Jake Spurlock a44cc358e4 Backporting several bug fixes.
- Query: Remove the static query property.
- HTTP API: Protect against hex interpretation.
- Filesystem API: Prevent directory travelersals when creating new folders.
- Administration: Ensure that admin referer nonce is valid.
- REST API: Send a Vary: Origin header on GET requests.

Backports [46474], [46475], [46476], [46477], [46478], [46483], [46485] to the 5.0 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/5.0@46492 602fd350-edb4-49c9-b593-d223f7449a82
2019-10-14 18:26:01 +00:00
..
2019-10-14 18:26:01 +00:00