Mark Jaquith fd3b1e8bb0 escape before extracting. Props Alexander Concha. ...

git-svn-id: https://develop.svn.wordpress.org/branches/2.0@5768 602fd350-edb4-49c9-b593-d223f7449a82

2007-06-27 08:22:02 +00:00

..

images/smilies

Not used any more.

2005-11-17 00:34:24 +00:00

js

Reverting non-security-related DBX upgrade.

2007-03-07 05:14:59 +00:00

cache.php

Fiddle with object destruction and shutdown. Curses upon php 5.2. fixes #3354

2007-01-30 18:33:48 +00:00

capabilities.php

Backport nonces and pluggable cookies.

2006-05-11 23:05:45 +00:00

class-IXR.php

Add timezone to iso8601 timestamp. Props devlogic. fixes #2036

2005-12-08 00:08:12 +00:00

class-pop3.php

http://mosquito.wordpress.org/view.php?id=252

2005-01-07 01:29:49 +00:00

class-snoopy.php

Don't forget to concat. Props cschneid. fixes #2988

2006-09-25 01:38:34 +00:00

classes.php

Don't cast to string if empty. Props donncha. fixes #3979 for 2.0

2007-03-16 22:05:15 +00:00

comment-functions.php

More int casts

2007-03-25 23:12:38 +00:00

default-filters.php

nonce-protect comments by users with unfiltered_html cap to prevent xsrf/xss. fixes #3973 for 2.0

2007-03-14 23:13:36 +00:00

feed-functions.php

Better tabbing and newlining for RSS categories. Props coffee2code and Nazgul. fixes #1156

2006-10-04 21:46:54 +00:00

functions-compat.php

Backport nonces and pluggable cookies.

2006-05-11 23:05:45 +00:00

functions-formatting.php

js_escape improvements from Alexander Concha. Catches &#39 &#039 ' ' ' ' &#x000027 etc. for 2.0.x

2007-06-20 19:13:29 +00:00

functions-post.php

Revert accidental debug commit in [5502]

2007-05-21 18:18:03 +00:00

functions.php

More clean_url and int casts for 2.0.

2007-03-27 23:47:02 +00:00

gettext.php

Can't pass function return to array_shift.

2006-11-30 07:31:21 +00:00

kses.php

kses function reorg to match trunk.

2006-12-21 01:54:15 +00:00

links.php

use clean_url() instead of attribute_escape() when dealing with src/href to protect against XSS. props xknown. fixes #3986 for 2.0.

2007-03-17 09:04:56 +00:00

locale.php

Fix May abbreviation translation. Patch by morganiq. http://mosquito.wordpress.org/view.php?id=722

2005-02-06 20:45:10 +00:00

pluggable-functions.php

Escapage

2007-05-11 00:59:06 +00:00

registration-functions.php

More int casts

2007-03-25 23:12:38 +00:00

rss-functions.php

Fix typos in get_rss(). Props zuzara. fixes #3527

2007-01-30 18:11:04 +00:00

streams.php

Update to php-gettext 1.0.7+. fixes #1727

2006-07-06 22:36:44 +00:00

template-functions-author.php

More int casts

2007-03-25 23:12:38 +00:00

template-functions-category.php

More int casts

2007-03-25 23:12:38 +00:00

template-functions-general.php

wp_title() fixes from dwc. fixes #3967

2007-03-14 01:53:35 +00:00

template-functions-links.php

More int casts

2007-03-25 23:12:38 +00:00

template-functions-post.php

new function for escaping within attributes: attribute_escape()

2006-12-21 10:10:04 +00:00

template-loader.php

Avoid invoking template filters twice. Props David House. fixes #2225

2006-01-06 01:09:16 +00:00

vars.php

Use HTTP_USER_AGENT from _SERVER.

2006-07-06 00:08:53 +00:00

version.php

escape before extracting. Props Alexander Concha.

2007-06-27 08:22:02 +00:00

wp-db.php

Fiddle with object destruction and shutdown. Curses upon php 5.2. fixes #3354

2007-01-30 18:33:48 +00:00

wp-l10n.php

Add gettext filter. fixes #2258

2006-01-10 22:53:40 +00:00