WordPress-C/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2025-02-27 10:08:27 +00:00
Code Issues Packages Projects Releases Wiki Activity
WordPress/wp-includes
History
John Blackbourn ed0c328547 Hardening: Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds. 
Merges [42260] to the 4.6 branch.

Built from https://develop.svn.wordpress.org/branches/4.6@42278


git-svn-id: http://core.svn.wordpress.org/branches/4.6@42107 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-11-29 16:23:06 +00:00
..
certificates
…
css
TinyMCE: fix toolbars alignment in RTL.
2016-08-31 23:43:29 +00:00
customize
Customize: Make the menu edit button look like a link.
2016-08-03 22:47:31 +00:00
fonts
…
ID3
…
images
…
js
TinyMCE: Improve the previews for shortcodes.
2017-09-19 12:42:38 +00:00
pomo
…
random_compat
…
Requests
HTTP: Update Requests to master (0048f3c) which fixes a number of outstanding issues.
2016-10-05 03:27:31 +00:00
rest-api
…
SimplePie
…
Text
…
theme-compat
…
widgets
…
admin-bar.php
…
atomlib.php
…
author-template.php
…
bookmark-template.php
…
bookmark.php
…
cache.php
…
canonical.php
Improve category check in redirect_canonical() when permastruct contains category slug.
2016-08-09 00:13:31 +00:00
capabilities.php
…
category-template.php
…
category.php
…
class-feed.php
…
class-http.php
Improve redirect handling
2017-05-16 08:41:33 +00:00
class-IXR.php
…
class-json.php
…
class-oembed.php
…
class-phpass.php
…
class-phpmailer.php
Update PHPMailer to 5.2.22.
2017-01-11 05:22:39 +00:00
class-pop3.php
…
class-requests.php
HTTP: Update Requests to master (0048f3c) which fixes a number of outstanding issues.
2016-10-05 03:27:31 +00:00
class-simplepie.php
…
class-smtp.php
Update PHPMailer to 5.2.22.
2017-01-11 05:22:39 +00:00
class-snoopy.php
…
class-walker-category-dropdown.php
…
class-walker-category.php
…
class-walker-comment.php
…
class-walker-nav-menu.php
…
class-walker-page-dropdown.php
…
class-walker-page.php
…
class-wp-admin-bar.php
…
class-wp-ajax-response.php
…
class-wp-comment-query.php
Comments: Revert [38497]
2016-09-07 13:41:34 +00:00
class-wp-comment.php
…
class-wp-customize-control.php
…
class-wp-customize-manager.php
Customize: Ensure valid themes in the preview.
2017-09-19 11:51:38 +00:00
class-wp-customize-nav-menus.php
…
class-wp-customize-panel.php
…
class-wp-customize-section.php
…
class-wp-customize-setting.php
Docs: Correct and clarify various @since docs.
2016-08-04 22:56:41 +00:00
class-wp-customize-widgets.php
…
class-wp-editor.php
TinyMCE: fix toolbars alignment in RTL.
2016-08-31 23:43:29 +00:00
class-wp-embed.php
…
class-wp-error.php
…
class-wp-http-cookie.php
HTTP API: Normalize cookies before passing them to Requests.
2016-07-27 15:32:27 +00:00
class-wp-http-curl.php
…
class-wp-http-encoding.php
…
class-wp-http-ixr-client.php
…
class-wp-http-proxy.php
…
class-wp-http-requests-response.php
HTTP API: Normalize cookies before passing them to Requests.
2016-07-27 15:32:27 +00:00
class-wp-http-response.php
…
class-wp-http-streams.php
…
class-wp-image-editor-gd.php
…
class-wp-image-editor-imagick.php
…
class-wp-image-editor.php
…
class-wp-locale.php
…
class-wp-meta-query.php
…
class-wp-metadata-lazyloader.php
…
class-wp-network-query.php
…
class-wp-network.php
…
class-wp-oembed-controller.php
…
class-wp-post-type.php
…
class-wp-post.php
…
class-wp-rewrite.php
…
class-wp-role.php
…
class-wp-roles.php
…
class-wp-site-query.php
…
class-wp-site.php
…
class-wp-tax-query.php
…
class-wp-term-query.php
Taxononmy: Set WP_Term_Query::terms when returning terms from the cache in WP_Term_Query::get_terms().
2016-08-08 13:14:37 +00:00
class-wp-term.php
…
class-wp-theme.php
Themes: Fix markup for theme name fallbacks.
2017-01-11 11:09:35 +00:00
class-wp-user-query.php
…
class-wp-user.php
…
class-wp-walker.php
…
class-wp-widget-factory.php
…
class-wp-widget.php
…
class-wp-xmlrpc-server.php
Adjust post meta checks
2017-05-16 08:49:34 +00:00
class-wp.php
…
class.wp-dependencies.php
…
class.wp-scripts.php
…
class.wp-styles.php
…
comment-template.php
…
comment.php
…
compat.php
…
cron.php
…
date.php
…
default-constants.php
…
default-filters.php
…
default-widgets.php
…
deprecated.php
…
embed-template.php
…
embed.php
oEmbed: Add extra hardening around allowed HTML for improved sandboxing.
2017-09-19 13:49:46 +00:00
feed-atom-comments.php
…
feed-atom.php
…
feed-rdf.php
…
feed-rss2-comments.php
…
feed-rss2.php
…
feed-rss.php
…
feed.php
Hardening: Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds.
2017-11-29 16:23:06 +00:00
formatting.php
Emoji: Update the Twemoji loader to include the rainbow flag.
2016-08-04 20:53:32 +00:00
functions.php
Media: Fix exif_imagetype check in wp_get_image_mime
2017-01-11 16:39:33 +00:00
functions.wp-scripts.php
…
functions.wp-styles.php
…
general-template.php
Hardening: Add escaping to the language attributes used on html elements.
2017-11-29 16:22:33 +00:00
http.php
…
kses.php
…
l10n.php
…
link-template.php
…
load.php
Bootstrap: Check that ini_get_all() exists before calling it, allows us to work around hosts who disable the function for "security purposes".
2016-08-31 06:06:32 +00:00
locale.php
…
media-template.php
…
media.php
…
meta.php
…
ms-blogs.php
Multisite: Remove unnecessary reference parameters.
2016-08-09 18:13:31 +00:00
ms-default-constants.php
…
ms-default-filters.php
…
ms-deprecated.php
…
ms-files.php
…
ms-functions.php
Multisite: Use wp_rand() in signup key creation.
2017-01-11 05:32:07 +00:00
ms-load.php
Docs: Correct and clarify various @since docs.
2016-08-04 22:56:41 +00:00
ms-settings.php
…
nav-menu-template.php
…
nav-menu.php
…
option.php
…
pluggable-deprecated.php
…
pluggable.php
Strip control characters before validating redirect.
2017-03-06 13:41:33 +00:00
plugin.php
Bootstrap/Load: Revert Plugin Global restoration around advance-cache.php.
2016-08-13 16:02:31 +00:00
post-formats.php
…
post-template.php
…
post-thumbnail-template.php
…
post.php
Database: Restore numbered placeholders in wpdb::prepare().
2017-10-31 12:41:33 +00:00
query.php
Query: Ensure that queries work correctly with post type names with special characters.
2017-01-26 13:40:34 +00:00
registration-functions.php
…
registration.php
…
rest-api.php
…
revision.php
Post Thumbnails: Prevent post thumbnail previews from spilling into other images.
2016-08-31 18:44:29 +00:00
rewrite.php
…
rss-functions.php
…
rss.php
…
script-loader.php
TinyMCE: Improve the previews for shortcodes.
2017-09-19 12:42:38 +00:00
session.php
…
shortcodes.php
…
taxonomy.php
In is_object_in_term(), return error object rather than caching it.
2016-08-24 09:20:36 +00:00
template-loader.php
…
template.php
…
theme.php
…
update.php
…
user.php
…
vars.php
…
version.php
Bump 4.6 branch to version 4.6.8.
2017-10-31 13:15:33 +00:00
widgets.php
…
wlwmanifest.xml
…
wp-db.php
WPDB: Check that AUTH_SALT is not empty, Fix a PHP notice when AUTH_SALT is undefined.
2017-11-27 01:09:36 +00:00
wp-diff.php
…