

2015-10-07 03:12:24 +00:00

media.php

General: WordPress updates

2020-10-29 19:04:23 +00:00

menu.php

Admin Menu: after [34861], prevent adjacent separators.

2015-10-28 18:06:24 +00:00

meta-boxes.php

Accessibility: Improve form labels and descriptions for the Tags meta box in the Edit Post screen.

2015-11-11 15:24:29 +00:00

misc.php

Administration: Pass the result of set-screen-option filter to the new set_screen_option_{$option} filter to ensure backward compatibility.

2020-07-01 09:52:16 +00:00

ms-admin-filters.php

Docs: Add a @subpackage tag to the file header for wp-admin/includes/ms-admin-filters.php.

2015-10-26 18:06:26 +00:00

ms-deprecated.php

Docs: Standardize the file header for wp-admin/includes/ms-deprecated.php.

2015-10-27 20:08:27 +00:00

ms.php

General: WordPress updates

2020-10-29 19:04:23 +00:00

nav-menu.php

Do not pass FALSE as second parameter in variable class_exists() checks

2015-11-30 04:15:27 +00:00

network.php

Remove <code> tags from translatable strings in wp-admin/includes/network.php.

2015-11-06 00:59:25 +00:00

noop.php

Create a new file, wp-admin/includes/noop.php, which loads all of the noop functions for load-script|styles.php and is only loaded by those files. DRYs in the process.

2015-09-11 05:04:23 +00:00

options.php

Revert [35336] and [35337].

2015-11-18 20:30:25 +00:00

plugin-install.php

Add Nonce to updating wporg_favorites user meta field

2016-03-30 18:41:26 +00:00

plugin.php

Docs: Improve DocBlock formatting for add_menu_page() and add_submenu_page() wrappers.

2015-11-23 17:56:26 +00:00

post.php

Editor: Remove unwanted fields before saving posts.

2018-12-13 01:49:19 +00:00

revision.php

Docs: Add a version to the file header for wp-admin/includes/revision.php.

2015-10-24 18:29:25 +00:00

schema.php

Upgrade: New themes are not automatically installed on upgrade. This can still be explicitly asked for by defining CORE_UPGRADE_SKIP_NEW_BUNDLED as false.

2015-11-25 21:45:25 +00:00

screen.php

List Tables: When a user has hidden all columns, do not override that with the default_hidden_columns filter.

2016-01-02 04:45:22 +00:00

taxonomy.php

Docs: There are quite alot of typos in core inline comments.

2015-09-30 04:13:48 +00:00

template.php

General: WordPress updates

2020-10-29 19:04:23 +00:00

theme-install.php

Add doc blocks to functions that are missing them.

2015-05-31 03:18:25 +00:00

theme.php

Docs: Replace a reference to WP.org with WordPress.org.

2015-11-22 22:38:26 +00:00

translation-install.php

Use wp_installing() instead of WP_INSTALLING constant.

2015-10-05 15:06:28 +00:00

update-core.php

External Libraries: Remove unnecessary / obsoleted MediaElement.js files.

2018-01-16 08:09:32 +00:00

update.php

Revert [34778], continue using _site_option() for the current network.

2015-10-07 17:11:25 +00:00

upgrade.php

Grouped backports to the 4.4 branch.

2022-01-06 18:19:21 +00:00

user.php

Use 'invalid_username' error code when tripping 'illegal_user_logins'.

2015-12-04 23:25:26 +00:00

widgets.php

Accessibility: bump headings one level up on the Appearance > Widgets screen for a better headings hierarchy.

2015-10-10 16:34:25 +00:00