36325 Commits

Author SHA1 Message Date
Jonathan Desrosiers
72beb1469d Build/Test Tools: Use Git when fetching the WordPress Importer for use in tests.
Some checks are pending
Coding Standards / JavaScript coding standards (push) Waiting to run
Coding Standards / Slack Notifications (push) Blocked by required conditions
Coding Standards / Failed workflow tasks (push) Blocked by required conditions
JavaScript Tests / QUnit Tests (push) Waiting to run
JavaScript Tests / Slack Notifications (push) Blocked by required conditions
JavaScript Tests / Failed workflow tasks (push) Blocked by required conditions
PHPUnit Tests / PHP 5.3 (push) Waiting to run
PHPUnit Tests / PHP 5.4 (push) Waiting to run
PHPUnit Tests / PHP 5.5 (push) Waiting to run
PHPUnit Tests / PHP 5.6 (push) Waiting to run
PHPUnit Tests / PHP 7.0 (push) Waiting to run
PHPUnit Tests / PHP 7.1 (push) Waiting to run
PHPUnit Tests / Slack Notifications (push) Blocked by required conditions
PHPUnit Tests / Failed workflow tasks (push) Blocked by required conditions
Test Build Processes / Core running from build (push) Waiting to run
Test Build Processes / Slack Notifications (push) Blocked by required conditions
Test Build Processes / Failed workflow tasks (push) Blocked by required conditions
This switches to using Git in the local Docker environment install script to check out a copy of the WordPress Importer plugin for use in unit tests.

Previously, SVN was used and the commands were not correctly run within the Docker container. The container does not actually have SVN installed, and the script was only working when the machine running the command had SVN present.

Merges [51179] to the 4.7 branch.
Reviewed by swissspidy.

Props czapla, alexstine, jnylen0, francina, desrosj.
See #52909.
See #62280.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@59625 602fd350-edb4-49c9-b593-d223f7449a82
2025-01-15 16:18:12 +00:00
Jonathan Desrosiers
529ba11c3b Build/Test Tools: Make use of new reusable workflows for 4.7.
This updates the 4.7 branch to utilize the new reusable workflows in trunk introduced in [58165].

This also includes backports for a some additional improvements and bug fixes that are necessary for the local development environment to continue working long term:

- The image and platform properties for the mysql container have been updated to always prefer `amd64` containers (#60822).
- `macos-13` is now pinned for MacOS jobs instead of `macos-latest` (#61340).
- Migrating to Docker Compose V2 (#60901).
- Removing the version property from docker-compose.yml (#59416).
- Improvements to how artifacts and comments for Playground testing are generated.
- Removing SVN related commands causing failures (#61216).
- Updating the `actions/github-scripts` action to the latest version.
- Improvements to the `healthcheck` command for the `mysql` container (#58867).

Merges [51673], [53552], [56464], [57918], [58157], [57124], [57125], [57249] to the 4.7 branch.

Props johnbillion, joemcgill, swissspidy, thelovekesh, narenin, mukesh27, JeffPaul, peterwilsoncc, zieladam, ockham, SergeyBiryukov, jorbin, Clorith, afragen, jrf.
See #58867, #61340, #60822, #61216, #60901, #61101, #59416, #59805, #61213.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@58638 602fd350-edb4-49c9-b593-d223f7449a82
2024-07-03 14:40:41 +00:00
Jb Audras
36a45bff15 WordPress 4.7.29.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@58521 602fd350-edb4-49c9-b593-d223f7449a82
2024-06-24 16:33:08 +00:00
Jb Audras
554853ea0b Editor: Fix Path Traversal issue on Windows in Template-Part Block.
Merges [58470] to the 4.7 branch.
Props xknown, jorbin.




git-svn-id: https://develop.svn.wordpress.org/branches/4.7@58495 602fd350-edb4-49c9-b593-d223f7449a82
2024-06-24 15:46:05 +00:00
Sergey Biryukov
66e3bd6362 Tests: Use an image on WordPress.org CDN in external HTTP tests.
Due to some changes on the WP.com side to compress the requested images on the fly, the exact image size in the response could be different between platforms.

This commit aims to make the affected tests more reliable.

Follow-up to [139/tests], [31258], [34568], [47142], [57903], [57904], [57924].

Merges [57931] to the 4.7 branch.

Props peterwilsoncc, jorbin.
See #60865.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@58006 602fd350-edb4-49c9-b593-d223f7449a82
2024-04-15 16:53:55 +00:00
Aaron Jorbin
9cee6484e8 General: Backport polyfills for str_ends_with() and str_starts_with().
Uses src/wp-includes/functions.php becouse commiting to src/wp-includes/compat.php fails due to the presence of __autoload.

Merges [52040], [56016], and [56015] to 4.7 branch.

Props ocean90, SergeyBiryukov, desrosj, joemcgill, jorbin, mukesh27.


git-svn-id: https://develop.svn.wordpress.org/branches/4.7@57452 602fd350-edb4-49c9-b593-d223f7449a82
2024-01-30 18:03:42 +00:00
Joe McGill
a074589b10 WordPress 4.7.28.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@57421 602fd350-edb4-49c9-b593-d223f7449a82
2024-01-30 16:14:31 +00:00
Aaron Jorbin
f8e79594be Grouped Backports to the 4.7 branch.
- Install: When populating options, maybe_serialize instead of always serialize.
- Uploads: Check for and verify ZIP archives.

Merges [57388] and [57389] to the 4.7 branch.

Props costdev, peterwilsoncc, azaozz, tykoted, johnbillion, desrosj, afragen, jorbin, xknown.


git-svn-id: https://develop.svn.wordpress.org/branches/4.7@57408 602fd350-edb4-49c9-b593-d223f7449a82
2024-01-30 15:06:32 +00:00
Jb Audras
dfe99f9666 WordPress 4.7.27.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@56868 602fd350-edb4-49c9-b593-d223f7449a82
2023-10-12 14:55:26 +00:00
David Baumwald
c0a983109f Grouped backports to the 4.7 branch.
- Comments: Prevent users who can not see a post from seeing comments on it.
- Shortcodes: Restrict media shortcode ajax to certain type.
- REST API: Ensure no-cache headers are sent when methods are overridden.
- REST API: Limit `search_columns` for users without `list_users`.
- Prevent unintended behavior when certain objects are unserialized.

Merges [56834], [56835], [56836], [56838], and [56840] to the 4.7 branch.
Props xknown, jorbin, joehoyle, timothyblynjacobs, peterwilsoncc, ehtis, tykoted, antpb, rmccue.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@56862 602fd350-edb4-49c9-b593-d223f7449a82
2023-10-12 14:48:17 +00:00
Sergey Biryukov
356867fd80 Grouped backports to the 4.7 branch.
- Media: Prevent CSRF setting attachment thumbnails.
- Embeds: Add protocol validation for WordPress Embed code.

Merges [55763] and [55764] to the 4.7 branch.
Props dd32, isabel_brison, martinkrcho, matveb, ocean90, paulkevan, peterwilsoncc, timothyblynjacobs, xknown, youknowriad.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@55784 602fd350-edb4-49c9-b593-d223f7449a82
2023-05-16 15:46:57 +00:00
Jonathan Desrosiers
0b93c3bb2b Build/Test Tools: Backport updates to GitHub Actions.
This backports several changesets to GitHub Actions workflows. These changesets:

- address the deprecated notices related to save-output and set-output to ensure the workflows continue to run after these are removed.
- adds support for automatically retrying a failed workflow once.
- removes workflow files that are not applicable to the branch.
- backports some Docker environment related tooling updates for the sake of consistency across branches. 

Merges [53736], [53737], [53940], [53947], [54039], [54096], [54108], [54293], [54313], [54342], [54343], [54373], [54511], [54650], [54651], [54674], [54750], [54852], [55152], [54651], [55487] to the 4.7 branch.
See #55652, #56407, #56528, #54695, #56820, #56816, #56793, #56820, #57572.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@55529 602fd350-edb4-49c9-b593-d223f7449a82
2023-03-10 16:29:18 +00:00
Peter Wilson
efdedcb354 I18N: Add new strings to about.php for use with end-of-life updates.
This changeset adds two additional translation strings in the changelog file, for use when releasing the final version of WordPress on a particular branch.

Props peterwilsoncc, audrasjb, mukesh27.
Merges [55350] to the 4.7 branch.
Fixes #57216.


git-svn-id: https://develop.svn.wordpress.org/branches/4.7@55385 602fd350-edb4-49c9-b593-d223f7449a82
2023-02-21 03:07:20 +00:00
Peter Wilson
9fe93c8f58 Built/Test tools, HTTP API: Refactor test for multiple location headers.
Remove wordpress.org as an external dependency testing `WP_HTTP::handle_redirects()`.

This refactors and reenables an existing test to call the `WP_HTTP::handle_redirects()` method directly with a mocked array of HTTP headers containing multiple location headers.

The test is moved from the external-http group to the http test group as it no longer makes an HTTP request.

Follow up to [54955].

Props SergeyBiryukov, dd32, peterwilsoncc.
Merges [54968] to the 4.7 branch.
Fixes #57306.
See #56793.



git-svn-id: https://develop.svn.wordpress.org/branches/4.7@54988 602fd350-edb4-49c9-b593-d223f7449a82
2022-12-15 04:45:11 +00:00
Sergey Biryukov
7a84b80054 WordPress 4.7.25.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@54592 602fd350-edb4-49c9-b593-d223f7449a82
2022-10-17 19:50:59 +00:00
Sergey Biryukov
5bce1e6b7f Grouped backports to the 4.7 branch.
- Posts, Post types: Apply KSES to post-by-email content,
- General: Validate host on "Are you sure?" screen,
- Posts, Post types: Remove emails from post-by-email logs,
- Media: Refactor search by filename within the admin,
- Pings/trackbacks: Apply KSES to all trackbacks,
- Comments: Apply kses when editing comments,
- Customize: Escape blogname option in underscores templates,
- REST API: Lockdown post parameter of the terms endpoint,
- Mail: Reset PHPMailer properties between use,
- Query: Validate relation in `WP_Date_Query`,
- Widgets: Escape RSS error messages for display.

Merges [54521], [54522], [54523], [54524], [54525], [54526], [54527], [54528], [54529], [54530], [54541] to the 4.7 branch.
Props voldemortensen, johnbillion, paulkevan, peterwilsoncc, xknown, dd32, audrasjb, martinkrcho, vortfu, davidbaumwald, tykoted, timothyblynjacobs, johnjamesjacoby, ehtis, matveb, talldanwp.


git-svn-id: https://develop.svn.wordpress.org/branches/4.7@54566 602fd350-edb4-49c9-b593-d223f7449a82
2022-10-17 18:08:39 +00:00
Peter Wilson
83b0cc9009 Security: Introduce strings to indicate support status.
Add strings for use in future maintenance/security releases to indicate the security support status of the version of WordPress.

Two strings are introduced:

* indicating the version of WordPress is not receiving security updates, and,
* indicating the version of WordPress will shortly stop receiving security updates.

This change does not make use of the strings, the purpose is to make them available to translators prior to dropping support of selected versions of WordPress.

Props costdev, chesio, robinwpdeveloper, desrosj, rudlinkon, mukesh27, sumitbagthariya16.
Merges [54322] to the 4.7 branch.
See #56532.


git-svn-id: https://develop.svn.wordpress.org/branches/4.7@54453 602fd350-edb4-49c9-b593-d223f7449a82
2022-10-10 22:08:09 +00:00
Jonathan Desrosiers
6c7764b636 WordPress 4.7.24.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@54000 602fd350-edb4-49c9-b593-d223f7449a82
2022-08-30 17:27:32 +00:00
Sergey Biryukov
2bc4ec0438 Grouped backports to the 4.7 branch.
- Posts, Post Types: Escape output within `the_meta()`.
- General: Ensure bookmark query limits are numeric.
- Plugins: Escape output in error messages.

Merges [53958-53960] to the 4.7 branch.
Props tykoted, martinkrcho, xknown, dd32, peterwilsoncc, paulkevan, timothyblynjacobs.


git-svn-id: https://develop.svn.wordpress.org/branches/4.7@53976 602fd350-edb4-49c9-b593-d223f7449a82
2022-08-30 15:45:59 +00:00
Jonathan Desrosiers
37350954bb Build/Test Tools: Use the Slack notifications workflow as a reusable one.
This backports several changesets that are required to remove the reliance on the `workflow_run` event for posting Slack notifications.

The Slack notification workflow will now be called as a reusable one, which has several benefits (see [53591]).

Several other minor GitHub Actions related updates are also being backported in this commit to maintain tooling consistency across branches that still receive security updates as a courtesy when necessary.

Workflows that are not relevant to this branch that were mistakenly backported are also being deleted.

Merges [50473], [50704], [50796], [50930], [51341], [51355], [51498], [51511], [51535], [51924], [51925], [51937], [52002], [52130], [52183], [52233], [53112], [53581], [53582], [53592] to the 4.7 branch.
See #56095.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@53614 602fd350-edb4-49c9-b593-d223f7449a82
2022-06-30 17:17:51 +00:00
David Baumwald
df4ee7c6b1 WordPress 4.7.23.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@52884 602fd350-edb4-49c9-b593-d223f7449a82
2022-03-10 22:10:40 +00:00
Sergey Biryukov
8728b15c06 External Librairies: Update jQuery.query to version 2.2.3.
This updates the "jquery-query" library from version 2.1.7 to 2.2.3.

Props jorbin, peterwilsoncc, xknown, audrasjb, jorgefilipecosta.
Merges [52844] to the 4.7 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@52859 602fd350-edb4-49c9-b593-d223f7449a82
2022-03-10 21:31:48 +00:00
Jonathan Desrosiers
e1e878dfed WordPress 4.7.22.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@52498 602fd350-edb4-49c9-b593-d223f7449a82
2022-01-06 18:45:56 +00:00
Jonathan Desrosiers
01caa72206 Grouped backports to the 4.7 branch.
- Query: Improve sanitization within `WP_Tax_Query`.
- Query: Improve sanitization within `WP_Meta_Query`.
- Upgrade/Install: Avoid using `unserialize()` unnecessarily.
- Formatting: Correctly encode ASCII characters in post slugs.

Merges [52454-52457] to the 4.7 branch.
Props vortfu, dd32, ehtis, zieladam, whyisjake, xknown, peterwilsoncc, desrosj, iandunn.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@52476 602fd350-edb4-49c9-b593-d223f7449a82
2022-01-06 18:15:28 +00:00
Sergey Biryukov
a3b1bac1e5 Date/Time: Use delta comparison in get_gmt_from_date() tests to avoid race conditions.
Follow-up to [35284].

Props keesiemeijer.
Merges [41920] to the 4.7 branch.
See #38815.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@51613 602fd350-edb4-49c9-b593-d223f7449a82
2021-08-15 13:37:58 +00:00
Peter Wilson
31e43299fd WordPress 4.7.21.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@50879 602fd350-edb4-49c9-b593-d223f7449a82
2021-05-12 23:18:29 +00:00
Peter Wilson
ca17bcbf27 External libraries: Improve attachment handling in PHPMailer
Props: audrasjb, ayeshrajans, desrosj, peterwilsoncc, xknown.
Partially merges [50799] to the 4.7 branch.



git-svn-id: https://develop.svn.wordpress.org/branches/4.7@50857 602fd350-edb4-49c9-b593-d223f7449a82
2021-05-12 22:30:40 +00:00
Peter Wilson
0bc801b6a4 Version bump for 4.7.20.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@50746 602fd350-edb4-49c9-b593-d223f7449a82
2021-04-15 01:39:12 +00:00
Peter Wilson
e52b89f94b Grouped merges for 4.7.20.
* REST API: Allow authors to read their own password protected posts.
* About page update

Merges [50717] to the 4.7 branch.



git-svn-id: https://develop.svn.wordpress.org/branches/4.7@50733 602fd350-edb4-49c9-b593-d223f7449a82
2021-04-15 01:12:42 +00:00
Jonathan Desrosiers
d38a681043 Build/Test Tools: Backport GitHub Action and build improvements to the 4.7 branch.
This backports several build and test tool improvements to the 4.7 branch. Most notably, this includes:

- The changes required to allow each workflow to be triggered by the `workflow_dispatch` event so that tests can be run on a schedule [50590].
- Splitting single site and multisite tests into parallel jobs [50379].
- Split slow tests into separate, parallel jobs for PHP <= 5.6 [50444].
- Better branch and path scoping for GitHub Action workflows when running on `pull_request` [50432,50479].
- Several `devDependency` updates.

Merges [50379,50387,50413,50416,50432,50435,50436,50444,50446,50473,50474,50476,50479,50485,50486,50487,50545,50579,50590] to the 4.7 branch.
See #50401, #51801, #51802, #52548, #52608, #52612, #52624, #52625, #52645, #52653, #52658, #52660, #52667.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@50636 602fd350-edb4-49c9-b593-d223f7449a82
2021-04-02 15:26:02 +00:00
Jonathan Desrosiers
d8d5de6fda Build/Test Tools: Remove unused test groups from the 4.7 branch.
Follow up to [50310].

See #50401.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@50331 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-12 21:09:05 +00:00
Jonathan Desrosiers
44d543f94e Build/Test Tools: Restore automated testing in the 4.7 branch.
This commit merges the workflow files required to run automated testing on GitHub Actions.

In addition, [49836] and [50285] have been included in order to keep the local Docker environment consistent across all branches.

Merges [49162,49168-49169,49175,49204,49227-49228,49244,49369,49371,49548,49781-49784,49786,49836,49938,50268,50285,50298] to the 4.7 branch.
See #50401.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@50310 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-12 19:41:42 +00:00
Jonathan Desrosiers
de15f2f273 Build/Test Tools: Correct svn:mergeinfo for the 4.7 branch.
[49532] also merged [44176], [45445], and [49267], but these were missed in the commit message.

See #48301, #47767.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@50241 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-08 20:46:47 +00:00
Jonathan Desrosiers
e6dd09a0fb Build/Test Tools: Ignore patch related files, so they can't be accidentally committed.
Merges [39360-39361] to the 4.7 branch.
See #52341.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@50205 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-05 04:14:10 +00:00
Jonathan Desrosiers
0f989b3ae3 Build/Test Tools: Support NodeJS 14.x in the 4.7 branch.
This updates the 4.7 branch to support the latest LTS version of NodeJS (currently 14.x), allowing the same version to be used across all WordPress branches that receive security updates as a courtesy.

This also replaces the `npm-shrinkwrap.json` with a `package-lock.json` file. Lock files were not supported in earlier versions of NPM, but can now be used.

In addition to backporting the package updates that happened after branching 4.7, dependencies that were removed in future releases have also been updated to their latest versions.

Props desrosj, dd32, netweb, jorbin.
Merges [42460-42461,42463,42887,43320,43323,43977,44219,44233,44728,45321,45765,46404,46408-46409,47404,47867-47869,47872-47873,48705,49636,49933,49937,49939,50017,50126,50176,50185,50192] to the 4.7 branch.
See #52341.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@50204 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-05 04:12:00 +00:00
Sergey Biryukov
c0f53ac48f Tests: Move skipTestOnTimeout() to a more appropriate location, for consistency with other branches.
Follow-up to [50088].

See #51669.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@50097 602fd350-edb4-49c9-b593-d223f7449a82
2021-01-30 15:21:27 +00:00
Sergey Biryukov
8259505de8 Tests: Use skipTestOnTimeout() in more HTTP tests.
Adjust it to handle more types of timeouts, e.g. "Resolving timed out", "Connection timed out".

Merges [43511], [43512], [46682], [46996] to the 4.7 branch.
See #51669.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@50088 602fd350-edb4-49c9-b593-d223f7449a82
2021-01-30 11:29:34 +00:00
Jonathan Desrosiers
e972b674ac Build/Test Tools: Remove the TravisCI configuration file.
In [49162], GitHub Action workflow configuration files were introduced to run all of Core’s automated testing with the intent to fully transition after some time was allowed for testing.

After two full months of testing, the time to finish this transition has come.

We thank TravisCI for testing the codebase through nearly 20 major and many more minor releases.

Merges [49876] to the 4.7 branch.
See #52161. See #50401.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@49886 602fd350-edb4-49c9-b593-d223f7449a82
2020-12-22 21:09:31 +00:00
Jake Spurlock
10b35a3e1a Build/Test Tools: Match .nvmrc with the declared node engine.
Let's match up the versions from package.json, .travis.yml and .nvmrc.

This brings the changes from [49653] to the 4.7 branch.

Fixes #51682.

Props SergeyBiryukov, desrosj, whyisjake.


git-svn-id: https://develop.svn.wordpress.org/branches/4.7@49655 602fd350-edb4-49c9-b593-d223f7449a82
2020-11-18 22:46:31 +00:00
Jonathan Desrosiers
181144c200 Build/Test Tools: Backport the local Docker environment to the 4.7 branch.
This commit introduces the Docker-based local WordPress development environment to the 4.7 branch and converts the Travis test jobs to utilize this environment for easier and more consistent testing.

Until existing blockers with the PHP 5.2 Docker container can be solved, the PHP 5.2 test job will remain using the Travis `precise` image.

Merges [45745,45762,45783-45784,45800,45819,45885,46320,46999,47225,47912,48121,49335,49358,49360,49362] to the 4.7 branch.
See #48301, #47767.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@49532 602fd350-edb4-49c9-b593-d223f7449a82
2020-11-06 17:37:22 +00:00
Jonathan Desrosiers
bbfaa06ce8 Tests: Fix an incorrect variable name in PDF tests.
This causes a PHP error when running the test suite with PDF rendering supported.

Merges [49523] to the 4.7 branch.
See #50573, #48301.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@49526 602fd350-edb4-49c9-b593-d223f7449a82
2020-11-06 17:05:59 +00:00
Jonathan Desrosiers
cf88f30bc2 Media: Improve and fix rotate/flip image tests.
Fix off-by-one error in pixel color checks for rotate and flip image tests. Change to using PNG with single pixel to ensure that errors are caught in the future, rather than lost in JPEG noise.

Props Fuegas, mikeschroder.
Merges [45067] to the 4.7 branch.
See #46073, #48301.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@49521 602fd350-edb4-49c9-b593-d223f7449a82
2020-11-06 16:54:38 +00:00
Jonathan Desrosiers
d0a5188a5d WordPress 4.7.19.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@49417 602fd350-edb4-49c9-b593-d223f7449a82
2020-10-29 19:33:55 +00:00
Jake Spurlock
1bc66eba08 General: WordPress updates
* XML-RPC: Improve error messages for unprivileged users.
* External Libraries: Disable deserialization in Requests_Utility_FilteredIterator
* Embeds: Disable embeds on deactivated Multisite sites.
* Coding standards: Modify escaping functions to avoid potential false positives.
* XML-RPC: Return error message if attachment ID is incorrect.
* Upgrade/install: Improve logic check when determining installation status.
* Meta: Sanitize meta key before checking protection status.
* Themes: Ensure that only privileged users can set a background image when a theme is using the deprecated custom background page.

Brings the changes from [49380,49382-49388] to the 4.7 branch.

Props xknown, zieladam, peterwilsoncc, whyisjake, desrosj, dd32.


git-svn-id: https://develop.svn.wordpress.org/branches/4.7@49399 602fd350-edb4-49c9-b593-d223f7449a82
2020-10-29 18:56:04 +00:00
Sergey Biryukov
dcb81721c5 Tests: Temporarily skip PDF tests if they fail due to ImageMagick permission errors.
Merges [48338], [48341] to the 4.7 branch.

See #50573.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@48489 602fd350-edb4-49c9-b593-d223f7449a82
2020-07-14 21:51:43 +00:00
Sergey Biryukov
972c33c68c Administration: Pass the result of set-screen-option filter to the new set_screen_option_{$option} filter to ensure backward compatibility.
Rename the `$keep` parameter of both filters to `$screen_option` for clarity, update the documentation to better reflect its purpose.

Follow-up to [47951].

Props Chouby, sswells, SergeyBiryukov.
Merges [48241] to the 4.7 branch.
Fixes #50392.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@48251 602fd350-edb4-49c9-b593-d223f7449a82
2020-07-01 09:47:47 +00:00
Jonathan Desrosiers
18d5a54861 WordPress 4.7.18.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@47996 602fd350-edb4-49c9-b593-d223f7449a82
2020-06-10 21:32:22 +00:00
Jake Spurlock
55f1e1fab7 General: Backport several commits for release.
- Embeds: Ensure that the title attribute is set correctly on embeds.
- Editor: Prevent HTML decoding on by setting the proper editor context.
- Formatting: Ensure that wp_validate_redirect() sanitizes a wider variety of characters.
- Themes: Ensure a broken theme name is returned properly.
- Administration: Add a new filter to extend set-screen-option.

Merges [47947-47951] to the 4.7 branch.

Props xknown, sstoqnov, vortfu, SergeyBiryukov, whyisjake.


git-svn-id: https://develop.svn.wordpress.org/branches/4.7@47978 602fd350-edb4-49c9-b593-d223f7449a82
2020-06-10 18:46:19 +00:00
Jake Spurlock
b14fee9884 General: Backport several commits for release.
- Embeds: Ensure that the title attribute is set correctly on embeds.
- Editor: Prevent HTML decoding on by setting the proper editor context.
- Formatting: Ensure that wp_validate_redirect() sanitizes a wider variety of characters.
- Themes: Ensure a broken theme name is returned properly.
- Administration: Add a new filter to extend set-screen-option.

Merges [47947-47951] to the 4.X branch.

Props xknown, sstoqnov, vortfu, SergeyBiryukov, whyisjake.


git-svn-id: https://develop.svn.wordpress.org/branches/4.7@47975 602fd350-edb4-49c9-b593-d223f7449a82
2020-06-10 18:43:14 +00:00
Sergey Biryukov
c7f320da2b Update the About page for WordPress 4.7.17
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@47697 602fd350-edb4-49c9-b593-d223f7449a82
2020-04-29 18:33:38 +00:00