Jake Spurlock 15315e51a4 Backporting several bug fixes.
- Query: Remove the static query property.
- HTTP API: Protect against hex interpretation.
- Filesystem API: Prevent directory travelersals when creating new folders.
- Administration: Ensure that admin referer nonce is valid.
- REST API: Send a Vary: Origin header on GET requests.

Backports [46474], [46475], [46476], [46477], [46478], [46483], [46485] to the 4.6 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/4.6@46496 602fd350-edb4-49c9-b593-d223f7449a82
2019-10-14 19:01:10 +00:00
2019-10-14 19:01:10 +00:00
2019-10-14 19:01:10 +00:00
2019-09-04 21:21:46 +00:00
Description
No description provided
244 MiB
Languages
PHP 81.4%
CSS 8.9%
JavaScript 8.2%
SCSS 0.8%
HTML 0.7%