Sergey Biryukov a392d874ae Grouped backports to the 4.9 branch.
- Media: Prevent CSRF setting attachment thumbnails.
- Embeds: Add protocol validation for WordPress Embed code.

Merges [55763] and [55764] to the 4.9 branch.
Props dd32, isabel_brison, martinkrcho, matveb, ocean90, paulkevan, peterwilsoncc, timothyblynjacobs, xknown, youknowriad.

git-svn-id: https://develop.svn.wordpress.org/branches/4.9@55787 602fd350-edb4-49c9-b593-d223f7449a82
2023-05-16 15:53:40 +00:00
..