Sergey Biryukov e90e97b041 Ensure that a user can publish_posts before making a post sticky. ...

Props: danielbachhuber, whyisjake, peterwilson, xknown.

Brings r46893 to the 4.9 branch.

Update `wp_kses_bad_protocol()` to recognize `:` on uri attributes,

`wp_kses_bad_protocol()` makes sure to validate that uri attributes don’t contain invalid/or not allowed protocols. While this works fine in most cases, there’s a risk that by using the colon html5 named entity, one is able to bypass this function.

Brings r46895 to the 4.9 branch.

Props: xknown, nickdaugherty, peterwilsoncc.

git-svn-id: https://develop.svn.wordpress.org/branches/4.9@46918 602fd350-edb4-49c9-b593-d223f7449a82

2019-12-12 18:56:36 +00:00

..

phpunit

Ensure that a user can publish_posts before making a post sticky.

2019-12-12 18:56:36 +00:00

qunit

REST API: Revert [43648] from the 4.9 branch.

2018-10-11 07:15:22 +00:00