davidbaumwald
d62faec090
Grouped backports to the 5.7 branch. ...
- Comments: Prevent users who can not see a post from seeing comments on it.
- Shortcodes: Restrict media shortcode ajax to certain type.
- REST API: Ensure no-cache headers are sent when methods are overridden.
- REST API: Limit `search_columns` for users without `list_users`.
- Prevent unintended behavior when certain objects are unserialized.
- Application Passwords: Prevent the use of some pseudo protocols in application passwords.
Merges [56833], [56834], [56835], [56836], [56837], and [56838] to the 5.7 branch.
Props xknown, jorbin, Vortfu, joehoyle, timothyblynjacobs, peterwilsoncc, ehtis, tykoted, martinkrcho, paulkevan, dd32, antpb, rmccue.
Built from https://develop.svn.wordpress.org/branches/5.7@56886
git-svn-id: http://core.svn.wordpress.org/branches/5.7@56397 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2023-10-12 18:32:46 +00:00
2020-07-09 23:29:08 +00:00
2020-02-06 06:33:11 +00:00
2023-10-12 18:32:46 +00:00
2020-11-03 03:52:10 +00:00
2020-11-14 16:23:10 +00:00
2020-11-09 10:53:10 +00:00
2020-11-09 10:53:10 +00:00
2019-09-15 10:42:54 +00:00
2021-01-30 10:34:02 +00:00
2020-10-29 18:09:13 +00:00
2021-02-02 16:53:04 +00:00
2020-01-29 00:45:18 +00:00
2019-11-01 14:57:02 +00:00
2019-11-01 14:57:02 +00:00
2020-06-03 17:40:12 +00:00
2020-11-09 10:53:10 +00:00
2020-10-05 13:44:11 +00:00
2021-02-16 18:42:03 +00:00
2020-11-21 12:08:05 +00:00
2020-11-09 10:53:10 +00:00
2020-12-10 23:38:04 +00:00
2020-11-21 12:08:05 +00:00
2020-11-09 10:53:10 +00:00
2020-12-10 23:38:04 +00:00
2020-10-18 20:53:08 +00:00
2021-01-05 17:16:11 +00:00
2020-06-17 19:47:14 +00:00
2020-11-14 16:23:10 +00:00
2020-12-03 21:06:08 +00:00
2020-10-20 18:31:07 +00:00
2023-10-12 18:32:46 +00:00
2021-01-04 17:18:04 +00:00
2020-12-27 19:27:06 +00:00
2021-01-05 17:16:11 +00:00
2021-01-05 17:16:11 +00:00
2021-01-05 17:16:11 +00:00
2021-01-05 17:16:11 +00:00
2021-01-05 17:16:11 +00:00
2020-10-18 19:19:06 +00:00
2020-01-29 00:45:18 +00:00
2021-02-01 14:13:00 +00:00
2020-11-14 16:54:08 +00:00
2023-10-12 18:32:46 +00:00
2021-01-29 18:54:01 +00:00
2020-10-18 20:53:08 +00:00
2020-11-12 20:42:10 +00:00
2020-10-17 16:05:09 +00:00
2020-09-11 01:05:08 +00:00
2020-11-17 16:48:09 +00:00
2018-08-17 01:51:36 +00:00
2021-02-01 14:13:00 +00:00
2020-10-20 21:20:07 +00:00
2020-10-20 21:20:07 +00:00
2021-03-26 20:32:04 +00:00
2021-02-02 16:44:04 +00:00
2021-01-08 14:30:14 +00:00
2021-01-30 10:34:02 +00:00
2021-04-14 13:15:05 +00:00
2021-02-02 16:53:04 +00:00
2021-01-07 16:23:07 +00:00
2021-01-10 19:37:06 +00:00
2020-07-21 16:33:05 +00:00
2020-11-21 12:08:05 +00:00
2019-10-08 17:19:04 +00:00
2021-02-02 17:31:05 +00:00
2021-02-05 14:43:03 +00:00
2020-11-09 15:15:08 +00:00
2018-07-18 11:21:25 +00:00
2020-08-03 12:53:08 +00:00
2023-10-12 18:32:46 +00:00
2021-01-24 13:59:58 +00:00
2019-07-01 12:52:01 +00:00
2021-01-25 00:09:59 +00:00
2021-02-02 17:23:06 +00:00
2021-01-03 22:04:04 +00:00
2021-03-19 02:13:05 +00:00
2021-01-05 17:16:11 +00:00
2021-01-03 22:04:04 +00:00
2021-02-09 12:34:06 +00:00
2020-05-23 11:38:08 +00:00
2020-10-17 16:05:09 +00:00
2021-01-26 18:54:59 +00:00
2020-01-29 00:35:08 +00:00
2019-09-03 00:41:05 +00:00
2021-02-22 19:18:12 +00:00
2020-10-23 15:05:09 +00:00
2021-01-05 17:16:11 +00:00
2019-09-20 20:46:56 +00:00
2021-01-22 12:32:03 +00:00
2020-10-17 14:54:05 +00:00
2021-02-22 19:18:12 +00:00
2022-10-17 17:55:21 +00:00
2021-02-05 15:50:05 +00:00
2021-02-01 22:03:01 +00:00
2020-11-12 20:22:09 +00:00
2020-07-23 00:52:05 +00:00
2021-01-03 22:04:04 +00:00
2021-01-05 17:16:11 +00:00
2020-07-19 17:11:02 +00:00
2021-02-22 19:18:12 +00:00
2021-01-03 22:04:04 +00:00
2021-03-08 19:05:07 +00:00
2021-02-01 14:29:01 +00:00
2022-01-06 17:56:05 +00:00
2023-10-12 18:32:46 +00:00
2020-10-09 15:53:08 +00:00
d62faec090