Sergey Biryukov e90e97b041 Ensure that a user can publish_posts before making a post sticky. ...

Props: danielbachhuber, whyisjake, peterwilson, xknown.

Brings r46893 to the 4.9 branch.

Update `wp_kses_bad_protocol()` to recognize `:` on uri attributes,

`wp_kses_bad_protocol()` makes sure to validate that uri attributes don’t contain invalid/or not allowed protocols. While this works fine in most cases, there’s a risk that by using the colon html5 named entity, one is able to bypass this function.

Brings r46895 to the 4.9 branch.

Props: xknown, nickdaugherty, peterwilsoncc.

git-svn-id: https://develop.svn.wordpress.org/branches/4.9@46918 602fd350-edb4-49c9-b593-d223f7449a82

2019-12-12 18:56:36 +00:00

src

Ensure that a user can publish_posts before making a post sticky.

2019-12-12 18:56:36 +00:00

tests

Ensure that a user can publish_posts before making a post sticky.

2019-12-12 18:56:36 +00:00

tools/i18n

DOCS: Replace HTTP links with HTTPS.

2016-06-10 04:49:09 +00:00

.editorconfig

General: Remove .jshintrc and *.json from the 2-space-indent .editorconfig group.

2017-10-12 01:57:45 +00:00

.gitignore

Embeds: Add oEmbed support for someecards.com.

2017-10-02 19:09:46 +00:00

.jshintrc

General: Remove .jshintrc and *.json from the 2-space-indent .editorconfig group.

2017-10-12 01:57:45 +00:00

.nvmrc

Add .nvmrc files to older versions of WordPress

2019-09-25 20:43:44 +00:00

.travis.yml

Build/Test tools: Further trimming of CI jobs on the 4.9 branch.

2019-03-25 16:24:44 +00:00

Gruntfile.js

Media: Update minified version of imgAreaSelect after [42874].

2018-04-03 19:50:21 +00:00

jsdoc.conf.json

Docs: Add jsdoc.conf.json JSDOC configuration file.

2017-09-11 13:13:40 +00:00

npm-shrinkwrap.json

Build: Add npm-shrinkwrap.json.

2017-11-13 19:01:34 +00:00

package.json

WordPress 4.9.12.

2019-10-14 20:06:08 +00:00

phpunit.xml.dist

Build/Test Tools: Allow code coverage reports to be generated.

2018-02-07 22:22:18 +00:00

webpack.config.dev.js

Build: Webpack instead of Browserify as JavaScript bundler.

2017-10-04 21:00:15 +00:00

webpack.config.prod.js

Build: Webpack instead of Browserify as JavaScript bundler.

2017-10-04 21:00:15 +00:00

wp-cli.yml

Remove debug mode from WP-CLI by default, as it now outputs too much debugging information to be of use during normal development.

2015-11-28 18:36:06 +00:00

wp-config-sample.php

Lightly clean up and improve inline documentation in wp-config-sample.php.

2015-05-10 00:05:30 +00:00

wp-tests-config-sample.php

Database: Restore numbered placeholders in wpdb::prepare().

2017-10-31 11:59:43 +00:00

Description

No description provided

271 MiB

Languages

PHP 81.6%

CSS 8.8%

JavaScript 8.1%

SCSS 0.8%

HTML 0.7%