Sergey Biryukov ba95a9a719 Ensure that a user can publish_posts before making a post sticky. ...

Props: danielbachhuber, whyisjake, peterwilson, xknown.

Brings r46893 to the 4.7 branch.

Update `wp_kses_bad_protocol()` to recognize `:` on uri attributes,

`wp_kses_bad_protocol()` makes sure to validate that uri attributes don’t contain invalid/or not allowed protocols. While this works fine in most cases, there’s a risk that by using the colon html5 named entity, one is able to bypass this function.

Brings r46895 to the 4.7 branch.

Props: xknown, nickdaugherty, peterwilsoncc.

git-svn-id: https://develop.svn.wordpress.org/branches/4.7@46916 602fd350-edb4-49c9-b593-d223f7449a82

2019-12-12 18:51:18 +00:00

src

Ensure that a user can publish_posts before making a post sticky.

2019-12-12 18:51:18 +00:00

tests

Ensure that a user can publish_posts before making a post sticky.

2019-12-12 18:51:18 +00:00

tools/i18n

DOCS: Replace HTTP links with HTTPS.

2016-06-10 04:49:09 +00:00

.editorconfig

Use HTTPS URLs for codex.wordpress.org.

2015-04-12 21:28:58 +00:00

.gitignore

Revert [38401] after [38480].

2016-09-06 18:12:09 +00:00

.jshintrc

Build: Prevent non-breaking spaces from accidentally being inserted into JavaScript files.

2015-11-12 12:04:55 +00:00

.nvmrc

Add .nvmrc files to older versions of WordPress

2019-09-25 20:54:05 +00:00

.travis.yml

Build/Test tools: Further trimming of CI jobs on the 4.7 branch.

2019-03-25 16:26:30 +00:00

Gruntfile.js

REST API: Add QUnit tests for wp-api.js and PHPUnit fixture generation.

2017-02-24 22:33:05 +00:00

npm-shrinkwrap.json

Build: Remove fsevents from npm-shrinkwrap.json

2016-11-29 04:02:23 +00:00

package.json

WordPress 4.7.15.

2019-10-14 20:07:03 +00:00

phpunit.xml.dist

oEmbed: Remove the oEmbed provider unit tests.

2016-10-20 09:15:10 +00:00

wp-cli.yml

Remove debug mode from WP-CLI by default, as it now outputs too much debugging information to be of use during normal development.

2015-11-28 18:36:06 +00:00

wp-config-sample.php

Lightly clean up and improve inline documentation in wp-config-sample.php.

2015-05-10 00:05:30 +00:00

wp-tests-config-sample.php

Database: Restore numbered placeholders in wpdb::prepare().

2017-10-31 12:33:25 +00:00

Description

No description provided

244 MiB

Languages

PHP 81.4%

CSS 8.9%

JavaScript 8.2%

SCSS 0.8%

HTML 0.7%