34250 Commits

Author SHA1 Message Date
Sergey Biryukov
34b8b7b0ae Tests: Use an image on WordPress.org CDN in external HTTP tests.
Due to some changes on the WP.com side to compress the requested images on the fly, the exact image size in the response could be different between platforms.

This commit aims to make the affected tests more reliable.

Follow-up to [139/tests], [31258], [34568], [47142], [57903], [57904], [57924].

Merges [57931] to the 4.5 branch.

Props peterwilsoncc, jorbin.
See #60865.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@58008 602fd350-edb4-49c9-b593-d223f7449a82
2024-04-15 17:41:47 +00:00
Aaron Jorbin
ff98b3ba99 General: Backport polyfills for str_ends_with() and str_starts_with().
Merges [52040], [56016], and [56015] to 4.5 branch.

Props ocean90, SergeyBiryukov, desrosj, joemcgill, jorbin, mukesh27.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@57443 602fd350-edb4-49c9-b593-d223f7449a82
2024-01-30 17:29:21 +00:00
Joe McGill
f03a35cb89 WordPress 4.5.31.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@57419 602fd350-edb4-49c9-b593-d223f7449a82
2024-01-30 16:10:44 +00:00
Aaron Jorbin
da97951018 Grouped Backports to the 4.5 branch.
- Install: When populating options, maybe_serialize instead of always serialize.
- Uploads: Check for and verify ZIP archives.

Merges [57388] and [57389] to the 4.5 branch.

Props costdev, peterwilsoncc, azaozz, tykoted, johnbillion, desrosj, afragen, jorbin, xknown.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@57410 602fd350-edb4-49c9-b593-d223f7449a82
2024-01-30 15:10:15 +00:00
Jb Audras
4dedaa5ec2 WordPress 4.5.30.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@56863 602fd350-edb4-49c9-b593-d223f7449a82
2023-10-12 14:49:24 +00:00
David Baumwald
923c683f88 Grouped backports to the 4.5 branch.
- Comments: Prevent users who can not see a post from seeing comments on it.
- Shortcodes: Restrict media shortcode ajax to certain type.
- REST API: Ensure no-cache headers are sent when methods are overridden.
- Prevent unintended behavior when certain objects are unserialized.

Merges [56834], [56835], [56836], and [56838] to the 4.5 branch.
Props xknown, jorbin, joehoyle, timothyblynjacobs, peterwilsoncc, ehtis, tykoted, antpb, rmccue.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@56857 602fd350-edb4-49c9-b593-d223f7449a82
2023-10-12 14:34:12 +00:00
Sergey Biryukov
83de01619e Grouped backports to the 4.5 branch.
- Media: Prevent CSRF setting attachment thumbnails.
- Embeds: Add protocol validation for WordPress Embed code.

Merges [55763] and [55764] to the 4.5 branch.
Props dd32, isabel_brison, martinkrcho, matveb, ocean90, paulkevan, peterwilsoncc, timothyblynjacobs, xknown, youknowriad.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@55780 602fd350-edb4-49c9-b593-d223f7449a82
2023-05-16 15:39:32 +00:00
Jonathan Desrosiers
95a7a60cf1 Build/Test Tools: Backport updates to GitHub Actions.
This backports several changesets to GitHub Actions workflows. These changesets:

- address the deprecated notices related to save-output and set-output to ensure the workflows continue to run after these are removed.
- adds support for automatically retrying a failed workflow once.
- removes workflow files that are not applicable to the branch.
- backports some Docker environment related tooling updates for the sake of consistency across branches. 

Merges [53736], [53737], [53940], [53947], [54039], [54096], [54108], [54293], [54313], [54342], [54343], [54373], [54511], [54650], [54651], [54674], [54750], [54852], [55152], [54651], [55487] to the 4.5 branch.
See #55652, #56407, #56528, #54695, #56820, #56816, #56793, #56820, #57572.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@55531 602fd350-edb4-49c9-b593-d223f7449a82
2023-03-10 16:29:55 +00:00
Peter Wilson
55f3472684 I18N: Add new strings to about.php for use with end-of-life updates.
This changeset adds two additional translation strings in the changelog file, for use when releasing the final version of WordPress on a particular branch.

Props peterwilsoncc, audrasjb, mukesh27.
Merges [55350] to the 4.5 branch.
Fixes #57216.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@55387 602fd350-edb4-49c9-b593-d223f7449a82
2023-02-21 03:10:29 +00:00
Peter Wilson
dcc421820c Built/Test tools, HTTP API: Refactor test for multiple location headers.
Remove wordpress.org as an external dependency testing `WP_HTTP::handle_redirects()`.

This refactors and reenables an existing test to call the `WP_HTTP::handle_redirects()` method directly with a mocked array of HTTP headers containing multiple location headers.

The test is moved from the external-http group to the http test group as it no longer makes an HTTP request.

Follow up to [54955].

Props SergeyBiryukov, dd32, peterwilsoncc.
Merges [54968] to the 4.5 branch.
Fixes #57306.
See #56793.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@54990 602fd350-edb4-49c9-b593-d223f7449a82
2022-12-15 04:48:15 +00:00
Sergey Biryukov
893657b0c9 WordPress 4.5.28.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@54589 602fd350-edb4-49c9-b593-d223f7449a82
2022-10-17 19:48:59 +00:00
Sergey Biryukov
e79d8fa905 Grouped backports to the 4.5 branch.
- Posts, Post types: Apply KSES to post-by-email content,
- General: Validate host on "Are you sure?" screen,
- Posts, Post types: Remove emails from post-by-email logs,
- Pings/trackbacks: Apply KSES to all trackbacks,
- Comments: Apply kses when editing comments,
- Customize: Escape blogname option in underscores templates,
- Mail: Reset PHPMailer properties between use,
- Query: Validate relation in `WP_Date_Query`,
- Widgets: Escape RSS error messages for display.

Merges [54521], [54522], [54523], [54525], [54526], [54527], [54529], [54530], [54541] to the 4.5 branch.
Props voldemortensen, johnbillion, paulkevan, peterwilsoncc, xknown, dd32, audrasjb, martinkrcho, davidbaumwald, tykoted, johnjamesjacoby, ehtis, matveb, talldanwp.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@54560 602fd350-edb4-49c9-b593-d223f7449a82
2022-10-17 18:02:28 +00:00
Peter Wilson
e223196b0d Security: Introduce strings to indicate support status.
Add strings for use in future maintenance/security releases to indicate the security support status of the version of WordPress.

Two strings are introduced:

* indicating the version of WordPress is not receiving security updates, and,
* indicating the version of WordPress will shortly stop receiving security updates.

This change does not make use of the strings, the purpose is to make them available to translators prior to dropping support of selected versions of WordPress.

Props costdev, chesio, robinwpdeveloper, desrosj, rudlinkon, mukesh27, sumitbagthariya16.
Merges [54322] to the 4.5 branch.
See #56532.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@54455 602fd350-edb4-49c9-b593-d223f7449a82
2022-10-10 22:17:04 +00:00
Jonathan Desrosiers
989581b7b0 WordPress 4.5.27.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@54002 602fd350-edb4-49c9-b593-d223f7449a82
2022-08-30 17:27:45 +00:00
Sergey Biryukov
c8e1c9b680 Grouped backports to the 4.5 branch.
- Posts, Post Types: Escape output within `the_meta()`.
- General: Ensure bookmark query limits are numeric.
- Plugins: Escape output in error messages.

Merges [53958-53960] to the 4.5 branch.
Props tykoted, martinkrcho, xknown, dd32, peterwilsoncc, paulkevan, timothyblynjacobs.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@53978 602fd350-edb4-49c9-b593-d223f7449a82
2022-08-30 15:48:39 +00:00
Jonathan Desrosiers
7dfe7cc7e8 Build/Test Tools: Use the Slack notifications workflow as a reusable one.
This backports several changesets that are required to remove the reliance on the `workflow_run` event for posting Slack notifications.

The Slack notification workflow will now be called as a reusable one, which has several benefits (see [53591]).

Several other minor GitHub Actions related updates are also being backported in this commit to maintain tooling consistency across branches that still receive security updates as a courtesy when necessary.

Workflows that are not relevant to this branch that were mistakenly backported are also being deleted.

Merges [50473], [50704], [50930], [51341], [51355], [51498], [51511], [51535], [51924], [51925], [51937], [52002], [52130], [52183], [52233], [53112], [53581], [53582], [53592] to the 4.5 branch.
See #56095.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@53616 602fd350-edb4-49c9-b593-d223f7449a82
2022-06-30 17:19:15 +00:00
David Baumwald
b1c64b5b3f WordPress 4.5.26.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@52888 602fd350-edb4-49c9-b593-d223f7449a82
2022-03-10 22:14:05 +00:00
Sergey Biryukov
4be373efa2 External Librairies: Update jQuery.query to version 2.2.3.
This updates the "jquery-query" library from version 2.1.7 to 2.2.3.

Props jorbin, peterwilsoncc, xknown, audrasjb, jorgefilipecosta.
Merges [52844] to the 4.5 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@52861 602fd350-edb4-49c9-b593-d223f7449a82
2022-03-10 21:37:17 +00:00
Jonathan Desrosiers
008d7c9e01 WordPress 4.5.25.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@52500 602fd350-edb4-49c9-b593-d223f7449a82
2022-01-06 18:46:13 +00:00
Jonathan Desrosiers
683a45dceb Grouped backports to the 4.5 branch.
- Query: Improve sanitization within `WP_Tax_Query`.
- Query: Improve sanitization within `WP_Meta_Query`.
- Upgrade/Install: Avoid using `unserialize()` unnecessarily.
- Formatting: Correctly encode ASCII characters in post slugs.

Merges [52454-52457] to the 4.5 branch.
Props vortfu, dd32, ehtis, zieladam, whyisjake, xknown, peterwilsoncc, desrosj, iandunn.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@52478 602fd350-edb4-49c9-b593-d223f7449a82
2022-01-06 18:17:02 +00:00
Sergey Biryukov
6ec895a915 Date/Time: Use delta comparison in get_gmt_from_date() tests to avoid race conditions.
Follow-up to [35284].

Props keesiemeijer.
Merges [41920] to the 4.5 branch.
See #38815.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@51615 602fd350-edb4-49c9-b593-d223f7449a82
2021-08-15 13:39:01 +00:00
Peter Wilson
be4a2d0e74 WordPress 4.5.24.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@50881 602fd350-edb4-49c9-b593-d223f7449a82
2021-05-12 23:20:25 +00:00
Peter Wilson
21a3679ac3 External libraries: Improve attachment handling in PHPMailer
Props: audrasjb, ayeshrajans, desrosj, peterwilsoncc, xknown.
Partially merges [50799] to the 4.5 branch.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@50859 602fd350-edb4-49c9-b593-d223f7449a82
2021-05-12 22:31:49 +00:00
Jonathan Desrosiers
494e00830e Build/Test Tools: Backport GitHub Action and build improvements to the 4.5 branch.
This backports several build and test tool improvements to the 4.5 branch. Most notably, this includes:

- The changes required to allow each workflow to be triggered by the `workflow_dispatch` event so that tests can be run on a schedule [50590].
- Splitting single site and multisite tests into parallel jobs [50379].
- Split slow tests into separate, parallel jobs for PHP <= 5.6 [50444].
- Better branch and path scoping for GitHub Action workflows when running on `pull_request` [50432,50479].
- Several `devDependency` updates.

Merges [50379,50387,50416,50432,50435,50436,50444,50446,50473,50474,50476,50479,50485,50486,50487,50545,50579,50590] to the 4.5 branch.
See #50401, #51801, #51802, #52548, #52612, #52624, #52625, #52645, #52653, #52658, #52660, #52667.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@50638 602fd350-edb4-49c9-b593-d223f7449a82
2021-04-02 15:39:31 +00:00
Jonathan Desrosiers
f849de0e10 Build/Test Tools: Remove unused test groups from the 4.5 branch.
Follow up to [50313].

See #50401.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@50329 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-12 21:07:03 +00:00
Jonathan Desrosiers
96abcf3067 Build/Test Tools: Add an object cache drop-in.
This adds an object cache drop-in to the `tests/phpunit/includes` directory to avoid relying on and having to copy from an external repository.

Follow up to [50313].

See #50401.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@50315 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-12 20:10:11 +00:00
Jonathan Desrosiers
766399744d Build/Test Tools: Restore automated testing in the 4.5 branch.
This commit merges the workflow files required to run automated testing on GitHub Actions.

In addition, [49836] and [50285] have been included in order to keep the local Docker environment consistent across all branches.

Merges [49162,49168-49169,49175,49204,49227-49228,49244,49369,49371,49548,49781-49784,49786,49836,49938,50268,50285,50298] to the 4.5 branch.
See #50401.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@50313 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-12 20:00:11 +00:00
Jonathan Desrosiers
5a92c7bd76 Build/Test Tools: Backport the local Docker environment to the 4.5 branch.
This commit introduces the Docker-based local WordPress development environment to the 4.5 branch and converts the Travis test jobs to utilize this environment for easier and more consistent testing.

Merges [44176,45445,45745,45762,45783-45784,45800,45819,45885,46320,46999,47225,47912,48121,49267,49335,49358,49360,49362] to the 4.5 branch.
See #48301, #47767.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@50243 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-08 20:50:12 +00:00
Jonathan Desrosiers
0c39994b9d Build/Test Tools: Ignore patch related files, so they can't be accidentally committed.
Merges [39360-39361] to the 4.5 branch.
See #38727.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@50209 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-05 04:21:05 +00:00
Jonathan Desrosiers
2f3e040c4f Build/Test Tools: Support NodeJS 14.x in the 4.5 branch.
This updates the 4.5 branch to support the latest LTS version of NodeJS (currently 14.x), allowing the same version to be used across all WordPress branches that receive security updates as a courtesy.

Because older branches use (really) old versions of NodeJS, the local Docker environment cannot be backported since the needed dependencies will not run on these older versions (see #48301). This also blocks the ability to move automated testing over to GitHub Actions (see #50401).

This also replaces the `npm-shrinkwrap.json` with a `package-lock.json` file. Lock files were not supported in earlier versions of NPM, but can now be used.

In addition to backporting the package updates that happened after branching 4.5, dependencies that were removed in future releases have also been updated to their latest versions.

Props desrosj, dd32, netweb, jorbin.
Merges [37185,37212,37612,38111,38688,39110,39113-39119,39478,42460-42461,42463,42887,43320,43323,43977,44219,44233,44728,45321,45765,46404,46408-46409,47404,47867-47869,47872-47873,48705,49636,49933,49937,49939,50017,50126,50176,50185,50192] to the 4.5 branch.
See #52341.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@50208 602fd350-edb4-49c9-b593-d223f7449a82
2021-02-05 04:19:31 +00:00
Sergey Biryukov
994ccb10f9 Tests: Move skipTestOnTimeout() to a more appropriate location, for consistency with other branches.
Follow-up to [50088].

Merges [50097] to the 4.5 branch.
See #51669.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@50099 602fd350-edb4-49c9-b593-d223f7449a82
2021-01-30 15:26:30 +00:00
Sergey Biryukov
f8317b35a7 Tests: Use skipTestOnTimeout() in more HTTP tests.
Adjust it to handle more types of timeouts, e.g. "Resolving timed out", "Connection timed out".

Merges [38757], [43511], [43512], [46682], [46996] to the 4.5 branch.
See #51669.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@50090 602fd350-edb4-49c9-b593-d223f7449a82
2021-01-30 12:04:12 +00:00
Jonathan Desrosiers
9fc560b07b Build/Test Tools: Remove the TravisCI configuration file.
In [49162], GitHub Action workflow configuration files were introduced to run all of Core’s automated testing with the intent to fully transition after some time was allowed for testing.

After two full months of testing, the time to finish this transition has come.

We thank TravisCI for testing the codebase through nearly 20 major and many more minor releases.

Merges [49876] to the 4.5 branch.
See #52161. See #50401.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@49888 602fd350-edb4-49c9-b593-d223f7449a82
2020-12-22 21:10:49 +00:00
Jake Spurlock
13cc6cc6e3 Build/Test Tools: Match .nvmrc with the declared node engine.
Let's match up the versions from package.json, .travis.yml and .nvmrc.

This brings the changes from [49653] to the 4.5 branch.

Fixes #51682.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@49658 602fd350-edb4-49c9-b593-d223f7449a82
2020-11-18 22:56:31 +00:00
Jake Spurlock
7d3e6bd78d Build/Test Tools: Match .nvmrc with the declared node engine.
Let's match up the versions from package.json, .travis.yml and .nvmrc.

This brings the changes from [49653] to the 4.5 branch.

Fixes #51682.

Props SergeyBiryukov, desrosj, whyisjake.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@49657 602fd350-edb4-49c9-b593-d223f7449a82
2020-11-18 22:52:48 +00:00
Jonathan Desrosiers
a5fc920c18 WordPress 4.5.23.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@49419 602fd350-edb4-49c9-b593-d223f7449a82
2020-10-29 19:34:03 +00:00
Jake Spurlock
05a7b2bce2 General: WordPress updates
* XML-RPC: Improve error messages for unprivileged users.
* External Libraries: Disable deserialization in Requests_Utility_FilteredIterator
* Embeds: Disable embeds on deactivated Multisite sites.
* Coding standards: Modify escaping functions to avoid potential false positives.
* XML-RPC: Return error message if attachment ID is incorrect.
* Upgrade/install: Improve logic check when determining installation status.
* Meta: Sanitize meta key before checking protection status.
* Themes: Ensure that only privileged users can set a background image when a theme is using the deprecated custom background page.

Brings the changes from [49380,49382-49388] to the 4.5 branch.

Props xknown, zieladam, peterwilsoncc, whyisjake, desrosj, dd32.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@49401 602fd350-edb4-49c9-b593-d223f7449a82
2020-10-29 19:01:42 +00:00
Sergey Biryukov
87ed4449f3 Administration: Pass the result of set-screen-option filter to the new set_screen_option_{$option} filter to ensure backward compatibility.
Rename the `$keep` parameter of both filters to `$screen_option` for clarity, update the documentation to better reflect its purpose.

Follow-up to [47951].

Props Chouby, sswells, SergeyBiryukov.
Merges [48241] to the 4.5 branch.
Fixes #50392.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@48253 602fd350-edb4-49c9-b593-d223f7449a82
2020-07-01 09:49:28 +00:00
Jonathan Desrosiers
d2c2699f9c WordPress 4.5.22.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@47998 602fd350-edb4-49c9-b593-d223f7449a82
2020-06-10 21:32:38 +00:00
Jake Spurlock
6552d95984 General: Backport several commits for release.
- Embeds: Ensure that the title attribute is set correctly on embeds.
- Editor: Prevent HTML decoding on by setting the proper editor context.
- Formatting: Ensure that wp_validate_redirect() sanitizes a wider variety of characters.
- Themes: Ensure a broken theme name is returned properly.
- Administration: Add a new filter to extend set-screen-option.
Merges [47947-47951] to the 4.5 branch.
Props xknown, sstoqnov, vortfu, SergeyBiryukov, whyisjake.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@47973 602fd350-edb4-49c9-b593-d223f7449a82
2020-06-10 18:39:52 +00:00
Sergey Biryukov
5c08ae53ec Update the About page for WordPress 4.5.21
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@47695 602fd350-edb4-49c9-b593-d223f7449a82
2020-04-29 18:32:00 +00:00
Jonathan Desrosiers
939846655e WordPress 4.5.21
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@47675 602fd350-edb4-49c9-b593-d223f7449a82
2020-04-29 17:56:28 +00:00
Jake Spurlock
6ae390697f Cache API: Ensure proper escaping around the stats method in the cache API.
Brings the changes in [47637] to the 4.5 branch.

Props: nickdaugherty, batmoo, whyisjake, westi.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@47654 602fd350-edb4-49c9-b593-d223f7449a82
2020-04-29 16:42:56 +00:00
Jake Spurlock
971529fb03 User: Invalidate user_activation_key on password update.
Query: Ensure that only a single post can be returned on date/time based queries.
Cache API: Ensure proper escaping around the stats method in the cache API.
Formatting: Expand `sanitize_file_name` to have better support for utf8 characters.

Brings the changes in [47634], [47635], [47637], and [47638] to the 4.7 branch.

Props: batmoo, ehti, nickdaugherty, peterwilsoncc, sergeybiryukov, sstoqnov, westi, whyisjake, whyisjake, xknown.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@47652 602fd350-edb4-49c9-b593-d223f7449a82
2020-04-29 16:25:54 +00:00
Sergey Biryukov
daf66727df Build/Test Tools: Remove unused ::assertPostHasTerms() method from tests/term.php.
The associated test was removed in [30241].

Merges [47341] to 3.7+ branches.
See #49485.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@47489 602fd350-edb4-49c9-b593-d223f7449a82
2020-03-22 14:29:03 +00:00
Sergey Biryukov
9f33a098c9 Embeds: Remove the external oEmbed tests for YouTube.
These tests no longer test anything that WordPress core has control over. YouTube now serves everything
over HTTPS by default, so the tests for #23149 will always pass, and the tests for #32714 aren't testing
anything that core has control over.

Tests for the responses from oEmbed providers has been attempted and reverted in #32360.

Props johnbillion.
Merges [41712] to the 4.4 branch.
See #42076, #32714, #23149.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@47483 602fd350-edb4-49c9-b593-d223f7449a82
2020-03-22 13:57:09 +00:00
Sergey Biryukov
4f12f34567 Embeds: Remove the external oEmbed tests for YouTube.
These tests no longer test anything that WordPress core has control over. YouTube now serves everything
over HTTPS by default, so the tests for #23149 will always pass, and the tests for #32714 aren't testing
anything that core has control over.

Tests for the responses from oEmbed providers has been attempted and reverted in #32360.

Props johnbillion.
Merges [41712] to the 4.5 branch.
See #42076, #32714, #23149.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@47482 602fd350-edb4-49c9-b593-d223f7449a82
2020-03-22 13:46:15 +00:00
Sergey Biryukov
e9e95c33cd WordPress 4.5.20
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@46928 602fd350-edb4-49c9-b593-d223f7449a82
2019-12-12 20:29:37 +00:00
Sergey Biryukov
9573084b5d Update wp_kses_bad_protocol() to recognize &colon; on uri attributes,
`wp_kses_bad_protocol()` makes sure to validate that uri attributes don’t contain invalid/or not allowed protocols. While this works fine in most cases, there’s a risk that by using the colon html5 named entity, one is able to bypass this function.

Brings r46895 to the 4.5 branch.

Props: xknown, nickdaugherty, peterwilsoncc.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@46913 602fd350-edb4-49c9-b593-d223f7449a82
2019-12-12 18:44:52 +00:00
Jonathan Desrosiers
578c990d87 WordPress 4.5.19.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@46515 602fd350-edb4-49c9-b593-d223f7449a82
2019-10-14 20:10:22 +00:00