desrosj
03c2d89d0a
WordPress 4.8.15.
...
Built from https://develop.svn.wordpress.org/branches/4.8@49416
git-svn-id: http://core.svn.wordpress.org/branches/4.8@49175 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-10-29 19:39:27 +00:00
whyisjake
2544e89df4
General: WordPress updates
...
* XML-RPC: Improve error messages for unprivileged users.
* External Libraries: Disable deserialization in Requests_Utility_FilteredIterator
* Embeds: Disable embeds on deactivated Multisite sites.
* Coding standards: Modify escaping functions to avoid potential false positives.
* XML-RPC: Return error message if attachment ID is incorrect.
* Upgrade/install: Improve logic check when determining installation status.
* Meta: Sanitize meta key before checking protection status.
* Themes: Ensure that only privileged users can set a background image when a theme is using the deprecated custom background page.
Brings the changes from [49380,49382-49388] to the 4.8 branch.
Props xknown, zieladam, peterwilsoncc, whyisjake, desrosj, dd32.
Built from https://develop.svn.wordpress.org/branches/4.8@49398
git-svn-id: http://core.svn.wordpress.org/branches/4.8@49157 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-10-29 18:55:23 +00:00
Sergey Biryukov
f175cf83a7
Administration: Pass the result of set-screen-option
filter to the new set_screen_option_{$option}
filter to ensure backward compatibility.
...
Rename the `$keep` parameter of both filters to `$screen_option` for clarity, update the documentation to better reflect its purpose.
Follow-up to [47951].
Props Chouby, sswells, SergeyBiryukov.
Merges [48241] to the 4.8 branch.
Fixes #50392 .
Built from https://develop.svn.wordpress.org/branches/4.8@48250
git-svn-id: http://core.svn.wordpress.org/branches/4.8@48019 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-07-01 09:50:46 +00:00
desrosj
499c907011
WordPress 4.8.14.
...
Built from https://develop.svn.wordpress.org/branches/4.8@47995
git-svn-id: http://core.svn.wordpress.org/branches/4.8@47763 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-06-10 21:37:26 +00:00
whyisjake
27f0839d04
General: Backport several commits for release.
...
- Embeds: Ensure that the title attribute is set correctly on embeds.
- Editor: Prevent HTML decoding on by setting the proper editor context.
- Formatting: Ensure that wp_validate_redirect() sanitizes a wider variety of characters.
- Themes: Ensure a broken theme name is returned properly.
- Administration: Add a new filter to extend set-screen-option.
Merges [47947-47951] to the 4.8 branch.
Props xknown, sstoqnov, vortfu, SergeyBiryukov, whyisjake.
Built from https://develop.svn.wordpress.org/branches/4.8@47980
git-svn-id: http://core.svn.wordpress.org/branches/4.8@47749 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-06-10 18:56:52 +00:00
Sergey Biryukov
f501f7d79b
Update the About page for WordPress 4.8.13
...
Built from https://develop.svn.wordpress.org/branches/4.8@47698
git-svn-id: http://core.svn.wordpress.org/branches/4.8@47475 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-04-29 18:35:07 +00:00
Sergey Biryukov
9548cae7ec
WordPress 4.8.12
...
Built from https://develop.svn.wordpress.org/branches/4.8@46925
git-svn-id: http://core.svn.wordpress.org/branches/4.8@46725 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-12-12 20:28:21 +00:00
desrosj
c359dde932
WordPress 4.8.11.
...
Built from https://develop.svn.wordpress.org/branches/4.8@46512
git-svn-id: http://core.svn.wordpress.org/branches/4.8@46309 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 20:09:50 +00:00
desrosj
0f9e4ca0a2
WordPress 4.8.10.
...
Built from https://develop.svn.wordpress.org/branches/4.8@46042
git-svn-id: http://core.svn.wordpress.org/branches/4.8@45854 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 22:05:29 +00:00
Sergey Biryukov
33f4539c6e
Escape the output in wp_ajax_upload_attachment()
.
...
Merges [45936] to the 4.8 branch.
Props whyisjake, sstoqnov.
Built from https://develop.svn.wordpress.org/branches/4.8@45944
git-svn-id: http://core.svn.wordpress.org/branches/4.8@45755 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 16:31:23 +00:00
Gary Pendergast
b3a9479bd3
WordPress 4.8.9
...
Built from https://develop.svn.wordpress.org/branches/4.8@44870
git-svn-id: http://core.svn.wordpress.org/branches/4.8@44701 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-03-13 01:05:20 +00:00
Sergey Biryukov
a32075cd83
Comments: Improve comment content filtering.
...
Merges [44842] to the 4.8 branch.
Built from https://develop.svn.wordpress.org/branches/4.8@44846
git-svn-id: http://core.svn.wordpress.org/branches/4.8@44678 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-03-12 22:35:20 +00:00
Jeremy Felt
d86c7ad402
Bump 4.8 branch to version 4.8.8.
...
Built from https://develop.svn.wordpress.org/branches/4.8@44079
git-svn-id: http://core.svn.wordpress.org/branches/4.8@43909 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-12-13 02:13:20 +00:00
Gary Pendergast
7bd776bdb3
Editor: Remove unwanted fields before saving posts.
...
The `meta_input`, `file`, and `guid` fields are not intended to be updated through user input.
Merges [44047] to the 4.8 branch.
Built from https://develop.svn.wordpress.org/branches/4.8@44055
git-svn-id: http://core.svn.wordpress.org/branches/4.8@43885 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-12-13 01:40:21 +00:00
Peter Wilson
dfc71aee34
Multisite: Validate activation links.
...
Merges [44048] to the 4.8 branch.
Built from https://develop.svn.wordpress.org/branches/4.8@44052
git-svn-id: http://core.svn.wordpress.org/branches/4.8@43882 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-12-13 01:35:21 +00:00
Aaron Campbell
ad514185cd
Bump 4.8 branch to version 4.8.7
...
Built from https://develop.svn.wordpress.org/branches/4.8@43408
git-svn-id: http://core.svn.wordpress.org/branches/4.8@43236 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-07-05 16:11:22 +00:00
Aaron Campbell
b9381e6229
Bump 4.8 branch to version 4.8.6
...
Built from https://develop.svn.wordpress.org/branches/4.8@42934
git-svn-id: http://core.svn.wordpress.org/branches/4.8@42764 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-04-03 20:23:31 +00:00
Dion Hulse
d75574cd84
Bump the 4.8 branch to 4.8.5.
...
Built from https://develop.svn.wordpress.org/branches/4.8@42495
git-svn-id: http://core.svn.wordpress.org/branches/4.8@42324 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-01-16 21:39:32 +00:00
Dion Hulse
726b806eab
External Libraries: Remove unnecessary / obsoleted MediaElement.js files.
...
Fixes #42720 for 4.8.
Built from https://develop.svn.wordpress.org/branches/4.8@42478
git-svn-id: http://core.svn.wordpress.org/branches/4.8@42307 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-01-16 08:02:34 +00:00
Dion Hulse
53c05552f3
Upgrade: When deleting old files, if deletion fails attempt to empty the file instead.
...
Props joemcgill, dd32.
Merges [42434] to the 4.8 branch.
Fixes #42963 for 4.8.
Built from https://develop.svn.wordpress.org/branches/4.8@42466
git-svn-id: http://core.svn.wordpress.org/branches/4.8@42295 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-01-16 06:53:33 +00:00
John Blackbourn
9222292ccb
Bump 4.8 branch to version 4.8.4.
...
Built from https://develop.svn.wordpress.org/branches/4.8@42317
git-svn-id: http://core.svn.wordpress.org/branches/4.8@42146 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-11-29 18:57:33 +00:00
John Blackbourn
2aba074c5b
Hardening: Use a properly generated hash for the newbloguser
key instead of a determinate substring.
...
Merges [42258] to the 4.8 branch.
Built from https://develop.svn.wordpress.org/branches/4.8@42268
git-svn-id: http://core.svn.wordpress.org/branches/4.8@42097 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-11-29 16:13:35 +00:00
Gary Pendergast
3fdaf059b9
Bump 4.8 branch to version 4.8.3.
...
Built from https://develop.svn.wordpress.org/branches/4.8@42069
git-svn-id: http://core.svn.wordpress.org/branches/4.8@41898 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-10-31 13:07:32 +00:00
Dominik Schilling
c38ae9a68f
Taxonomy/Users: Use correct escaping function for URLs.
...
Merge of [41522] to the 4.8 branch.
Built from https://develop.svn.wordpress.org/branches/4.8@41523
git-svn-id: http://core.svn.wordpress.org/branches/4.8@41356 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 21:20:32 +00:00
Dominik Schilling
27433a5d25
Bump 4.8 branch to version 4.8.2.
...
Built from https://develop.svn.wordpress.org/branches/4.8@41509
git-svn-id: http://core.svn.wordpress.org/branches/4.8@41342 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 19:42:33 +00:00
John Blackbourn
3e77adc619
Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues.
...
Merges [41457] to the 4.8 branch.
Built from https://develop.svn.wordpress.org/branches/4.8@41458
git-svn-id: http://core.svn.wordpress.org/branches/4.8@41291 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 14:37:33 +00:00
Dominik Schilling
07e1f9a6ca
Taxonomy/Users: Provide a fallback for incorrect HTTP referrers.
...
Merge of [41398] to the 4.8 branch.
Built from https://develop.svn.wordpress.org/branches/4.8@41417
git-svn-id: http://core.svn.wordpress.org/branches/4.8@41250 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 11:11:33 +00:00
John Blackbourn
846bd22a79
General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.
...
Merges [41399], with additions, to the 4.8 branch.
See #13377
Built from https://develop.svn.wordpress.org/branches/4.8@41412
git-svn-id: http://core.svn.wordpress.org/branches/4.8@41245 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 10:21:16 +00:00
Dominik Schilling
b7d54dd918
Widgets: Prevent visual Text widget from decoding encoded HTML.
...
Also apply `the_editor_content` filters on widget `text` with `format_for_editor()` as is done for the post editor.
Merge of [41260] to the 4.8 branch.
Amends [40631].
Props westonruter, azaozz.
See #35243 .
Fixes #41596 .
Built from https://develop.svn.wordpress.org/branches/4.8@41392
git-svn-id: http://core.svn.wordpress.org/branches/4.8@41225 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 07:44:32 +00:00
Dominik Schilling
93ba8ea6fb
I18N: Allow numbers in locales during installation.
...
The current regex was a bit to strict for locales like `pt_PT_ao90` which were already supported by `wp_get_installed_translations()`.
Merge of [41335] to the 4.8 branch.
See #41794 .
Built from https://develop.svn.wordpress.org/branches/4.8@41336
git-svn-id: http://core.svn.wordpress.org/branches/4.8@41167 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-04 19:38:33 +00:00
Weston Ruter
e10af224e2
Bump 4.8 branch to version 4.8.1.
...
Built from https://develop.svn.wordpress.org/branches/4.8@41210
git-svn-id: http://core.svn.wordpress.org/branches/4.8@41050 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-08-02 20:58:32 +00:00
Weston Ruter
fd423f720e
Widgets: Rename Text widget's legacy
mode to non-visual
mode, restore boolean filter
prop, and improve compatibility for widget_text
filters applied in Custom HTML widget.
...
Merges [41132] onto 4.8 branch.
Amends [41050].
Props westonruter, obenland, timmydcrawford for testing.
See #35243 , #40951 , #40907 .
Fixes #41394 for 4.8.1.
Built from https://develop.svn.wordpress.org/branches/4.8@41133
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40973 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-07-24 22:54:34 +00:00
Weston Ruter
ff0656e37c
Widgets: Improve Text widget's reliability in syncing Visual tab's contents with Text tab and with hidden sync inputs.
...
Merges [41094] onto 4.8 branch.
Amends [40631].
Props azaozz, westonruter, rinkuyadav999 for testing.
See #35243 .
Fixes #40974 for 4.8.1.
Built from https://develop.svn.wordpress.org/branches/4.8@41095
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40935 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-07-19 20:51:33 +00:00
Weston Ruter
aef4b48187
Widgets: Check for existence of wp.customize.state
before attempting to access in Text widget.
...
Merges [41088] onto 4.8 branch.
Amends [40631].
See #35243 .
Fixes #41361 for 4.8.1.
Built from https://develop.svn.wordpress.org/branches/4.8@41089
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40929 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-07-18 22:40:37 +00:00
Weston Ruter
e875520cec
Widgets: Bump the TinyMCE panels' base z-index
to 500001 so they show in the Customizer (such as in the Text widget).
...
Merges [40990] and [40995] onto 4.8 branch.
Props greuben, westonruter.
Fixes #41158 for 4.8.1.
Built from https://develop.svn.wordpress.org/branches/4.8@41068
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40920 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-07-18 03:23:33 +00:00
Weston Ruter
d68bbe13cb
TinyMCE: respect the Disable the visual editor when writing
user setting and don't output the TinyMCE components when using wp_enqueue_editor()
.
...
Merges [40991] onto 4.8 branch.
Props azaozz.
Fixes #40960 for 4.8.1.
Built from https://develop.svn.wordpress.org/branches/4.8@41067
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40919 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-07-18 01:55:32 +00:00
Weston Ruter
3f4babe28b
Customize: Restrict click target of menu deletion, moving to button from its container.
...
Merges [41020] onto 4.8 branch.
Props westonruter, afercia.
Fixes #40981 for 4.8.1.
Built from https://develop.svn.wordpress.org/branches/4.8@41057
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40907 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-07-14 17:44:33 +00:00
Weston Ruter
d32185545b
Widgets: Forcibly limit Video widget to only accept oEmbed URLs from YouTube and Vimeo (for now).
...
Merges [40939] onto 4.8 branch.
Amends [40640].
Props timmydcrawford.
See #34115 , #39994 .
Fixes #40935 for 4.8.1.
Built from https://develop.svn.wordpress.org/branches/4.8@41056
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40906 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-07-14 17:41:32 +00:00
Weston Ruter
dbdd48e05e
Customize: Restore right border on footer actions.
...
Fixes regression introduced in [40511].
Merges [40896] onto 4.8 branch.
Props timmydcrawford.
See #32296 .
Fixes #40978 for 4.8.1.
Built from https://develop.svn.wordpress.org/branches/4.8@41055
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40905 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-07-14 17:38:34 +00:00
Weston Ruter
c4ac9d0ade
Widgets: Add legacy mode for Text widget and add usage pointers to default visual mode.
...
The Text widget in legacy mode omits TinyMCE and retains old behavior for matching pre-existing Text widgets. Usage pointers added to default visual mode appear when attempting to paste HTML code into the Visual tab and when clicking on the Text tab, informing users of the new Custom HTML widget.
Merges [41050] to 4.8 branch.
Props westonruter, melchoyce, gitlost for testing, obenland for testing, dougal for testing, afercia for testing.
See #35243 .
Fixes #40951 for 4.8.1.
Built from https://develop.svn.wordpress.org/branches/4.8@41053
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40903 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-07-14 17:28:32 +00:00
Weston Ruter
2e43bdea3e
Widgets: Add accessibility mode support for TinyMCE-enhanced Text and Media widgets (Video, Audio, Images).
...
Merges [40941] to 4.8 branch.
Amends [40640], [40631].
Props westonruter, afercia.
See #35243 , #32417 .
Fixes #40986 for 4.8.1.
Built from https://develop.svn.wordpress.org/branches/4.8@41051
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40901 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-07-14 17:17:33 +00:00
Sergey Biryukov
e88ec329f7
Accessibility: Avoid a keyboard trap on the permalink custom structure setting.
...
Using the `focus` event on the permalink custom structure field made impossible
to navigate through all the form fields using only the keyboard without actually
selecting the custom structure setting. Instead, using click and input preserves
the original functionality when using any kind of pointing or input device.
Also changes `attr()` to `prop()` as recommended for a `checked` property.
Props afercia.
Fixes #40982 .
Merges [40897] to the 4.8 branch.
Built from https://develop.svn.wordpress.org/branches/4.8@41024
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40874 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-07-10 23:16:32 +00:00
Sergey Biryukov
b59b5b9ab8
Comments: In WP_Comments_List_Table::extra_tablenav()
, save the state of ::has_items()
to a static variable, so that the value is consistent between top and bottom navigation.
...
This prevents "Empty Spam" and "Empty Trash" buttons from disappearing if there's only one page of comments in Spam/Trash.
Fixes #40975 .
Merges [41022] to the 4.8 branch.
Built from https://develop.svn.wordpress.org/branches/4.8@41023
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40873 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-07-10 23:09:34 +00:00
Aaron Jorbin
408dae699e
About: Swap out images and videos for CDN versions, and add responsive images.
...
Backports [40881] from trunk to 4.8.
Props: melchoyce, joemcgill, pento.
See #40721 .
Built from https://develop.svn.wordpress.org/branches/4.8@40887
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40737 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-06-08 05:25:33 +00:00
Aaron Jorbin
0d820bf585
About Page: update CSS with prefixes
...
Backports [40885] from trunk to 4.8.
Seconded by melchoyce.
See #40721 .
Built from https://develop.svn.wordpress.org/branches/4.8@40886
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40736 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-06-08 04:53:32 +00:00
Dominik Schilling
439478f087
Upgrade: Add wp-includes/js/tinymce/plugins/wpembed
to $_old_files
.
...
Merge of [40879] to the 4.8 branch.
See #39513 , #40942 .
Built from https://develop.svn.wordpress.org/branches/4.8@40880
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40730 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-06-07 21:36:33 +00:00
John Blackbourn
97dcac413f
Build/Test Tools: Fix PHP 5.2 compatibility for grandchild methods which expect exceptions to be raised.
...
This is due to `is_callable( 'parent::setExpectedException' )` not being supported on PHP 5.2 when the method being checked only exists on the grandparent class.
See #39822
Merges [40872] and [40873] to the 4.8 branch.
Built from https://develop.svn.wordpress.org/branches/4.8@40875
git-svn-id: http://core.svn.wordpress.org/branches/4.8@40725 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-06-05 10:41:22 +00:00
Dominik Schilling
55497ccfd1
I18N: Improve translator comments for strings in the community events widget.
...
Props dimadin, iandunn.
Fixes #40865 .
Built from https://develop.svn.wordpress.org/trunk@40866
git-svn-id: http://core.svn.wordpress.org/trunk@40716 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-06-01 09:49:42 +00:00
Dominik Schilling
7737e48a21
About: Sync tagline from about page with credits and freedoms.
...
See #40721 .
Built from https://develop.svn.wordpress.org/trunk@40865
git-svn-id: http://core.svn.wordpress.org/trunk@40715 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-06-01 09:24:43 +00:00
Dominik Schilling
0e82284d87
Multisite: Revert indentation of the sample page content added in [40296].
...
Props swissspidy.
Fixes #40895 .
Built from https://develop.svn.wordpress.org/trunk@40864
git-svn-id: http://core.svn.wordpress.org/trunk@40714 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-06-01 09:16:40 +00:00