34250 Commits

Author SHA1 Message Date
Aaron D. Campbell
a2e3ba44f2 oEmbed: Add extra hardening around allowed HTML for improved sandboxing.
Merges [41448] to 4.5 branch.




git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41454 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 13:49:05 +00:00
Dominik Schilling (ocean90)
e9e201ecc4 TinyMCE: Improve the previews for shortcodes.
Merge of [41395] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41438 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 12:40:17 +00:00
Dominik Schilling (ocean90)
45299e9be0 Customize: Ensure valid themes in the preview.
Merge of [41397] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41432 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 11:49:48 +00:00
Dominik Schilling (ocean90)
8f43314cd7 Taxonomy/Users: Provide a fallback for incorrect HTTP referrers.
Merge of [41398] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41420 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 11:10:29 +00:00
John Blackbourn
3fd5010f4f General: Remove context added in [41414] in order to avoid a string change in a point release.
See #13377


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41416 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 10:45:31 +00:00
John Blackbourn
9926ecfeed General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.
Merges [41414] into the 4.5. branch

See #13377


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41415 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 10:31:43 +00:00
Dominik Schilling (ocean90)
0943fa4dfd Editor: Prevent adding javascript: and data: URLs through the inline link dialog.
Merge of [41393] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41403 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 10:15:01 +00:00
John Blackbourn
d24e82c3cf Build/Test tools: Use the latest in the 4.x and 5.x branches of PHPUnit when running tests on Travis for the 4.5 branch.
See #41472


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41298 602fd350-edb4-49c9-b593-d223f7449a82
2017-08-22 17:20:55 +00:00
John Blackbourn
9610cbc4af General: Backport PHP 7.1 fixes to the 4.5 branch to avoid fatal errors and warnings.
Props simonvik, ayeshrajans

See #41135


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41128 602fd350-edb4-49c9-b593-d223f7449a82
2017-07-24 22:24:07 +00:00
John Blackbourn
977e256921 Build: Correct the Ubuntu image for PHP 5.2 and 5.6 on the 4.5 branch.
See [41076], #41292.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41077 602fd350-edb4-49c9-b593-d223f7449a82
2017-07-18 14:14:37 +00:00
John Blackbourn
2329c68cab Build: Switch PHP 5.2 to Travis' Ubuntu precise image for the 4.5 branch.
See #41292


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41076 602fd350-edb4-49c9-b593-d223f7449a82
2017-07-18 14:11:40 +00:00
Konstantin Obenland
c662b5bb4a Import Twenty Sixteen, default theme for 2016.
See #36497.

Merges [40851] and [40852] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40858 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-31 01:28:30 +00:00
John Blackbourn
015ae5df63 Build/Test Tools: Remove mentions of HHVM from the test infrastructure on Travis for the 4.5 branch.
Props netweb

See #40548


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40828 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-24 14:28:50 +00:00
Aaron D. Campbell
b4edd57c9f Bump 4.7 branch to version 4.5.9.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40750 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 21:48:55 +00:00
Pascal Birchler
c3e6ee8c9c Media: Simplify upload error message construction.
Merges [40736] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40739 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 18:00:17 +00:00
Aaron D. Campbell
e046225a1f Add nonce for updating file system credentials.
Merges [40723] to 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40726 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 14:52:45 +00:00
Weston Ruter
d83f0a2443 Customize: Fix phpunit tests after [40704] due to logic inversion error.
Merge of [40716] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40719 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 14:41:45 +00:00
Dominik Schilling (ocean90)
b373614bc8 Customize: Ignore invalid customization sessions.
Merge of [40704] to the 4.5 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40707 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 12:15:06 +00:00
Pascal Birchler
822349bb7c Adjust post meta checks
Merges [40692] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40695 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 08:49:05 +00:00
Pascal Birchler
6254b3183e Whitelist post arguments in XML-RPC
Merges [40677] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40680 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-16 08:19:33 +00:00
Aaron Jorbin
8fb4e44336 Build/Test: Post Travis results to Slack from WordPress/wordpress-develop
Backports [40604] to 4.6

Now that the WordPress/wordpress-develop GitHub repo is syncing correctly, we can use it for Travis integration.

Props jorbin for getting the ball rolling so long ago, unprops jorbin because his Travis build can finally be retired. Props Pento.

See #40712.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40618 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-11 00:33:32 +00:00
John Blackbourn
858368702d Build/Test Tools: Add Composer files to the cache on Travis.
The Travis cache is specific to the branch and language version (PHP version), so this should speed up each subsequent build once the cache is primed.

See #40539

Merges [40538] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40549 602fd350-edb4-49c9-b593-d223f7449a82
2017-04-24 00:41:51 +00:00
Pascal Birchler
b9c3d4c9ad Bump 4.5 branch to version 4.5.8.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40489 602fd350-edb4-49c9-b593-d223f7449a82
2017-04-20 16:22:27 +00:00
Pascal Birchler
352d774ea7 Fix broken audio/video functions when sanitizing ID3 data
This fixes a bug where running `wp_kses_post_deep()` on all the ID3
tag data corrupted blob data.

See #40075, #40085.

Merges [40400] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40462 602fd350-edb4-49c9-b593-d223f7449a82
2017-04-17 13:14:01 +00:00
John Blackbourn
850b9fb9b5 Build/Test tools: Reverse the order in which the Travis jobs run on the 4.5 branch.
See #39705


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40437 602fd350-edb4-49c9-b593-d223f7449a82
2017-04-15 17:48:20 +00:00
John Blackbourn
d4dd178460 Build/Test tools: Trim the test matrix on Travis in order to speed up the 4.5 branch build.
This removes all allowed failure jobs, plus PHP 5.3, 5.4, and 5.5 jobs.

See #40407


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40411 602fd350-edb4-49c9-b593-d223f7449a82
2017-04-10 23:27:53 +00:00
John Blackbourn
cc33575669 Build/Test tools: Get Travis builds working on HHVM again.
This change moves to specifying the PHPUnit version for all PHP versions, and fixes an issue where the Composer global bin directory is not at `~/.composer/vendor/bin` on the boxes that are used for HHVM builds.

See #40100

Merges [40269] and [40271] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40274 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-11 00:13:53 +00:00
John Blackbourn
e9ca30c0c2 Build/Test tools: Switch to Node 4.7.2 when testing the 4.5 branch.
This avoids errors with older dependencies in package.json.

Props netweb

See #35105


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40266 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-10 15:21:19 +00:00
Dominik Schilling (ocean90)
974ed62da0 Build/Test Tools: Update .travis.yml to include latest improvements from trunk.
* Explicitly use PHPUnit 5.7 for the PHP 7 builds on Travis.
* On Travis CI install and use the node version which is specified in package.json.
* Add some more debugging to Travis and bring the format of the Xdebug fix inline with branches.

Merge of [40255] and [40257-40259] to the 4.5 branch.

Props netweb, johnbillion.
See #35105, #39822, #40086.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40262 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-09 22:40:38 +00:00
John Blackbourn
894194b869 Build/Test tools: In Travis, skip some tests when not on trunk.
This skips time sensitive tests (copyright year and PHP/MySQL version requirements) when tests are run on branches on Travis.

Props netweb, jorbin

Fixes #39486

Merges [40241] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40242 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-08 00:10:29 +00:00
John Blackbourn
7bc11f4d1e Build/Test Tools: Disable Xdebug when testing on Travis to increase performance.
See #39978


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40227 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-07 01:07:45 +00:00
James Nylen
4188433d17 Bump 4.5 branch to version 4.5.7.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40204 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-06 16:17:16 +00:00
John Blackbourn
6f49bd7932 Press This: Verify intent before fetching in-page resources using Press This.
Props vortfu

Merges [40195] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40198 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-06 13:58:45 +00:00
Aaron D. Campbell
3332aedf2a Strip control characters before validating redirect.
Merges [40183] to 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40186 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-06 13:40:49 +00:00
Aaron D. Campbell
1cd1ca1a5b Plugins: Add file check to plugin deletions.
Merges [40169] to 4.5 branch.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40172 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-06 12:59:22 +00:00
Dominik Schilling (ocean90)
80109311e5 Embeds: URL encode YouTube video IDs for broader compatibility.
Merge of [40160] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40163 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-06 12:04:35 +00:00
Jeremy Felt
ef7997010d Validate video and audio metadata.
Merge of [40148] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40151 602fd350-edb4-49c9-b593-d223f7449a82
2017-03-06 08:04:57 +00:00
Aaron D. Campbell
c239ef6bb3 Bump 4.5 branch to version 4.5.6.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39998 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-26 18:20:59 +00:00
John Blackbourn
1f215d4d1c Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field.
Merges [39956] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39977 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-26 14:11:16 +00:00
Dominik Schilling (ocean90)
cf3d9dbdd9 Press This: Do not show Categories & Tags UI for users who cannot assign terms to posts anyways.
Merge of [39968] to the 4.5 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39972 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-26 14:09:27 +00:00
Dominik Schilling (ocean90)
6eb75ae0c0 Query: Ensure that queries work correctly with post type names with special characters.
Merge of [39952] to the 4.5 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39958 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-26 13:49:12 +00:00
Aaron D. Campbell
ad15c71200 Bump 4.5 branch to version 4.5.5.
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39862 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 16:54:58 +00:00
Joe McGill
4eb761cdb4 Media: Fix exif_imagetype check in wp_get_image_mime
This is a follow up to [39831].

Merges [39850] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39853 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 16:39:22 +00:00
Joe McGill
50769a2888 Media: Improve image filetype checking.
This adds a new function `wp_get_image_mime()` which is used by
`wp_check_filetype_and_ext()` to validate image files using
`exif_imagetype()` if available instead of `getimagesize()`.

`getimagesize()` is less performant than `exif_imagetype()` and is
dependent on GD. If `exif_imagetype()` is not available, it falls back to
`getimagesize()` as before.

If `wp_check_filetype_and_ext()` can't validate the filetype, we now return
`false` for ext/MIME values.

Merges [39831] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39834 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 13:14:31 +00:00
Dominik Schilling (ocean90)
3838b0c2b0 Updates: Translate plugin data on the Updates screen.
Merge of [39808] to the 4.5 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39822 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 11:38:56 +00:00
Dominik Schilling (ocean90)
4fd11d2a54 Themes: Fix markup for theme name fallbacks.
Merge of [39807] to the 4.5 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39811 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 11:08:39 +00:00
Jeremy Felt
e1cba619ea Multisite: Use wp_rand() in signup key creation.
Merges [39795] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39798 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 05:31:14 +00:00
Dion Hulse
104f0b2a6d Update PHPMailer to 5.2.22.
The full list of changes is available here:
https://github.com/PHPMailer/PHPMailer/compare/v5.2.21...v5.2.22

Merges [39759] to the 4.5 branch.
Fixes #37210 for 4.5.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39786 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 05:21:48 +00:00
Jeremy Felt
0e44816ae3 Mail: Disable wp-mail.php when mailserver_url is mail.example.com.
Merges [39772] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39775 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 05:15:46 +00:00
Aaron D. Campbell
966816927d Add nonce for widget accessibility mode.
Props vortfu.

See #23328.

Merges [39760] to 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@39763 602fd350-edb4-49c9-b593-d223f7449a82
2017-01-11 01:43:50 +00:00