mirror_php/wordpress
1
0
Fork 0
mirror of git://develop.git.wordpress.org/ synced 2025-03-15 09:29:48 +01:00
Code Issues Actions 11 Packages Projects Releases Wiki Activity
34,185 Commits 50 Branches 751 Tags
Commit Graph

34185 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jeremy Felt
58654f5739 Bump 4.5 branch to version 4.5.16. 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44082 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-13 02:12:25 +00:00
Gary Pendergast
a1208230a9 Editor: Remove unwanted fields before saving posts. 
The `meta_input`, `file`, and `guid` fields are not intended to be updated through user input.

Merges [44047] to the 4.5 branch.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44060 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-13 01:44:41 +00:00
Peter Wilson
14759800ef Multisite: Validate activation links. 
Merges [44048] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44059 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-13 01:43:52 +00:00
Ian Dunn
3a47187d69 KSES: Make the URI attributes DRY. 
This commit introduces the `wp_kses_uri_attributes` function and filter. The function centralizes the list of attributes, in order to prevent inconsistency, and the filter provides a way for plugins to customize the attributes.

Merges [44014] and [44017] to the `4.6` branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44032 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-13 00:53:10 +00:00
Peter Wilson
80801998e0 Multisite: Improve messaging for previously activated users. 
Ensure activation of a site is not attempted multiple times and users are shown the correct message if they follow the link a second time.

Merges [44021] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44029 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-13 00:46:50 +00:00
Jeremy Felt
6eb8051102 Media: Remove invalid data from test data provider. 
See [43993].


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44006 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-12 23:37:16 +00:00
Gary Pendergast
42d4df558e KSES: Conditionally remove the <form> element from $allowedposttags. 
To avoid backwards compatibility issues, `<form>` is re-added if a custom filter has added the `<input>` or `<select>` elements to `$allowedposttags`.

Merges [43994] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@44002 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-12 23:28:48 +00:00
Jeremy Felt
0127179f66 Media: Improve verification of MIME file types. 
Merges [43988] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@43993 602fd350-edb4-49c9-b593-d223f7449a82
 2018-12-12 23:10:04 +00:00
Aaron D. Campbell
35f2f3acc0 Bump 4.5 branch to version 4.5.15 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@43411 602fd350-edb4-49c9-b593-d223f7449a82
 2018-07-05 16:10:34 +00:00
John Blackbourn
1c7f816341 Media: Limit thumbnail file deletions to the same directory as the original file. 
Merges [43393] into the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@43397 602fd350-edb4-49c9-b593-d223f7449a82
 2018-07-05 14:54:32 +00:00
Aaron D. Campbell
d6f9fa0658 Bump 4.5 branch to version 4.5.14 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42937 602fd350-edb4-49c9-b593-d223f7449a82
 2018-04-03 20:27:08 +00:00
Dominik Schilling (ocean90)
6f63ca9be8 Template: Make sure the version string is correctly escaped for use in attributes. 
Merge of [42893] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42921 602fd350-edb4-49c9-b593-d223f7449a82
 2018-04-03 16:05:43 +00:00
Dominik Schilling (ocean90)
0948e620fc Meta: Simplify the delete all meta query in delete_metadata(). 
Merge of [42913] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42916 602fd350-edb4-49c9-b593-d223f7449a82
 2018-04-03 15:41:13 +00:00
Dominik Schilling (ocean90)
3731d03241 HTTP: Don't treat localhost as same host by default. 
Merge of [42894] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42912 602fd350-edb4-49c9-b593-d223f7449a82
 2018-04-03 15:34:59 +00:00
Dominik Schilling (ocean90)
d9b6d27a1f Login: Use wp_safe_redirect() when redirecting the login page if forced to use HTTPS. 
Merge of [42892] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42899 602fd350-edb4-49c9-b593-d223f7449a82
 2018-04-03 15:28:43 +00:00
Sergey Biryukov
d115438b31 General: Update copyright year to 2018 in license.txt. 
Props rachelbaker.
Merges [42424] to the 4.5 branch.
Fixes #43007.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42556 602fd350-edb4-49c9-b593-d223f7449a82
 2018-01-23 11:25:40 +00:00
Dion Hulse
a53fbcfca2 Bump the 4.5 branch to 4.5.13. 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42498 602fd350-edb4-49c9-b593-d223f7449a82
 2018-01-16 21:40:21 +00:00
Dion Hulse
064704c5da External Libraries: Remove unnecessary / obsoleted MediaElement.js files. 
Merges [42478] to the 4.5 branch.
Fixes #42720 for 4.5.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42481 602fd350-edb4-49c9-b593-d223f7449a82
 2018-01-16 08:07:21 +00:00
Dion Hulse
b2074884cc Upgrade: When deleting old files, if deletion fails attempt to empty the file instead. 
Props joemcgill, dd32.
Merges [42434] to the 4.5 branch.
Fixes #42963 for 4.5.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42469 602fd350-edb4-49c9-b593-d223f7449a82
 2018-01-16 06:54:17 +00:00
John Blackbourn
bc4da3d800 Bump 4.5 branch to 4.5.12. 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42320 602fd350-edb4-49c9-b593-d223f7449a82
 2017-11-29 18:59:21 +00:00
John Blackbourn
1989ddbd6a Hardening: Remove the ability to upload JavaScript files for users who do not have the unfiltered_html capability. 
Merges [42261] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42283 602fd350-edb4-49c9-b593-d223f7449a82
 2017-11-29 16:25:37 +00:00
John Blackbourn
8e01813dbf Hardening: Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds. 
Merges [42260] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42282 602fd350-edb4-49c9-b593-d223f7449a82
 2017-11-29 16:24:43 +00:00
John Blackbourn
de88f1dfc9 Hardening: Add escaping to the language attributes used on html elements. 
Merges [42259] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42281 602fd350-edb4-49c9-b593-d223f7449a82
 2017-11-29 16:24:01 +00:00
John Blackbourn
cf998f0879 Hardening: Use a properly generated hash for the newbloguser key instead of a determinate substring. 
Merges [42258] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42280 602fd350-edb4-49c9-b593-d223f7449a82
 2017-11-29 16:23:25 +00:00
Dion Hulse
a2fb1016bc WPDB: Check that AUTH_SALT is not empty, Fix a PHP notice when AUTH_SALT is undefined. 
Props jsonfry, mkomar, pento.
Merges [42119] and [42120] to the 4.5 branch.
Fixes #42431 and #42401 for 4.5.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42233 602fd350-edb4-49c9-b593-d223f7449a82
 2017-11-27 01:09:11 +00:00
John Blackbourn
7895704527 General: Remove the version number from the readme file in the 4.5 branch. 
See #42386


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42102 602fd350-edb4-49c9-b593-d223f7449a82
 2017-10-31 18:06:57 +00:00
Gary Pendergast
24c2979b19 Bump 4.5 branch to version 4.5.11. 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42072 602fd350-edb4-49c9-b593-d223f7449a82
 2017-10-31 13:15:10 +00:00
Gary Pendergast
1260edf573 Database: Restore numbered placeholders in wpdb::prepare(). 
[41496] removed support for numbered placeholders in queries send through `wpdb::prepare()`, which, despite being undocumented, were quite commonly used.

This change restores support for numbered placeholders (as well as a subset of placeholder formatting), while also adding extra checks to ensure the correct number of arguments are being passed to `wpdb::prepare()`, given the number of placeholders.

Merges [41662], [42056] to the 4.5 branch.
See #41925.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42060 602fd350-edb4-49c9-b593-d223f7449a82
 2017-10-31 12:43:36 +00:00
Gary Pendergast
2654afaacd Build/Test Tools: Pass correct $message argument to WP_UnitTestCase::setExpectedException() in Tests_Ajax_CompressionTest::test_logged_out() and Tests_Ajax_TagSearch::test_no_results(). 
PHPUnit 6.4.1 and earlier versions ignored the `'0'` value, causing the issue to go unnoticed.

Merge of [41870] to the 4.5 branch.

Props SergeyBiryukov.
See #42232.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@42054 602fd350-edb4-49c9-b593-d223f7449a82
 2017-10-31 09:10:03 +00:00
Dominik Schilling (ocean90)
37174793b7 Taxonomy/Users: Use correct escaping function for URLs. 
Merge of [41522] to the 4.5 branch.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41526 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 21:29:09 +00:00
Dominik Schilling (ocean90)
0deb58a551 Bump 4.5 branch to version 4.5.10. 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41513 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 20:00:19 +00:00
Aaron D. Campbell
0f83d87e7f Database: Hardening to bring wpdb::prepare() inline with documentation. 
`wpdb::prepare()` supports %s, %d, and %F as placeholders in the query string. Any other non-escaped % will be escaped.

Merges [41496] to 4.5 branch.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41500 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 18:13:37 +00:00
Aaron D. Campbell
1873890f9c Database: Don’t trigger _doing_it_wrong() for null values in wpdb::prepare(). 
While `wpdb::prepare()` does not support null values (see #12819) they still appear in the wild like in the WordPress Importer and other plugins.

Merges [41483] to 4.5 branch.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41487 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 16:22:20 +00:00
Aaron D. Campbell
6a7e5a85fb Database: Hardening for wpdb::prepare() 
Previously if you passed an array of values for placeholders, additional values could be passed as well. Now additional values will be ignored.

Merges [41470] to 4.5 branch.



git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41474 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 14:59:58 +00:00
John Blackbourn
bf40149e72 Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues. 
Merges [41457] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41461 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 14:40:36 +00:00
Aaron D. Campbell
a2e3ba44f2 oEmbed: Add extra hardening around allowed HTML for improved sandboxing. 
Merges [41448] to 4.5 branch.




git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41454 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 13:49:05 +00:00
Dominik Schilling (ocean90)
e9e201ecc4 TinyMCE: Improve the previews for shortcodes. 
Merge of [41395] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41438 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 12:40:17 +00:00
Dominik Schilling (ocean90)
45299e9be0 Customize: Ensure valid themes in the preview. 
Merge of [41397] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41432 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 11:49:48 +00:00
Dominik Schilling (ocean90)
8f43314cd7 Taxonomy/Users: Provide a fallback for incorrect HTTP referrers. 
Merge of [41398] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41420 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 11:10:29 +00:00
John Blackbourn
3fd5010f4f General: Remove context added in [41414] in order to avoid a string change in a point release. 
See #13377


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41416 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 10:45:31 +00:00
John Blackbourn
9926ecfeed General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area. 
Merges [41414] into the 4.5. branch

See #13377


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41415 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 10:31:43 +00:00
Dominik Schilling (ocean90)
0943fa4dfd Editor: Prevent adding javascript: and data: URLs through the inline link dialog. 
Merge of [41393] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41403 602fd350-edb4-49c9-b593-d223f7449a82
 2017-09-19 10:15:01 +00:00
John Blackbourn
d24e82c3cf Build/Test tools: Use the latest in the 4.x and 5.x branches of PHPUnit when running tests on Travis for the 4.5 branch. 
See #41472


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41298 602fd350-edb4-49c9-b593-d223f7449a82
 2017-08-22 17:20:55 +00:00
John Blackbourn
9610cbc4af General: Backport PHP 7.1 fixes to the 4.5 branch to avoid fatal errors and warnings. 
Props simonvik, ayeshrajans

See #41135


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41128 602fd350-edb4-49c9-b593-d223f7449a82
 2017-07-24 22:24:07 +00:00
John Blackbourn
977e256921 Build: Correct the Ubuntu image for PHP 5.2 and 5.6 on the 4.5 branch. 
See [41076], #41292.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41077 602fd350-edb4-49c9-b593-d223f7449a82
 2017-07-18 14:14:37 +00:00
John Blackbourn
2329c68cab Build: Switch PHP 5.2 to Travis' Ubuntu precise image for the 4.5 branch. 
See #41292


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@41076 602fd350-edb4-49c9-b593-d223f7449a82
 2017-07-18 14:11:40 +00:00
Konstantin Obenland
c662b5bb4a Import Twenty Sixteen, default theme for 2016. 
See #36497.

Merges [40851] and [40852] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40858 602fd350-edb4-49c9-b593-d223f7449a82
 2017-05-31 01:28:30 +00:00
John Blackbourn
015ae5df63 Build/Test Tools: Remove mentions of HHVM from the test infrastructure on Travis for the 4.5 branch. 
Props netweb

See #40548


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40828 602fd350-edb4-49c9-b593-d223f7449a82
 2017-05-24 14:28:50 +00:00
Aaron D. Campbell
b4edd57c9f Bump 4.7 branch to version 4.5.9. 
git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40750 602fd350-edb4-49c9-b593-d223f7449a82
 2017-05-16 21:48:55 +00:00
Pascal Birchler
c3e6ee8c9c Media: Simplify upload error message construction. 
Merges [40736] to the 4.5 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.5@40739 602fd350-edb4-49c9-b593-d223f7449a82
 2017-05-16 18:00:17 +00:00