mirror of
git://develop.git.wordpress.org/
synced 2025-03-18 10:59:53 +01:00
- Query: Remove the static query property. - HTTP API: Protect against hex interpretation. - Filesystem API: Prevent directory travelersals when creating new folders. - Administration: Ensure that admin referer nonce is valid. - REST API: Send a Vary: Origin header on GET requests. Backports [46474], [46475], [46476], [46477], [46478], [46483], [46485] to the 4.6 branch. git-svn-id: https://develop.svn.wordpress.org/branches/4.6@46496 602fd350-edb4-49c9-b593-d223f7449a82