Aaron D. Campbell
a2e3ba44f2
oEmbed: Add extra hardening around allowed HTML for improved sandboxing.
...
Merges [41448] to 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41454 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 13:49:05 +00:00
Dominik Schilling (ocean90)
e9e201ecc4
TinyMCE: Improve the previews for shortcodes.
...
Merge of [41395] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41438 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 12:40:17 +00:00
Dominik Schilling (ocean90)
45299e9be0
Customize: Ensure valid themes in the preview.
...
Merge of [41397] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41432 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 11:49:48 +00:00
Dominik Schilling (ocean90)
8f43314cd7
Taxonomy/Users: Provide a fallback for incorrect HTTP referrers.
...
Merge of [41398] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41420 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 11:10:29 +00:00
John Blackbourn
3fd5010f4f
General: Remove context added in [41414] in order to avoid a string change in a point release.
...
See #13377
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41416 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 10:45:31 +00:00
John Blackbourn
9926ecfeed
General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.
...
Merges [41414] into the 4.5. branch
See #13377
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41415 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 10:31:43 +00:00
Dominik Schilling (ocean90)
0943fa4dfd
Editor: Prevent adding javascript:
and data:
URLs through the inline link dialog.
...
Merge of [41393] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41403 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 10:15:01 +00:00
John Blackbourn
d24e82c3cf
Build/Test tools: Use the latest in the 4.x and 5.x branches of PHPUnit when running tests on Travis for the 4.5 branch.
...
See #41472
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41298 602fd350-edb4-49c9-b593-d223f7449a82
2017-08-22 17:20:55 +00:00
John Blackbourn
9610cbc4af
General: Backport PHP 7.1 fixes to the 4.5 branch to avoid fatal errors and warnings.
...
Props simonvik, ayeshrajans
See #41135
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41128 602fd350-edb4-49c9-b593-d223f7449a82
2017-07-24 22:24:07 +00:00
John Blackbourn
977e256921
Build: Correct the Ubuntu image for PHP 5.2 and 5.6 on the 4.5 branch.
...
See [41076], #41292 .
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41077 602fd350-edb4-49c9-b593-d223f7449a82
2017-07-18 14:14:37 +00:00
John Blackbourn
2329c68cab
Build: Switch PHP 5.2 to Travis' Ubuntu precise
image for the 4.5 branch.
...
See #41292
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41076 602fd350-edb4-49c9-b593-d223f7449a82
2017-07-18 14:11:40 +00:00
Konstantin Obenland
c662b5bb4a
Import Twenty Sixteen, default theme for 2016.
...
See #36497 .
Merges [40851] and [40852] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40858 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-31 01:28:30 +00:00
John Blackbourn
015ae5df63
Build/Test Tools: Remove mentions of HHVM from the test infrastructure on Travis for the 4.5 branch.
...
Props netweb
See #40548
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40828 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-24 14:28:50 +00:00
Aaron D. Campbell
b4edd57c9f
Bump 4.7 branch to version 4.5.9.
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40750 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 21:48:55 +00:00
Pascal Birchler
c3e6ee8c9c
Media: Simplify upload error message construction.
...
Merges [40736] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40739 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 18:00:17 +00:00
Aaron D. Campbell
e046225a1f
Add nonce for updating file system credentials.
...
Merges [40723] to 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40726 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 14:52:45 +00:00
Weston Ruter
d83f0a2443
Customize: Fix phpunit tests after [40704] due to logic inversion error.
...
Merge of [40716] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40719 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 14:41:45 +00:00
Dominik Schilling (ocean90)
b373614bc8
Customize: Ignore invalid customization sessions.
...
Merge of [40704] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40707 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 12:15:06 +00:00
Pascal Birchler
822349bb7c
Adjust post meta checks
...
Merges [40692] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40695 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 08:49:05 +00:00
Pascal Birchler
6254b3183e
Whitelist post arguments in XML-RPC
...
Merges [40677] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40680 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 08:19:33 +00:00
Aaron Jorbin
8fb4e44336
Build/Test: Post Travis results to Slack from WordPress/wordpress-develop
...
Backports [40604] to 4.6
Now that the WordPress/wordpress-develop GitHub repo is syncing correctly, we can use it for Travis integration.
Props jorbin for getting the ball rolling so long ago, unprops jorbin because his Travis build can finally be retired. Props Pento.
See #40712 .
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40618 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-11 00:33:32 +00:00
John Blackbourn
858368702d
Build/Test Tools: Add Composer files to the cache on Travis.
...
The Travis cache is specific to the branch and language version (PHP version), so this should speed up each subsequent build once the cache is primed.
See #40539
Merges [40538] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40549 602fd350-edb4-49c9-b593-d223f7449a82
2017-04-24 00:41:51 +00:00
Pascal Birchler
b9c3d4c9ad
Bump 4.5 branch to version 4.5.8.
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40489 602fd350-edb4-49c9-b593-d223f7449a82
2017-04-20 16:22:27 +00:00
Pascal Birchler
352d774ea7
Fix broken audio/video functions when sanitizing ID3 data
...
This fixes a bug where running `wp_kses_post_deep()` on all the ID3
tag data corrupted blob data.
See #40075 , #40085 .
Merges [40400] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40462 602fd350-edb4-49c9-b593-d223f7449a82
2017-04-17 13:14:01 +00:00
John Blackbourn
850b9fb9b5
Build/Test tools: Reverse the order in which the Travis jobs run on the 4.5 branch.
...
See #39705
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40437 602fd350-edb4-49c9-b593-d223f7449a82
2017-04-15 17:48:20 +00:00
John Blackbourn
d4dd178460
Build/Test tools: Trim the test matrix on Travis in order to speed up the 4.5 branch build.
...
This removes all allowed failure jobs, plus PHP 5.3, 5.4, and 5.5 jobs.
See #40407
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40411 602fd350-edb4-49c9-b593-d223f7449a82
2017-04-10 23:27:53 +00:00
John Blackbourn
cc33575669
Build/Test tools: Get Travis builds working on HHVM again.
...
This change moves to specifying the PHPUnit version for all PHP versions, and fixes an issue where the Composer global bin directory is not at `~/.composer/vendor/bin` on the boxes that are used for HHVM builds.
See #40100
Merges [40269] and [40271] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40274 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-11 00:13:53 +00:00
John Blackbourn
e9ca30c0c2
Build/Test tools: Switch to Node 4.7.2 when testing the 4.5 branch.
...
This avoids errors with older dependencies in package.json.
Props netweb
See #35105
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40266 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-10 15:21:19 +00:00
Dominik Schilling (ocean90)
974ed62da0
Build/Test Tools: Update .travis.yml
to include latest improvements from trunk.
...
* Explicitly use PHPUnit 5.7 for the PHP 7 builds on Travis.
* On Travis CI install and use the node version which is specified in package.json.
* Add some more debugging to Travis and bring the format of the Xdebug fix inline with branches.
Merge of [40255] and [40257-40259] to the 4.5 branch.
Props netweb, johnbillion.
See #35105 , #39822 , #40086 .
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40262 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-09 22:40:38 +00:00
John Blackbourn
894194b869
Build/Test tools: In Travis, skip some tests when not on trunk.
...
This skips time sensitive tests (copyright year and PHP/MySQL version requirements) when tests are run on branches on Travis.
Props netweb, jorbin
Fixes #39486
Merges [40241] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40242 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-08 00:10:29 +00:00
John Blackbourn
7bc11f4d1e
Build/Test Tools: Disable Xdebug when testing on Travis to increase performance.
...
See #39978
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40227 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-07 01:07:45 +00:00
James Nylen
4188433d17
Bump 4.5 branch to version 4.5.7.
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40204 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-06 16:17:16 +00:00
John Blackbourn
6f49bd7932
Press This: Verify intent before fetching in-page resources using Press This.
...
Props vortfu
Merges [40195] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40198 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-06 13:58:45 +00:00
Aaron D. Campbell
3332aedf2a
Strip control characters before validating redirect.
...
Merges [40183] to 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40186 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-06 13:40:49 +00:00
Aaron D. Campbell
1cd1ca1a5b
Plugins: Add file check to plugin deletions.
...
Merges [40169] to 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40172 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-06 12:59:22 +00:00
Dominik Schilling (ocean90)
80109311e5
Embeds: URL encode YouTube video IDs for broader compatibility.
...
Merge of [40160] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40163 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-06 12:04:35 +00:00
Jeremy Felt
ef7997010d
Validate video and audio metadata.
...
Merge of [40148] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40151 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-06 08:04:57 +00:00
Aaron D. Campbell
c239ef6bb3
Bump 4.5 branch to version 4.5.6.
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39998 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-26 18:20:59 +00:00
John Blackbourn
1f215d4d1c
Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field.
...
Merges [39956] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39977 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-26 14:11:16 +00:00
Dominik Schilling (ocean90)
cf3d9dbdd9
Press This: Do not show Categories & Tags UI for users who cannot assign terms to posts anyways.
...
Merge of [39968] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39972 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-26 14:09:27 +00:00
Dominik Schilling (ocean90)
6eb75ae0c0
Query: Ensure that queries work correctly with post type names with special characters.
...
Merge of [39952] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39958 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-26 13:49:12 +00:00
Aaron D. Campbell
ad15c71200
Bump 4.5 branch to version 4.5.5.
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39862 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 16:54:58 +00:00
Joe McGill
4eb761cdb4
Media: Fix exif_imagetype check in wp_get_image_mime
...
This is a follow up to [39831].
Merges [39850] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39853 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 16:39:22 +00:00
Joe McGill
50769a2888
Media: Improve image filetype checking.
...
This adds a new function `wp_get_image_mime()` which is used by
`wp_check_filetype_and_ext()` to validate image files using
`exif_imagetype()` if available instead of `getimagesize()`.
`getimagesize()` is less performant than `exif_imagetype()` and is
dependent on GD. If `exif_imagetype()` is not available, it falls back to
`getimagesize()` as before.
If `wp_check_filetype_and_ext()` can't validate the filetype, we now return
`false` for ext/MIME values.
Merges [39831] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39834 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 13:14:31 +00:00
Dominik Schilling (ocean90)
3838b0c2b0
Updates: Translate plugin data on the Updates screen.
...
Merge of [39808] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39822 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 11:38:56 +00:00
Dominik Schilling (ocean90)
4fd11d2a54
Themes: Fix markup for theme name fallbacks.
...
Merge of [39807] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39811 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 11:08:39 +00:00
Jeremy Felt
e1cba619ea
Multisite: Use wp_rand()
in signup key creation.
...
Merges [39795] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39798 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 05:31:14 +00:00
Dion Hulse
104f0b2a6d
Update PHPMailer to 5.2.22.
...
The full list of changes is available here:
https://github.com/PHPMailer/PHPMailer/compare/v5.2.21...v5.2.22
Merges [39759] to the 4.5 branch.
Fixes #37210 for 4.5.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39786 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 05:21:48 +00:00
Jeremy Felt
0e44816ae3
Mail: Disable wp-mail.php when mailserver_url
is mail.example.com.
...
Merges [39772] to the 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39775 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 05:15:46 +00:00
Aaron D. Campbell
966816927d
Add nonce for widget accessibility mode.
...
Props vortfu.
See #23328 .
Merges [39760] to 4.5 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39763 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 01:43:50 +00:00