Sergey Biryukov 83de01619e Grouped backports to the 4.5 branch.
- Media: Prevent CSRF setting attachment thumbnails.
- Embeds: Add protocol validation for WordPress Embed code.

Merges [55763] and [55764] to the 4.5 branch.
Props dd32, isabel_brison, martinkrcho, matveb, ocean90, paulkevan, peterwilsoncc, timothyblynjacobs, xknown, youknowriad.

git-svn-id: https://develop.svn.wordpress.org/branches/4.5@55780 602fd350-edb4-49c9-b593-d223f7449a82
2023-05-16 15:39:32 +00:00
..