Boone Gorges f345a72c58 Prevent terms in a show_in_quick_edit=false taxonomy from being updated by a faked AJAX request. ...

The UI for these taxonomies was hidden in [31308], but it remained possible to
send a direct POST request to the `inline-edit` endpoint to bypass the
restriction. The current changeset fixes this.

Props meloniq.
Fixes #26948.
Built from https://develop.svn.wordpress.org/trunk@31313


git-svn-id: http://core.svn.wordpress.org/trunk@31294 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2015-01-31 19:38:24 +00:00

..

css

Improve accessibility of nav menu locations form.

2015-01-23 18:18:26 +00:00

images

TwentyFifteen:

2014-11-25 06:12:22 +00:00

includes

Prevent terms in a show_in_quick_edit=false taxonomy from being updated by a faked AJAX request.

2015-01-31 19:38:24 +00:00

js

When updating the name a hierarchical term with Quick Edit, update the corresponding option in the Parent dropdown.

2015-01-29 01:53:22 +00:00

maint

Remove the WordPress logo from the focusable elements on the install/update screens. Fixes #28674. Props stompweb

2014-06-29 14:10:15 +00:00

network

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00

user

Ensure the requires for the admin bootstrap are documented in all wp-admin/user/ files.

2014-11-04 16:32:22 +00:00

about.php

About page: CDN images.

2014-12-18 17:55:22 +00:00

admin-ajax.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

admin-footer.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

admin-functions.php

First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin.

2013-12-24 18:57:12 +00:00

admin-header.php

Add a blank line preceding a Markdown-formatted ordered list in the DocBlock for the admin_body_class filter.

2014-12-06 23:21:24 +00:00

admin-post.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

admin.php

Avoid confusion by clarifying an inline comment on logic for performing multisite upgrades.

2015-01-29 11:53:21 +00:00

async-upload.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

comment.php

Declare $action as a global in wp-admin/comment.php.

2015-01-10 20:42:24 +00:00

credits.php

About page, text only (not released for translation), first pass.

2014-12-11 10:16:22 +00:00

custom-background.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00

custom-header.php

In Custom_Image_Header:

2015-01-10 22:11:22 +00:00

customize.php

Customizer - Widgets: add feedback for screen readers when moving up or down. Props adamsilverstein, afercia. Fixes #28892.

2014-12-07 00:45:24 +00:00

edit-comments.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00

edit-form-advanced.php

In edit-form-advanced.php:

2015-01-10 21:21:22 +00:00

edit-form-comment.php

Pass comment author name and comment ID to 'get_comment_author_link' filter on Edit Comment screen, for consistency with [30092].

2015-01-05 19:10:23 +00:00

edit-link-form.php

In edit-link-form.php, hackificator bails because there is a </form> with no open <form>. It exists, but is needlessly constructed with PHP. It always returns a <form>, only the id and name are different. The dynamic piece just returns the ID now.

2014-05-18 22:07:15 +00:00

edit-tag-form.php

Apply 'taxonomy_parent_dropdown_args' filter when editing terms.

2014-12-29 15:27:22 +00:00

edit-tags.php

Remove inaccurate part of {$taxonomy}_add_form_fields action description.

2015-01-19 15:31:23 +00:00

edit.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00

export.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00

freedoms.php

About page, text only (not released for translation), first pass.

2014-12-11 10:16:22 +00:00

import.php

List tables: Use CSS :nth-child() selectors for zebra striping.

2015-01-14 22:14:22 +00:00

index.php

Ensure inline code is markdown-escaped as such, HTML tags are removed from summaries, and that code snippets in descriptions are properly indented.

2014-11-24 05:39:22 +00:00

install-helper.php

Ensure inline code is markdown-escaped as such, HTML tags are removed from summaries, and that code snippets in descriptions are properly indented.

2014-11-24 05:47:23 +00:00

install.php

Remove duplicate label on installation screen.

2015-01-25 19:39:23 +00:00

link-add.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

link-manager.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00

link-parse-opml.php

Fix syntax for single- and multi-line comments in wp-admin-directory files.

2014-07-17 09:14:16 +00:00

link.php

Fix syntax for single- and multi-line comments in wp-admin-directory files.

2014-07-17 09:14:16 +00:00

load-scripts.php

When outputting JS with a Content-Type header:

2015-01-03 02:57:21 +00:00

load-styles.php

Simplify the setup-config.php UI flow and load process.

2014-07-03 19:57:14 +00:00

media-new.php

Use SSL when linking to WordPress.org. see #27115.

2014-03-08 04:14:15 +00:00

media-upload.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

media.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00

menu-header.php

After [31105], don't ditch the isset() calls for BC. Declare $page_hook as null so it is initialized for all execution paths but will still fail isset() checks.

2015-01-08 22:52:22 +00:00

menu.php

The menu items for users.php and profile.php that require the promote_users cap should be wrapped in an is_multisite() conditional a la user-new.php.

2014-11-30 19:18:23 +00:00

moderation.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-admin.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-delete-site.php

Always decode special characters for email subjects.

2014-03-28 02:44:15 +00:00

ms-edit.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-options.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-sites.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-themes.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-upgrade-network.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

ms-users.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

my-sites.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00

nav-menus.php

Improve accessibility of nav menu locations form.

2015-01-23 18:18:26 +00:00

network.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00

options-discussion.php

Collapse additional avatar settings if avatars are disabled.

2015-01-08 17:01:24 +00:00

options-general.php

Declare $wp_version, $required_php_version, and $required_mysql_version as globals in install and upgrade admin files.

2015-01-10 05:57:22 +00:00

options-head.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

options-media.php

Use SSL when linking to WordPress.org. see #27115.

2014-03-08 04:14:15 +00:00

options-permalink.php

The keyword elseif should be used instead of else if so that all control keywords look like single words.

2015-01-08 07:05:25 +00:00

options-reading.php

Inline <script>s that are only printed in the admin for pages that are served with the HTML5 doctype absolutely do not need CDATA comments.

2015-01-03 05:46:25 +00:00

options-writing.php

Priority fixes for various existing hook documentation.

2014-04-12 00:01:15 +00:00

options.php

Switch to a 403 response code in places where it is more appropriate than a 500 due to permissions errors.

2014-11-16 06:16:22 +00:00

plugin-editor.php

In wp-admin/plugin-editor.php, break is unreachabled after exit.

2014-05-06 18:12:14 +00:00

plugin-install.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

plugins.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00

post-new.php

Admin globals:

2015-01-10 05:29:22 +00:00

post.php

Admin globals:

2015-01-10 05:29:22 +00:00

press-this.php

Inline <script>s that are only printed in the admin for pages that are served with the HTML5 doctype absolutely do not need CDATA comments.

2015-01-03 05:46:25 +00:00

profile.php

Don't rely on include_path to include files.

2013-09-25 00:18:11 +00:00

revision.php

Add a single responsibility function for outputting Revisions JS templates: wp_print_revision_templates().

2014-11-01 00:15:24 +00:00

setup-config.php

iOS: do not autofocus the readonly textarea with the code for wp-config.php in setup-config.php.

2014-12-14 00:11:24 +00:00

theme-editor.php

Inline <script>s that are only printed in the admin for pages that are served with the HTML5 doctype absolutely do not need CDATA comments.

2015-01-03 05:46:25 +00:00

theme-install.php

Pinking Shears.

2015-01-08 05:03:23 +00:00

themes.php

Remove a stray $ from [30793].

2014-12-09 11:27:22 +00:00

tools.php

Use SSL when linking to WordPress.org. see #27115.

2014-03-08 04:14:15 +00:00

update-core.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

update.php

Docs Formatting: Backtick-escape inline code for all dynamic hook docs in wp-admin/*.

2014-11-30 11:42:24 +00:00

upgrade-functions.php

First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin.

2013-12-24 18:57:12 +00:00

upgrade.php

Declare $wp_version, $required_php_version, and $required_mysql_version as globals in install and upgrade admin files.

2015-01-10 05:57:22 +00:00

upload.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00

user-edit.php

Revert [30027]. These fields are already sufficiently labeled; duplicate labels can lead to confused behavior for screen readers.

2015-01-25 18:33:22 +00:00

user-new.php

Add New User: Remove trailing whitespace from button labels.

2015-01-29 14:54:21 +00:00

users.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00

widgets.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00