38538 Commits

Author SHA1 Message Date
Jonathan Desrosiers
a86f74c788 Build/Test Tools: Use Git when fetching the WordPress Importer for use in tests.
Some checks are pending
Coding Standards / JavaScript coding standards (push) Waiting to run
Coding Standards / Slack Notifications (push) Blocked by required conditions
Coding Standards / Failed workflow tasks (push) Blocked by required conditions
JavaScript Tests / QUnit Tests (push) Waiting to run
JavaScript Tests / Slack Notifications (push) Blocked by required conditions
JavaScript Tests / Failed workflow tasks (push) Blocked by required conditions
PHPUnit Tests / PHP 5.3 (push) Waiting to run
PHPUnit Tests / PHP 5.4 (push) Waiting to run
PHPUnit Tests / PHP 5.5 (push) Waiting to run
PHPUnit Tests / PHP 5.6 (push) Waiting to run
PHPUnit Tests / PHP 7.0 (push) Waiting to run
PHPUnit Tests / PHP 7.1 (push) Waiting to run
PHPUnit Tests / PHP 7.2 (push) Waiting to run
PHPUnit Tests / PHP 7.3 (push) Waiting to run
PHPUnit Tests / Slack Notifications (push) Blocked by required conditions
PHPUnit Tests / Failed workflow tasks (push) Blocked by required conditions
Test Build Processes / Core running from build (push) Waiting to run
Test Build Processes / Slack Notifications (push) Blocked by required conditions
Test Build Processes / Failed workflow tasks (push) Blocked by required conditions
This switches to using Git in the local Docker environment install script to check out a copy of the WordPress Importer plugin for use in unit tests.

Previously, SVN was used and the commands were not correctly run within the Docker container. The container does not actually have SVN installed, and the script was only working when the machine running the command had SVN present.

Merges [51179] to the 5.0 branch.
Reviewed by swissspidy.

Props czapla, alexstine, jnylen0, francina, desrosj.
See #52909.
See #62280.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@59628 602fd350-edb4-49c9-b593-d223f7449a82
2025-01-15 16:21:43 +00:00
Jonathan Desrosiers
1b09b7fc61 Build/Test Tools: Make use of new reusable workflows for 5.0.
This updates the 5.0 branch to utilize the new reusable workflows in trunk introduced in [58165].

This also includes backports for a some additional improvements and bug fixes that are necessary for the local development environment to continue working long term:

- The image and platform properties for the mysql container have been updated to always prefer `amd64` containers (#60822).
- `macos-13` is now pinned for MacOS jobs instead of `macos-latest` (#61340).
- Migrating to Docker Compose V2 (#60901).
- Removing the version property from docker-compose.yml (#59416).
- Improvements to how artifacts and comments for Playground testing are generated.
- Removing SVN related commands causing failures (#61216).
- Updating the `actions/github-scripts` action to the latest version.
- Cache the results of `PHP_CodeSniffer` runs (#49783).
- Move the Memcached container into the Docker Compose config (#55700).
- Improvements to the `healthcheck` command for the `mysql` container (#58867).
- Skip some tests when not in the primary branch (#50401).

Merges [49264], [51673], [52179], [53552], [53895], [56464], [57918], [58157], [57124], [57125], [57249] to the 5.0 branch.

Props johnbillion, joemcgill, swissspidy, thelovekesh, narenin, mukesh27, JeffPaul, peterwilsoncc, zieladam, ockham, SergeyBiryukov, jorbin, Clorith, afragen, jrf.
See #49783, #58867, #61340, #60822, #61216, #60901, #61101, #59416, #59805, #61213.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@58628 602fd350-edb4-49c9-b593-d223f7449a82
2024-07-02 19:59:42 +00:00
Jb Audras
2a7bab0b49 WordPress 5.0.22.
git-svn-id: https://develop.svn.wordpress.org/branches/5.0@58519 602fd350-edb4-49c9-b593-d223f7449a82
2024-06-24 16:30:08 +00:00
Jb Audras
71dc4327ee Editor: Fix Path Traversal issue on Windows in Template-Part Block.
Merges [58470] to the 5.0 branch.
Props xknown, jorbin.




git-svn-id: https://develop.svn.wordpress.org/branches/5.0@58492 602fd350-edb4-49c9-b593-d223f7449a82
2024-06-24 15:42:14 +00:00
Sergey Biryukov
e1e1748542 Tests: Use an image on WordPress.org CDN in external HTTP tests.
Due to some changes on the WP.com side to compress the requested images on the fly, the exact image size in the response could be different between platforms.

This commit aims to make the affected tests more reliable.

Follow-up to [139/tests], [31258], [34568], [47142], [57903], [57904], [57924].

Merges [57931] to the 5.0 branch.

Props peterwilsoncc, jorbin.
See #60865.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@58001 602fd350-edb4-49c9-b593-d223f7449a82
2024-04-15 13:43:40 +00:00
Aaron Jorbin
76ef279712 General: Backport polyfills for str_ends_with() and str_starts_with().
Merges [52040], [56016], and [56015] to 5.0 branch.

Props ocean90, SergeyBiryukov, desrosj, joemcgill, jorbin, mukesh27.


git-svn-id: https://develop.svn.wordpress.org/branches/5.0@57457 602fd350-edb4-49c9-b593-d223f7449a82
2024-01-30 18:14:54 +00:00
Joe McGill
b80e76a77f WordPress 5.0.21.
git-svn-id: https://develop.svn.wordpress.org/branches/5.0@57424 602fd350-edb4-49c9-b593-d223f7449a82
2024-01-30 16:19:43 +00:00
Aaron Jorbin
af151401a5 Grouped Backports to the 5.0 branch.
- Install: When populating options, maybe_serialize instead of always serialize.
- Uploads: Check for and verify ZIP archives.

Merges [57388] and [57389] to the 5.0 branch.

Props costdev, peterwilsoncc, azaozz, tykoted, johnbillion, desrosj, afragen, jorbin, xknown.


git-svn-id: https://develop.svn.wordpress.org/branches/5.0@57405 602fd350-edb4-49c9-b593-d223f7449a82
2024-01-30 15:00:56 +00:00
Jb Audras
ef5c886987 WordPress 5.0.20.
git-svn-id: https://develop.svn.wordpress.org/branches/5.0@56874 602fd350-edb4-49c9-b593-d223f7449a82
2023-10-12 15:02:50 +00:00
David Baumwald
b43c43e5ea Grouped backports to the 5.0 branch.
- Comments: Prevent users who can not see a post from seeing comments on it.
- Shortcodes: Restrict media shortcode ajax to certain type.
- REST API: Ensure no-cache headers are sent when methods are overridden.
- REST API: Limit `search_columns` for users without `list_users`.
- Prevent unintended behavior when certain objects are unserialized.

Merges [56833], [56834], [56835], [56836], and [56838] to the 5.0 branch.
Props xknown, jorbin, joehoyle, timothyblynjacobs, peterwilsoncc, ehtis, tykoted, antpb, rmccue.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@56871 602fd350-edb4-49c9-b593-d223f7449a82
2023-10-12 14:59:28 +00:00
Sergey Biryukov
bd4ccab986 Grouped backports to the 5.0 branch.
- Media: Prevent CSRF setting attachment thumbnails.
- Embeds: Add protocol validation for WordPress Embed code.
- I18N: Introduce sanitization function for locale.
- Editor: Ensure block comments are of a valid form.

Merges [55760-55764] to the 5.0 branch
Props dd32, isabel_brison, martinkrcho, matveb, ocean90, paulkevan, peterwilsoncc, timothyblynjacobs, xknown, youknowriad.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@55791 602fd350-edb4-49c9-b593-d223f7449a82
2023-05-16 16:02:16 +00:00
Jonathan Desrosiers
4b10e959ff Build/Test Tools: Backport updates to GitHub Actions.
This backports several changesets to GitHub Actions workflows. These changesets:

- address the deprecated notices related to save-output and set-output to ensure the workflows continue to run after these are removed.
- adds support for automatically retrying a failed workflow once.
- removes workflow files that are not applicable to the branch.
- backports some Docker environment related tooling updates for the sake of consistency across branches. 

Merges [53736], [53737], [53940], [53947], [54039], [54096], [54108], [54293], [54313], [54342], [54343], [54373], [54511], [54650], [54651], [54674], [54750], [54852], [55152], [54651], [55487] to the 5.0 branch.
See #55652, #56407, #56528, #54695, #56820, #56816, #56793, #56820, #57572.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@55525 602fd350-edb4-49c9-b593-d223f7449a82
2023-03-10 16:27:13 +00:00
Peter Wilson
09dedd0c58 I18N: Add new strings to about.php for use with end-of-life updates.
This changeset adds two additional translation strings in the changelog file, for use when releasing the final version of WordPress on a particular branch.

Props peterwilsoncc, audrasjb, mukesh27, mukesh27.
Merges [55350] to the 5.0 branch.
Fixes #57216.


git-svn-id: https://develop.svn.wordpress.org/branches/5.0@55382 602fd350-edb4-49c9-b593-d223f7449a82
2023-02-21 03:02:22 +00:00
Peter Wilson
03eb35cd9e Built/Test tools, HTTP API: Refactor test for multiple location headers.
Remove wordpress.org as an external dependency testing `WP_HTTP::handle_redirects()`.

This refactors and reenables an existing test to call the `WP_HTTP::handle_redirects()` method directly with a mocked array of HTTP headers containing multiple location headers.

The test is moved from the external-http group to the http test group as it no longer makes an HTTP request.

Follow up to [54955].

Props SergeyBiryukov, dd32, peterwilsoncc.
Merges [54968] to the 5.0 branch.
Fixes #57306.
See #56793.



git-svn-id: https://develop.svn.wordpress.org/branches/5.0@54985 602fd350-edb4-49c9-b593-d223f7449a82
2022-12-15 04:40:35 +00:00
Jb Audras
034080ba8b WordPress 5.0.18.
git-svn-id: https://develop.svn.wordpress.org/branches/5.0@54596 602fd350-edb4-49c9-b593-d223f7449a82
2022-10-17 19:53:02 +00:00
Sergey Biryukov
7c5fab1f9c Grouped backports to the 5.0 branch.
- Posts, Post types: Apply KSES to post-by-email content,
- General: Validate host on "Are you sure?" screen,
- Posts, Post types: Remove emails from post-by-email logs,
- Media: Refactor search by filename within the admin,
- Pings/trackbacks: Apply KSES to all trackbacks,
- Comments: Apply kses when editing comments,
- Customize: Escape blogname option in underscores templates,
- REST API: Lockdown post parameter of the terms endpoint,
- Mail: Reset PHPMailer properties between use,
- Query: Validate relation in `WP_Date_Query`,
- Widgets: Escape RSS error messages for display.

Merges [54521], [54522], [54523], [54524], [54525], [54526], [54527], [54528], [54529], [54530], [54541] to the 5.0 branch.
Props voldemortensen, johnbillion, paulkevan, peterwilsoncc, xknown, dd32, audrasjb, martinkrcho, vortfu, davidbaumwald, tykoted, timothyblynjacobs, johnjamesjacoby, ehtis, matveb, talldanwp.


git-svn-id: https://develop.svn.wordpress.org/branches/5.0@54571 602fd350-edb4-49c9-b593-d223f7449a82
2022-10-17 18:13:25 +00:00
Peter Wilson
d263103914 Security: Introduce strings to indicate support status.
Add strings for use in future maintenance/security releases to indicate the security support status of the version of WordPress.

Two strings are introduced:

* indicating the version of WordPress is not receiving security updates, and,
* indicating the version of WordPress will shortly stop receiving security updates.

This change does not make use of the strings, the purpose is to make them available to translators prior to dropping support of selected versions of WordPress.

Props costdev, chesio, robinwpdeveloper, desrosj, rudlinkon, mukesh27, sumitbagthariya16.
Merges [54322] to the 5.0 branch.
See #56532.



git-svn-id: https://develop.svn.wordpress.org/branches/5.0@54440 602fd350-edb4-49c9-b593-d223f7449a82
2022-10-10 05:15:09 +00:00
Jonathan Desrosiers
144bf963a7 WordPress 5.0.17.
git-svn-id: https://develop.svn.wordpress.org/branches/5.0@53997 602fd350-edb4-49c9-b593-d223f7449a82
2022-08-30 17:26:29 +00:00
Sergey Biryukov
08e560f1d6 Grouped backports to the 5.0 branch.
- Posts, Post Types: Escape output within `the_meta()`.
- General: Ensure bookmark query limits are numeric.
- Plugins: Escape output in error messages.
- Build/Test Tools: Allow the PHPCS plugin in Composer configuration.

Merges [52412,53958-53960] to the 5.0 branch.
Props tykoted, martinkrcho, xknown, dd32, peterwilsoncc, paulkevan, timothyblynjacobs.


git-svn-id: https://develop.svn.wordpress.org/branches/5.0@53973 602fd350-edb4-49c9-b593-d223f7449a82
2022-08-30 15:42:45 +00:00
Jonathan Desrosiers
dba23070b3 Build/Test Tools: Remove phpcs job related checks.
PHPCS scanning was added in WordPress 5.1, so the status of those checks should not be checked when passing the workflow results to the Slack notifications workflow.

See #56095.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@53611 602fd350-edb4-49c9-b593-d223f7449a82
2022-06-30 17:12:36 +00:00
Jonathan Desrosiers
40afc3f462 Build/Test Tools: Use the Slack notifications workflow as a reusable one.
This backports several changesets that are required to remove the reliance on the `workflow_run` event for posting Slack notifications.

The Slack notification workflow will now be called as a reusable one, which has several benefits (see [53591]).

Several other minor GitHub Actions related updates are also being backported in this commit to maintain tooling consistency across branches that still receive security updates as a courtesy when necessary.

Workflows that are not relevant to this branch that were mistakenly backported are also being deleted.

Merges [50473], [50704], [50796], [50930], [51341], [51355], [51498], [51511], [51535], [51924], [51925], [51937], [52002], [52130], [52183], [52233], [53112], [53581], [53582], [53592] to the 5.0 branch.
See #56095.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@53608 602fd350-edb4-49c9-b593-d223f7449a82
2022-06-30 17:03:58 +00:00
David Baumwald
74c6a51885 WordPress 5.0.16.
git-svn-id: https://develop.svn.wordpress.org/branches/5.0@52878 602fd350-edb4-49c9-b593-d223f7449a82
2022-03-10 22:05:27 +00:00
Sergey Biryukov
d64b5f7a93 External Librairies: Update jQuery.query to version 2.2.3.
This updates the "jquery-query" library from version 2.1.7 to 2.2.3.

Props jorbin, peterwilsoncc, xknown, audrasjb, jorgefilipecosta.
Merges [52844] to the 5.0 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@52856 602fd350-edb4-49c9-b593-d223f7449a82
2022-03-10 21:24:49 +00:00
Jonathan Desrosiers
0f2641f73f WordPress 5.0.15.
git-svn-id: https://develop.svn.wordpress.org/branches/5.0@52495 602fd350-edb4-49c9-b593-d223f7449a82
2022-01-06 18:45:20 +00:00
Jonathan Desrosiers
78ced475a0 Grouped backports to the 5.0 branch.
- Query: Improve sanitization within `WP_Tax_Query`.
- Query: Improve sanitization within `WP_Meta_Query`.
- Upgrade/Install: Avoid using `unserialize()` unnecessarily.
- Formatting: Correctly encode ASCII characters in post slugs.

Merges [52454-52457] to the 5.0 branch.
Props vortfu, dd32, ehtis, zieladam, whyisjake, xknown, peterwilsoncc, desrosj, iandunn.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@52473 602fd350-edb4-49c9-b593-d223f7449a82
2022-01-06 18:13:41 +00:00
Jonathan Desrosiers
d98a039f1a Block Editor: Additional package updates.
git-svn-id: https://develop.svn.wordpress.org/branches/5.0@51833 602fd350-edb4-49c9-b593-d223f7449a82
2021-09-21 16:48:03 +00:00
Jonathan Desrosiers
52869da001 Grouped merges for 5.0.14.
Follow up to [51758].

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@51769 602fd350-edb4-49c9-b593-d223f7449a82
2021-09-08 23:30:30 +00:00
Jonathan Desrosiers
fe952f0e1f WordPress 5.0.14.
git-svn-id: https://develop.svn.wordpress.org/branches/5.0@51766 602fd350-edb4-49c9-b593-d223f7449a82
2021-09-08 21:41:53 +00:00
Jonathan Desrosiers
d82b6955d9 Grouped merges for 5.0.14.
- Update `lodash` to the latest version `4.17.21`.
- Disable some attributes for rich text.
- Use hashed/deterministic moduleIDs in webpack config.

Props ellatrix, peterwilsoncc, get_dave, mcsf, talldanwp, youknowriad, desrosj, nerrad, gziolo.
Merges [50940-50941,50984-50985,51426] to the 5.0 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@51758 602fd350-edb4-49c9-b593-d223f7449a82
2021-09-08 21:22:31 +00:00
Peter Wilson
23b9483ac2 WordPress 5.0.13.
git-svn-id: https://develop.svn.wordpress.org/branches/5.0@50876 602fd350-edb4-49c9-b593-d223f7449a82
2021-05-12 23:16:10 +00:00
Peter Wilson
88c65aab6c External libraries: Improve attachment handling in PHPMailer
Props: audrasjb, ayeshrajans, desrosj, peterwilsoncc, xknown.
Partially merges [50799] to the 5.0 branch.



git-svn-id: https://develop.svn.wordpress.org/branches/5.0@50854 602fd350-edb4-49c9-b593-d223f7449a82
2021-05-12 22:28:34 +00:00
Peter Wilson
63c477dbb8 Version bump for 5.0.12.
git-svn-id: https://develop.svn.wordpress.org/branches/5.0@50743 602fd350-edb4-49c9-b593-d223f7449a82
2021-04-15 01:36:45 +00:00
Jonathan Desrosiers
fdad53e8ae Grouped merges for 5.0.12.
* REST API: Allow authors to read their own password protected posts.
* About page update.

Merges [50717] to the 5.0 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/5.0@50731 602fd350-edb4-49c9-b593-d223f7449a82
2021-04-15 01:10:18 +00:00
Jonathan Desrosiers
85f99cf214 Build/Test Tools: Backport GitHub Action and build improvements to the 5.0 branch.
This backports several build and test tool improvements to the 5.0 branch. Most notably, this includes:

- The changes required to allow each workflow to be triggered by the `workflow_dispatch` event so that tests can be run on a schedule [50590].
- Splitting single site and multisite tests into parallel jobs [50379].
- Split slow tests into separate, parallel jobs for PHP <= 5.6 [50444].
- Better branch and path scoping for GitHub Action workflows when running on `pull_request` [50432,50479].
- Several `devDependency` updates.

Merges [45317,50267,50379,50387,50413,50416,50432,50435-50436,50444,50446,50473-50474,50476,50479,50485-50487,50545,50579,50590,50598] to the 5.0 branch.
See #50401, #51801, #51802, #52548, #52608, #52612, #52624, #52625, #52645, #52653, #52658, #52660, #52667.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@50624 602fd350-edb4-49c9-b593-d223f7449a82
2021-03-31 19:26:39 +00:00
Jonathan Desrosiers
31274c3342 Build/Test Tools: Remove unused test groups from the 5.0 branch.
Follow up to [50307].

See #50401.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@50334 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-12 21:12:26 +00:00
Jonathan Desrosiers
9f87e92c21 Build/Test Tools: Restore automated testing in the 5.0 branch.
This commit merges the workflow files required to run automated testing on GitHub Actions.

In addition, [49836] and [50285] have been included in order to keep the local Docker environment consistent across all branches.

Merges [49162,49168-49169,49175,49204,49227-49228,49244,49369,49371,49548,49781-49784,49786,49836,49938,50268,50285,50298] to the 5.0 branch.
See #50401.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@50307 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-12 19:25:20 +00:00
Jonathan Desrosiers
676c22e235 Build/Test Tools: Support NodeJS 14.x in the 5.0 branch.
This updates the 5.0 branch to support the latest LTS version of NodeJS (currently 14.x), allowing the same version to be used across all WordPress branches that receive security updates as a courtesy.

In addition to backporting the package updates that happened after branching 5.0, dependencies that were removed in future releases have also been updated to their latest versions.

Props desrosj, dd32, netweb, jorbin.
Merges [44233,44728,45321,45765,45826,46403-46404,46408,46409,47404,47867-47869,47872-47873,48705,49636,49933,49937,49939,49940,49983,49989,50017,50126,50176,50185,50192] to the 5.0 branch.
See #52341.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@50201 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-05 04:03:45 +00:00
Sergey Biryukov
4b924e3341 Tests: Skip test_readme() if the HTTP request to secure.php.net or dev.mysql.com failed on timeout.
Move `skipTestOnTimeout()` to `WP_UnitTestCase_Base` to avoid duplication.

Merges [46682] and [46996] to the 5.0 branch.
See #51669.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@50095 602fd350-edb4-49c9-b593-d223f7449a82
2021-01-30 14:51:08 +00:00
Jonathan Desrosiers
d717a87e35 Build/Test Tools: Remove the TravisCI configuration file.
In [49162], GitHub Action workflow configuration files were introduced to run all of Core’s automated testing with the intent to fully transition after some time was allowed for testing.

After two full months of testing, the time to finish this transition has come.

We thank TravisCI for testing the codebase through nearly 20 major and many more minor releases.

Merges [49876] to the 5.0 branch.
See #52161. See #50401.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@49883 602fd350-edb4-49c9-b593-d223f7449a82
2020-12-22 21:07:36 +00:00
Jonathan Desrosiers
34dfe45cb8 Build/Test Tools: Backport the local Docker environment to the 5.0 branch.
This commit introduces the Docker-based local WordPress development environment to the 5.0 branch and converts the Travis test jobs to utilize this environment for easier and more consistent testing.

Until existing blockers with the PHP 5.2 Docker container can be solved, the PHP 5.2 test job will remain using the Travis `precise` image.

Merges [45745,45762,45783-45784,45800,45819,45885,46320,46999,47225,47912,48121,49335,49358,49360,49362] to the 5.0 branch.
See #48301, #47767.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@49529 602fd350-edb4-49c9-b593-d223f7449a82
2020-11-06 17:29:16 +00:00
Jonathan Desrosiers
61afa63543 Tests: Fix an incorrect variable name in PDF tests.
This causes a PHP error when running the test suite with PDF rendering supported.

See #50573, #48301.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@49523 602fd350-edb4-49c9-b593-d223f7449a82
2020-11-06 17:02:03 +00:00
Jonathan Desrosiers
83f29fe880 Media: Improve and fix rotate/flip image tests.
Fix off-by-one error in pixel color checks for rotate and flip image tests. Change to using PNG with single pixel to ensure that errors are caught in the future, rather than lost in JPEG noise.

Props Fuegas, mikeschroder.
Merges [45067] to the 5.0 branch.
See #46073, #48301.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@49518 602fd350-edb4-49c9-b593-d223f7449a82
2020-11-06 16:46:12 +00:00
Jonathan Desrosiers
ba2d11db67 WordPress 5.0.11.
git-svn-id: https://develop.svn.wordpress.org/branches/5.0@49414 602fd350-edb4-49c9-b593-d223f7449a82
2020-10-29 19:33:42 +00:00
Jake Spurlock
f04772a072 General: WordPress updates
* XML-RPC: Improve error messages for unprivileged users.
* External Libraries: Disable deserialization in Requests_Utility_FilteredIterator
* Embeds: Disable embeds on deactivated Multisite sites.
* Coding standards: Modify escaping functions to avoid potential false positives.
* XML-RPC: Return error message if attachment ID is incorrect.
* Upgrade/install: Improve logic check when determining installation status.
* Meta: Sanitize meta key before checking protection status.
* Themes: Ensure that only privileged users can set a background image when a theme is using the deprecated custom background page.

Brings the changes from [49380,49382-49388] to the 5.0 branch.

Props xknown, zieladam, peterwilsoncc, whyisjake, desrosj, dd32.


git-svn-id: https://develop.svn.wordpress.org/branches/5.0@49396 602fd350-edb4-49c9-b593-d223f7449a82
2020-10-29 18:50:55 +00:00
Jonathan Desrosiers
2579f5ca2f Build/Test Tools: Explicitly specify a version number in the .nvmrc file for the 5.0 branch.
This restores the ability to run NodeJS related tasks when using `nvm install` or `nvm use`.

The alias `lts/*` currently resolves to NodeJS 12.x (and will continue to change as newer versions are released). The 10.x version of NodeJS is the highest version supported in the 5.0 branch.

This also removes the explicit version when running `nvm install` during automated testing. The command will now fall back to the version in the `.nvmrc` file.

See #51603.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@49277 602fd350-edb4-49c9-b593-d223f7449a82
2020-10-22 16:09:43 +00:00
Sergey Biryukov
b00c8bf95e Tests: Temporarily skip PDF tests if they fail due to ImageMagick permission errors.
Merges [48338], [48341] to the 5.0 branch.

See #50573.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@48486 602fd350-edb4-49c9-b593-d223f7449a82
2020-07-14 21:33:30 +00:00
Sergey Biryukov
99d5878ac9 Administration: Pass the result of set-screen-option filter to the new set_screen_option_{$option} filter to ensure backward compatibility.
Rename the `$keep` parameter of both filters to `$screen_option` for clarity, update the documentation to better reflect its purpose.

Follow-up to [47951].

Props Chouby, sswells, SergeyBiryukov.
Merges [48241] to the 5.0 branch.
Fixes #50392.

git-svn-id: https://develop.svn.wordpress.org/branches/5.0@48248 602fd350-edb4-49c9-b593-d223f7449a82
2020-07-01 09:45:52 +00:00
Jonathan Desrosiers
cabad766c4 WordPress 5.0.10.
git-svn-id: https://develop.svn.wordpress.org/branches/5.0@47993 602fd350-edb4-49c9-b593-d223f7449a82
2020-06-10 21:31:46 +00:00
Jake Spurlock
e3356d8c96 Editor: Ensure latest comments can only be viewed from public posts.
This brings the changes from [47984] to the 5.0 branch.

Props: poena, xknown.


git-svn-id: https://develop.svn.wordpress.org/branches/5.0@47988 602fd350-edb4-49c9-b593-d223f7449a82
2020-06-10 19:31:08 +00:00
Jonathan Desrosiers
20545bea17 General: Backport several commits for release.
- Embeds: Ensure that the title attribute is set correctly on embeds.
- Editor: Prevent HTML decoding on by setting the proper editor context.
- Formatting: Ensure that `wp_validate_redirect()` sanitizes a wider variety of characters.
- Themes: Ensure a broken theme name is returned properly.
- Administration: Add a new filter to extend set-screen-option. 

Merges [47947-47951] to the 5.0 branch.
Props xknown, sstoqnov, vortfu, SergeyBiryukov, whyisjake.


git-svn-id: https://develop.svn.wordpress.org/branches/5.0@47964 602fd350-edb4-49c9-b593-d223f7449a82
2020-06-10 18:21:10 +00:00