mirror_php/wordpress
1
0
Fork 0
mirror of git://develop.git.wordpress.org/ synced 2025-03-16 09:59:50 +01:00
Code Issues Actions 10 Packages Projects Releases Wiki Activity
34,199 Commits 50 Branches 751 Tags
Commit Graph

34199 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jake Spurlock
26f09592f8 Add .nvmrc files to older versions of WordPress 
When jumping between branches, it would be nice to have the correct node version for the older versions of WordPress. Let's add .nvmrc files to these older branches for the supported versions.

Merges [46295] to the 4.5 branch.

Fixes #48140


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@46299 602fd350-edb4-49c9-b593-d223f7449a82
 2019-09-25 20:56:32 +00:00
Jonathan Desrosiers
34782dedae WordPress 4.5.18. 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@46039 602fd350-edb4-49c9-b593-d223f7449a82
 2019-09-04 21:21:17 +00:00
Andrew Ozz
4504f6e969 jQuery: Backport the patch from jQuery 3.4.0. 
Merges [45342] to the 4.5 branch.

Props MikeNGarrett, peterwilsoncc, azaozz.
Fixes #47020.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@46027 602fd350-edb4-49c9-b593-d223f7449a82
 2019-09-04 18:46:52 +00:00
Jonathan Desrosiers
fafead9bef Fix for URL sanitization in wp_kses_bad_protocol_once(). 
Merges [45997] to the 4.5 branch.

Props irsdl, sstoqnov, whyisjake.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@46009 602fd350-edb4-49c9-b593-d223f7449a82
 2019-09-04 18:21:38 +00:00
Sergey Biryukov
db04e3935e Improve handling the existing rel attribute in wp_rel_nofollow_callback(). 
Merges [45990] to the 4.5 branch.
Props xknown, sstoqnov.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@45999 602fd350-edb4-49c9-b593-d223f7449a82
 2019-09-04 17:53:08 +00:00
Sergey Biryukov
3796421296 Improve URL validation in wp_validate_redirect(). 
Merges [45971] to the 4.5 branch.
Props vortfu, whyisjake, peterwilsoncc.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@45980 602fd350-edb4-49c9-b593-d223f7449a82
 2019-09-04 17:11:47 +00:00
Jake Spurlock
7cab047134 Remove _convert_urlencoded_to_entities() from the get_the_content() callback. 
Merges [45937] to the 4.5 branch.

Props vortfu, whyisjake, peterwilsoncc


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@45957 602fd350-edb4-49c9-b593-d223f7449a82
 2019-09-04 16:38:26 +00:00
Sergey Biryukov
27ba9999e3 Escape the output in wp_ajax_upload_attachment(). 
Merges [45936] to the 4.5 branch.
Props whyisjake, sstoqnov.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@45950 602fd350-edb4-49c9-b593-d223f7449a82
 2019-09-04 16:35:39 +00:00
John Blackbourn
63a7bc73b0 Build/Test tools: Further trimming of CI jobs on the 4.5 branch. 
This removes the PHP 5.6 job which runs without an object cache in place as the likelihood of a change being backported that only breaks 5.6 environments without an object cache is small.

See #42387


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@45010 602fd350-edb4-49c9-b593-d223f7449a82
 2019-03-25 16:28:56 +00:00
John Blackbourn
1d9a3bd8cd Build/Test tools: Switch npm dependency caching strategy on Travis CI. 
This switches to caching npm's local cache instead of `node_modules` in order to prevent issues caused by modules compiled using a different version of node.

Merges [44993] into the 4.5 branch.

See #46632


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@45000 602fd350-edb4-49c9-b593-d223f7449a82
 2019-03-25 00:58:06 +00:00
Gary Pendergast
fba7252de7 WordPress 4.5.17 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44876 602fd350-edb4-49c9-b593-d223f7449a82
 2019-03-13 01:24:06 +00:00
Sergey Biryukov
9f8474ace8 Formatting: Fix a PHP warning in introduced in [44840]. 
Merges [44864] to the 4.5 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44865 602fd350-edb4-49c9-b593-d223f7449a82
 2019-03-13 00:37:02 +00:00
Sergey Biryukov
19d2f136fe Comments: Improve comment content filtering. 
Merges [44842] to the 4.5 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44849 602fd350-edb4-49c9-b593-d223f7449a82
 2019-03-12 22:37:58 +00:00
Sergey Biryukov
3b84dcc1e1 Formatting: Improve rel="nofollow" handling in comments. 
Merges [44833] to the 4.5 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44840 602fd350-edb4-49c9-b593-d223f7449a82
 2019-03-12 22:24:04 +00:00
Jeremy Felt
58654f5739 Bump 4.5 branch to version 4.5.16. 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44082 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-13 02:12:25 +00:00
Gary Pendergast
a1208230a9 Editor: Remove unwanted fields before saving posts. 
The `meta_input`, `file`, and `guid` fields are not intended to be updated through user input.

Merges [44047] to the 4.5 branch.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44060 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-13 01:44:41 +00:00
Peter Wilson
14759800ef Multisite: Validate activation links. 
Merges [44048] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44059 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-13 01:43:52 +00:00
Ian Dunn
3a47187d69 KSES: Make the URI attributes DRY. 
This commit introduces the `wp_kses_uri_attributes` function and filter. The function centralizes the list of attributes, in order to prevent inconsistency, and the filter provides a way for plugins to customize the attributes.

Merges [44014] and [44017] to the `4.6` branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44032 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-13 00:53:10 +00:00
Peter Wilson
80801998e0 Multisite: Improve messaging for previously activated users. 
Ensure activation of a site is not attempted multiple times and users are shown the correct message if they follow the link a second time.

Merges [44021] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44029 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-13 00:46:50 +00:00
Jeremy Felt
6eb8051102 Media: Remove invalid data from test data provider. 
See [43993].


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44006 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-12 23:37:16 +00:00
Gary Pendergast
42d4df558e KSES: Conditionally remove the <form> element from $allowedposttags. 
To avoid backwards compatibility issues, `<form>` is re-added if a custom filter has added the `<input>` or `<select>` elements to `$allowedposttags`.

Merges [43994] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44002 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-12 23:28:48 +00:00
Jeremy Felt
0127179f66 Media: Improve verification of MIME file types. 
Merges [43988] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@43993 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-12 23:10:04 +00:00
Aaron D. Campbell
35f2f3acc0 Bump 4.5 branch to version 4.5.15 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@43411 602fd350-edb4-49c9-b593-d223f7449a82
 2018-07-05 16:10:34 +00:00
John Blackbourn
1c7f816341 Media: Limit thumbnail file deletions to the same directory as the original file. 
Merges [43393] into the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@43397 602fd350-edb4-49c9-b593-d223f7449a82
 2018-07-05 14:54:32 +00:00
Aaron D. Campbell
d6f9fa0658 Bump 4.5 branch to version 4.5.14 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42937 602fd350-edb4-49c9-b593-d223f7449a82
 2018-04-03 20:27:08 +00:00
Dominik Schilling (ocean90)
6f63ca9be8 Template: Make sure the version string is correctly escaped for use in attributes. 
Merge of [42893] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42921 602fd350-edb4-49c9-b593-d223f7449a82
 2018-04-03 16:05:43 +00:00
Dominik Schilling (ocean90)
0948e620fc Meta: Simplify the delete all meta query in delete_metadata(). 
Merge of [42913] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42916 602fd350-edb4-49c9-b593-d223f7449a82
 2018-04-03 15:41:13 +00:00
Dominik Schilling (ocean90)
3731d03241 HTTP: Don't treat localhost as same host by default. 
Merge of [42894] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42912 602fd350-edb4-49c9-b593-d223f7449a82
 2018-04-03 15:34:59 +00:00
Dominik Schilling (ocean90)
d9b6d27a1f Login: Use wp_safe_redirect() when redirecting the login page if forced to use HTTPS. 
Merge of [42892] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42899 602fd350-edb4-49c9-b593-d223f7449a82
 2018-04-03 15:28:43 +00:00
Sergey Biryukov
d115438b31 General: Update copyright year to 2018 in license.txt. 
Props rachelbaker.
Merges [42424] to the 4.5 branch.
Fixes #43007.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42556 602fd350-edb4-49c9-b593-d223f7449a82
 2018-01-23 11:25:40 +00:00
Dion Hulse
a53fbcfca2 Bump the 4.5 branch to 4.5.13. 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42498 602fd350-edb4-49c9-b593-d223f7449a82
 2018-01-16 21:40:21 +00:00
Dion Hulse
064704c5da External Libraries: Remove unnecessary / obsoleted MediaElement.js files. 
Merges [42478] to the 4.5 branch.
Fixes #42720 for 4.5.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42481 602fd350-edb4-49c9-b593-d223f7449a82
 2018-01-16 08:07:21 +00:00
Dion Hulse
b2074884cc Upgrade: When deleting old files, if deletion fails attempt to empty the file instead. 
Props joemcgill, dd32.
Merges [42434] to the 4.5 branch.
Fixes #42963 for 4.5.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42469 602fd350-edb4-49c9-b593-d223f7449a82
 2018-01-16 06:54:17 +00:00
John Blackbourn
bc4da3d800 Bump 4.5 branch to 4.5.12. 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42320 602fd350-edb4-49c9-b593-d223f7449a82
 2017-11-29 18:59:21 +00:00
John Blackbourn
1989ddbd6a Hardening: Remove the ability to upload JavaScript files for users who do not have the unfiltered_html capability. 
Merges [42261] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42283 602fd350-edb4-49c9-b593-d223f7449a82
 2017-11-29 16:25:37 +00:00
John Blackbourn
8e01813dbf Hardening: Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds. 
Merges [42260] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42282 602fd350-edb4-49c9-b593-d223f7449a82
 2017-11-29 16:24:43 +00:00
John Blackbourn
de88f1dfc9 Hardening: Add escaping to the language attributes used on html elements. 
Merges [42259] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42281 602fd350-edb4-49c9-b593-d223f7449a82
 2017-11-29 16:24:01 +00:00
John Blackbourn
cf998f0879 Hardening: Use a properly generated hash for the newbloguser key instead of a determinate substring. 
Merges [42258] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42280 602fd350-edb4-49c9-b593-d223f7449a82
 2017-11-29 16:23:25 +00:00
Dion Hulse
a2fb1016bc WPDB: Check that AUTH_SALT is not empty, Fix a PHP notice when AUTH_SALT is undefined. 
Props jsonfry, mkomar, pento.
Merges [42119] and [42120] to the 4.5 branch.
Fixes #42431 and #42401 for 4.5.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42233 602fd350-edb4-49c9-b593-d223f7449a82
 2017-11-27 01:09:11 +00:00
John Blackbourn
7895704527 General: Remove the version number from the readme file in the 4.5 branch. 
See #42386


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42102 602fd350-edb4-49c9-b593-d223f7449a82
 2017-10-31 18:06:57 +00:00
Gary Pendergast
24c2979b19 Bump 4.5 branch to version 4.5.11. 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42072 602fd350-edb4-49c9-b593-d223f7449a82
 2017-10-31 13:15:10 +00:00
Gary Pendergast
1260edf573 Database: Restore numbered placeholders in wpdb::prepare(). 
[41496] removed support for numbered placeholders in queries send through `wpdb::prepare()`, which, despite being undocumented, were quite commonly used.

This change restores support for numbered placeholders (as well as a subset of placeholder formatting), while also adding extra checks to ensure the correct number of arguments are being passed to `wpdb::prepare()`, given the number of placeholders.

Merges [41662], [42056] to the 4.5 branch.
See #41925.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42060 602fd350-edb4-49c9-b593-d223f7449a82
 2017-10-31 12:43:36 +00:00
Gary Pendergast
2654afaacd Build/Test Tools: Pass correct $message argument to WP_UnitTestCase::setExpectedException() in Tests_Ajax_CompressionTest::test_logged_out() and Tests_Ajax_TagSearch::test_no_results(). 
PHPUnit 6.4.1 and earlier versions ignored the `'0'` value, causing the issue to go unnoticed.

Merge of [41870] to the 4.5 branch.

Props SergeyBiryukov.
See #42232.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42054 602fd350-edb4-49c9-b593-d223f7449a82
 2017-10-31 09:10:03 +00:00
Dominik Schilling (ocean90)
37174793b7 Taxonomy/Users: Use correct escaping function for URLs. 
Merge of [41522] to the 4.5 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41526 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 21:29:09 +00:00
Dominik Schilling (ocean90)
0deb58a551 Bump 4.5 branch to version 4.5.10. 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41513 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 20:00:19 +00:00
Aaron D. Campbell
0f83d87e7f Database: Hardening to bring wpdb::prepare() inline with documentation. 
`wpdb::prepare()` supports %s, %d, and %F as placeholders in the query string. Any other non-escaped % will be escaped.

Merges [41496] to 4.5 branch.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41500 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 18:13:37 +00:00
Aaron D. Campbell
1873890f9c Database: Don’t trigger _doing_it_wrong() for null values in wpdb::prepare(). 
While `wpdb::prepare()` does not support null values (see #12819) they still appear in the wild like in the WordPress Importer and other plugins.

Merges [41483] to 4.5 branch.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41487 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 16:22:20 +00:00
Aaron D. Campbell
6a7e5a85fb Database: Hardening for wpdb::prepare() 
Previously if you passed an array of values for placeholders, additional values could be passed as well. Now additional values will be ignored.

Merges [41470] to 4.5 branch.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41474 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 14:59:58 +00:00
John Blackbourn
bf40149e72 Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues. 
Merges [41457] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41461 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 14:40:36 +00:00
Aaron D. Campbell
a2e3ba44f2 oEmbed: Add extra hardening around allowed HTML for improved sandboxing. 
Merges [41448] to 4.5 branch.




git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41454 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 13:49:05 +00:00