WordPress/wp-includes
Andrew Nacin ee4ce8688d Escape late in get_avatar().
Built from https://develop.svn.wordpress.org/trunk@29397


git-svn-id: http://core.svn.wordpress.org/trunk@29175 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-08-06 07:50:18 +00:00
..
ID3 Disable external entities in ID3. 2014-08-05 19:14:18 +00:00
SimplePie
Text
certificates WP_HTTP: Update the Root Certificate bundle used for SSL communication by WP_HTTP. 2014-02-27 02:33:14 +00:00
css Media modal/grid: fix the position of attachment icons, restore the background, fix in ie8. See #27423. 2014-08-06 06:29:16 +00:00
fonts Update Dashicons. 2014-04-07 17:52:16 +00:00
images Edit Image modal: 2014-03-27 22:41:14 +00:00
js TinyMCE: add support for `class` attribute on the caption shortcode. Part props knutsp, kadamwhite, fixes #28951. 2014-08-06 00:58:16 +00:00
pomo Introduce a binary-safe wrapper for strlen() and use it in seems_utf8(), utf8_uri_encode(), and wp_read_image_metadata(). 2014-06-23 14:48:14 +00:00
theme-compat Eliminate use of `extract()` in `wp-includes/theme-compat/comments-popup.php`. 2014-05-13 04:40:16 +00:00
admin-bar.php Customizer: Add meta capability `customize` which is mapped to `edit_theme_options`. 2014-07-14 19:01:16 +00:00
atomlib.php First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin. 2013-12-24 18:57:12 +00:00
author-template.php Convert documentation of default arguments in `wp_list_authors()` to the hash-notation style. 2014-06-29 22:34:14 +00:00
bookmark-template.php Add indentation for the hash notation missed in [29108]. 2014-07-11 22:59:16 +00:00
bookmark.php Convert default arguments documentation for `get_bookmarks()` into a hash notation. 2014-07-11 23:03:13 +00:00
cache.php Add periods to short descriptions for magic methods added in [28501], [28521], and [28524]. 2014-07-14 01:12:14 +00:00
canonical.php Canonical redirects should only be applied for GET requests. 2014-07-02 14:11:14 +00:00
capabilities.php Customizer: Add meta capability `customize` which is mapped to `edit_theme_options`. 2014-07-14 19:01:16 +00:00
category-template.php Cleanup for `switch` statements: 2014-05-30 17:58:15 +00:00
category.php Deprecate get_all_category_ids(). Suggest get_terms() as a replacement. 2014-06-05 16:25:14 +00:00
class-IXR.php Allow query strings for servers in IXR_Client and WP_HTTP_IXR_Client. 2014-03-15 05:01:14 +00:00
class-feed.php Add access modifiers to methods/members in `WP_Feed_Cache`, `WP_SimplePie_File`, and `WP_Feed_Cache_Transient`. 2014-05-19 05:27:15 +00:00
class-http.php Convert documentation for default arguments in `WP_Http::request()` to a hash notation. 2014-07-18 22:01:15 +00:00
class-json.php
class-oembed.php Add periods to short descriptions for magic methods added in [28501], [28521], and [28524]. 2014-07-14 01:12:14 +00:00
class-phpass.php First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin. 2013-12-24 18:57:12 +00:00
class-phpmailer.php Update PHPMailer to 5.2.7 from 5.2.4. 2014-03-03 20:25:14 +00:00
class-pop3.php
class-simplepie.php `hackificator` complains if you call `include 'file.php'` without the parens, needs to be `include( 'file.php' )` 2014-05-18 20:52:15 +00:00
class-smtp.php Update PHPMailer to 5.2.7 from 5.2.4. 2014-03-03 20:25:14 +00:00
class-snoopy.php
class-wp-admin-bar.php In `wp-includes/class-wp-admin-bar.php`, `break` is unreachabled after `return`. 2014-05-06 18:29:15 +00:00
class-wp-ajax-response.php Fill out inline documentation for magic methods added to the `WP_Ajax_Response` class in [28524]. 2014-07-13 23:44:14 +00:00
class-wp-customize-control.php Inline documentation cleanup for 4.0 audit. 2014-07-14 00:32:16 +00:00
class-wp-customize-manager.php Customizer: Add meta capability `customize` which is mapped to `edit_theme_options`. 2014-07-14 19:01:16 +00:00
class-wp-customize-section.php Customizer: Add screen reader text to announce that panels and sections are expandable. 2014-07-19 02:37:16 +00:00
class-wp-customize-setting.php Allow for easier adding of custom class variables when extending WP_Customize_Section or WP_Customize_Setting. 2014-06-24 22:56:14 +00:00
class-wp-customize-widgets.php Verify the MAC earlier in WP_Customize_Widgets. props duck_. 2014-08-05 06:50:15 +00:00
class-wp-editor.php wpLink: 2014-07-31 23:28:19 +00:00
class-wp-embed.php Inline documentation cleanup for 4.0 audit. 2014-07-14 00:44:14 +00:00
class-wp-error.php Fill out inline documentation for magic methods added to the `WP_Error` class in [28511]. 2014-07-13 23:42:14 +00:00
class-wp-http-ixr-client.php Add access modifiers to methods/members in `WP_HTTP_IXR_Client`. 2014-05-19 05:51:15 +00:00
class-wp-image-editor-gd.php Revert [28640] as per @DH-Shredder. 2014-08-01 18:43:16 +00:00
class-wp-image-editor-imagick.php Add `->get_quality()` method to `WP_Image_Editor` class. 2014-06-28 03:50:15 +00:00
class-wp-image-editor.php Add `->get_quality()` method to `WP_Image_Editor` class. 2014-06-28 03:50:15 +00:00
class-wp-theme.php Remove redundant 'Visit author homepage' title attributes for plugins and themes. 2014-06-05 04:52:16 +00:00
class-wp-walker.php Add periods to short descriptions for magic methods added in [28501], [28521], and [28524]. 2014-07-14 01:12:14 +00:00
class-wp-xmlrpc-server.php XMLRPC: Switch the file deletion alias to be deleteFile to more closely make uploadFile. 2014-07-20 14:02:15 +00:00
class-wp.php Don't 404 for empty feeds. 2014-07-17 22:22:15 +00:00
class.wp-dependencies.php `WP_Dependencies->recurse_deps()`: tuck the recursion into `elseif` so the `foreach` doesn't break on the first item. 2014-07-20 00:34:15 +00:00
class.wp-scripts.php `WP_Scripts->in_default_dir()` should use the `WPINC` constant 2014-06-29 22:23:15 +00:00
class.wp-styles.php Add missing access modifiers to methods in `WP_Scripts` and `WP_Styles`. 2014-05-19 06:17:14 +00:00
comment-template.php Correct a few `@param` docs for `$walker`. 2014-07-24 22:25:16 +00:00
comment.php Replace `is_https_url()` with `'https' === parse_url( $url, PHP_URL_SCHEME )`. 2014-07-27 17:46:17 +00:00
compat.php Constant time for wp_verify_nonce(). 2014-08-06 05:26:16 +00:00
cron.php Avoid an undefined index notice in wp_reschedule_event(). 2014-08-01 20:57:16 +00:00
date.php WP_Date_Query: The inclusive logic should include all times within the date range. 2014-07-01 01:18:15 +00:00
default-constants.php Revert [28563]. See #18298. 2014-07-09 18:07:16 +00:00
default-filters.php Allow for custom authentication handlers for all requests. 2014-03-09 15:23:15 +00:00
default-widgets.php Remove remaining title attributes from default-widgets.php, with the exception of the one on the link to WordPress.org. fixes #26552. 2014-08-01 17:05:16 +00:00
deprecated.php `LIKE` escape sanity: 2014-06-10 00:30:15 +00:00
feed-atom-comments.php Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed. 2014-07-07 10:18:15 +00:00
feed-atom.php Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed. 2014-07-07 10:18:15 +00:00
feed-rdf.php Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed. 2014-07-07 10:18:15 +00:00
feed-rss.php Revert r25824:25875 from the core.svn.wordpress.org repository. 2013-10-25 02:29:52 +00:00
feed-rss2-comments.php Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed. 2014-07-07 10:18:15 +00:00
feed-rss2.php Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed. 2014-07-07 10:18:15 +00:00
feed.php Force a separator in get_wp_title_rss() if it was inadvertently filtered out by the theme. 2014-06-30 10:11:15 +00:00
formatting.php Formatting: make the removal of white space around <option> greedy, see #28217. 2014-07-28 19:55:16 +00:00
functions.php Clarify that `get_the_date()`, `get_the_time()`, `get_post_time()` and `get_post_modified_time()` should return `false` when `get_post()` is `null`. 2014-08-01 18:40:16 +00:00
functions.wp-scripts.php In `wp_localize_script()`, instantiate the `$wp_scripts` global instead of bailing when it is called before `wp_enqueue_scripts`. This allows `wp_enqueue_media()` to be called on the front end with no JS errors. 2014-06-26 01:38:15 +00:00
functions.wp-styles.php Inline documentation for hooks in wp-includes/functions.wp-styles.php. 2013-10-27 17:59:09 +00:00
general-template.php Clarify that `get_the_date()`, `get_the_time()`, `get_post_time()` and `get_post_modified_time()` should return `false` when `get_post()` is `null`. 2014-08-01 18:40:16 +00:00
http.php Convert documentation for default arguments in `WP_Http::request()` to a hash notation. 2014-07-18 22:01:15 +00:00
kses.php Make wp_kses_no_null() remove any invalid control characters in a string. 2014-07-01 18:01:17 +00:00
l10n.php Inline documentation cleanup for 4.0 audit. 2014-07-14 01:02:15 +00:00
link-template.php Use wp_normalize_path() in plugins_url(). 2014-08-05 01:31:16 +00:00
load.php Improve inline documentation for wp-includes/load.php. 2014-06-04 04:12:17 +00:00
locale.php Better description for WP_Locale::_strings_for_pot(). props dimadin. fixes #25937. 2013-11-13 14:01:09 +00:00
media-template.php Media modal/grid: remove thumbnail resizing from JS, only keep setting number of columns. Props avryl, see #27423. 2014-08-05 05:20:18 +00:00
media.php Avoid PHP notices in Media Library if an attachment parent post type no longer exists. 2014-07-29 01:41:16 +00:00
meta.php Bail on `update_user_meta()` when `$object_id` is non-numeric. 2014-08-01 17:10:15 +00:00
ms-blogs.php Use 3-digit x.x.x style for two 4.0.0 @since versions. 2014-07-29 00:59:16 +00:00
ms-default-constants.php After [29200], switch back to using `static` vars instead of adding 2 `global`s, as per Sergey. 2014-07-19 23:14:15 +00:00
ms-default-filters.php In multisite, on the `updated_option` action, if the option name is one of: 'blogname', 'siteurl', 'post_count' - refresh the blog details cache for the current blog id. 2014-06-28 04:07:16 +00:00
ms-deprecated.php Theme compat: Move <head profile> to <link>. 2014-03-25 17:22:15 +00:00
ms-files.php
ms-functions.php `get_blog_details()->post_count` should update on more actions than just `publish_post`. 2014-06-26 00:53:15 +00:00
ms-load.php Replace all uses of `like_escape()` with `$wpdb->esc_like()`. 2014-06-10 00:44:15 +00:00
ms-settings.php Move ms-load.php and ms-default-constants.php inclusion back to ms-settings.php to avoid breaking WP-CLI. 2014-06-30 23:50:15 +00:00
nav-menu-template.php Correct a few `@param` docs for `$walker`. 2014-07-24 22:25:16 +00:00
nav-menu.php `return false` in `has_nav_menu()` if the `$location` does not exist in the `$_wp_registered_nav_menus` global. 2014-06-26 00:57:15 +00:00
option.php Add blog_id to the `wp-settings-*` cookie (used for storing user state) to prevent it being overloaded on sub-domain sites. Fixes #29095. 2014-08-02 20:09:16 +00:00
pluggable-deprecated.php Reference https://wordpress.org rather than http://wordpress.org in strings, links, comments, etc. 2014-03-03 02:34:27 +00:00
pluggable.php Escape late in get_avatar(). 2014-08-06 07:50:18 +00:00
plugin.php General phpDoc fixes in wp-includes/plugin.php. 2014-06-29 09:19:15 +00:00
post-formats.php Allow has_post_format() to be used to check for any format. 2013-11-24 13:45:10 +00:00
post-template.php Revert [28963]. 2014-07-19 00:26:16 +00:00
post-thumbnail-template.php Revert [27166]. 2014-03-26 18:43:14 +00:00
post.php Unbreak `Media Trash` after [28788]. 2014-08-01 15:15:17 +00:00
query.php Remove a redundant condition for comment feeds from WP_Query::get_posts(). 2014-07-21 15:38:14 +00:00
registration-functions.php
registration.php
revision.php Remove backticks on `$post` variables in some short parameter descriptions. 2014-07-03 19:28:14 +00:00
rewrite.php `WP_Query` was only missing one access modifier. 2014-05-19 17:41:13 +00:00
rss-functions.php Don't rely on include_path to include files. 2013-09-25 00:18:11 +00:00
rss.php
script-loader.php Add blog_id to the `wp-settings-*` cookie (used for storing user state) to prevent it being overloaded on sub-domain sites. Fixes #29095. 2014-08-02 20:09:16 +00:00
session.php WP_Session_Tokens: Can't abstract a static method. 2014-07-18 19:16:15 +00:00
shortcodes.php After [29197], use `! empty()` instead of `isset()`. Don't call `has_shortcode()` internally twice if it's true. 2014-07-17 17:38:13 +00:00
taxonomy.php Use an existing string. 2014-07-18 23:56:14 +00:00
template-loader.php Add jshintrc to qunit. 2013-10-30 14:39:10 +00:00
template.php Revert [28563]. See #18298. 2014-07-09 18:07:16 +00:00
theme.php Fix a typo in the PHPDoc for `get_stylesheet()`. 2014-07-23 05:11:16 +00:00
update.php Add 'Details' links to installed plugins. 2014-07-18 20:49:17 +00:00
user.php Add an action, `pre_get_users`, in `WP_User_Query::prepare_query()`. 2014-08-02 20:46:16 +00:00
vars.php Update the wp-inclues/vars.php file header to include Nginx as a recognized web server. 2014-01-10 18:15:13 +00:00
version.php TinyMCE: add support for `class` attribute on the caption shortcode. Part props knutsp, kadamwhite, fixes #28951. 2014-08-06 00:58:16 +00:00
widgets.php Fix a typo in the PHPDoc for `wp_register_sidebar_widget()`. 2014-07-23 17:21:18 +00:00
wlwmanifest.xml The Pinking Shears stir from their slumber, awakened by what may seem, to those 2013-12-11 19:49:11 +00:00
wp-db.php Add periods to short descriptions for magic methods added in [28501], [28521], and [28524]. 2014-07-14 01:12:14 +00:00
wp-diff.php Fill out inline documentation for magic methods added to the `WP_Text_Diff_Renderer_Table` class in [28525]. 2014-07-13 23:32:14 +00:00