Upstream/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2024-11-05 10:22:23 +01:00
Code Issues Projects Releases Wiki Activity
16,969 Commits 50 Branches 747 Tags 789 MiB
2f59ff622a
Commit Graph

288 Commits

Author SHA1 Message Date
nacin
e5ca4fea40 Strip a number of special characters in sanitize_title_with_dashes on save. Includes quotes (curly, angle), dashes, marks, etc. props SergeyBiryukov. props ampt for the unit tests in [UT438]. see #10797. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18705 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-09-18 19:53:59 +00:00
duck_
e4ed63fc6f Fix typos in documentation (wp-includes/[a-h]). See #18560. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18633 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-09-03 16:02:41 +00:00
nacin
d5cf830175 Add 'q' tag to nestable tags list in force_balance_tags(). props solarissmoke, fixes #6870. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18585 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-08-23 15:37:38 +00:00
ryan
6c39a6f769 Better double encoding handling in _wp_special_chars(). Props miqrogroove. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18485 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-07-29 20:43:45 +00:00
ryan
55d7366c42 Recognize urls that start with a question mark as relative urls that do not require a scheme to be prepended. fixes #18260 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18469 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-07-26 19:44:18 +00:00
westi
009b264271 Make [18456] more obvious. Fixes #16432. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18465 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-07-25 13:20:07 +00:00
nacin
6185986c0e Add pre_ent2ncr filter. props GaryJ, fixes #16432. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18456 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-07-21 21:41:21 +00:00
ryan
593659b8d0 Hardening. Santizers for WPLANG and new_admin_email. Prevent stomping ID and filter. Validate locale filename. Props westi. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18346 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-06-27 15:56:42 +00:00
ryan
bc667be71b Allow plus '+' character when sanitizing mime type. Props cyberhobo. fixes #17855 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18324 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-06-20 20:05:57 +00:00
westi
fda24a53ed Ensure we have a valid timezone identifier before trying to use it. 
Validate the new timezone identifier during option update.
Fixes #17840.

git-svn-id: http://svn.automattic.com/wordpress/trunk@18323 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-06-20 14:58:50 +00:00
azaozz
ae81d75d39 Fix typo in remove_accents(), props scribu, fixes #16232 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18159 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-06-06 02:22:50 +00:00
ryan
4da684cf9a Update @since 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18032 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-25 15:47:17 +00:00
ryan
81a5f821fb Sanitize guid on save and display. Sanitize mime type on save. Don't allow changing mime type via edit form handlers. Protect hidden meta. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17994 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-22 23:19:42 +00:00
ryan
569c17df7f Properly anchor mime preg. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17990 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-22 23:17:09 +00:00
nacin
98bd4c0b2f s/coma/comma/. props ocean90. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17982 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-21 15:20:25 +00:00
ryan
b2c2e302be Revert part of [17920]. Support for empty tz must remain. Props johnjamesjacoby. fixes #17448 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17958 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-18 18:56:42 +00:00
westi
65e341d0cb Fix typos and inconsistencies in PHPdoc / function declarations. See #17414 props duck_ 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17925 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-14 09:50:20 +00:00
ryan
58767691f4 Remove PHP5 back compat code from get_gmt_from_date. Props technosailor. fixes #16920 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17920 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-13 19:17:07 +00:00
ryan
74354459f1 Performance improvements for wptexturize(). Props solarissmoke, hakre. fixes #16684 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17636 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-04-13 17:11:35 +00:00
nacin
14ec951269 Make underscores valid in sanitize_html_class. fixes #17067. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17614 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-04-06 21:28:52 +00:00
ryan
975a6a8c8d Reduce backtracking in make_clickable() regex. Reduce pcre.recursion_limit to avoid segfaulting. Props hakre. For trunk. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17570 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-03-28 21:39:16 +00:00
ryan
4d46e8d95e Lose create_function() in links_add_target() and links_add_base_url(). esc_attr() the target to provide extra coverage for plugins. Props Justin Rainbow, nacin. For trunk 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17459 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-02-16 19:24:18 +00:00
ryan
85f1feed84 Bring out the shears. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17228 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-01-06 04:11:14 +00:00
ryan
81cd855720 Don't be case sensitive to attribute names. Handle padded entities when checking for bad protocols. Normalize entities before checking for bad protocols in esc_url(). Props Mauro Gentile, duck_, miqrogroove 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17171 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-12-29 20:45:37 +00:00
nacin
95726df854 Revert [16995] due to the way the data enters the db. props garyc40, see #15454. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17142 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-12-25 18:10:59 +00:00
ryan
3a66c698ee Remove some unnecessary esc_textarea() calls. Props garyc40. see #15454 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17001 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-12-16 17:48:20 +00:00
markjaquith
49c11dc768 Use ENT_QUOTES in esc_textarea() in case someone uses it in a value='' situation by accident. see #15454 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16993 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-12-16 09:24:22 +00:00
westi
60aa1d3062 Ultimate make_clickable. Fixes #14993 props filosofo 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16948 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-12-15 13:43:30 +00:00
westi
1df7f1be64 Revert [16279] - the recursive nature of this regex doesn't play well with stack space. See #14993 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16692 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-12-02 17:26:06 +00:00
nacin
b8ce0261df More param fixes, props duck_. see #14783. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16469 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-18 19:12:48 +00:00
ryan
847499e531 Pinking shears 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16438 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-17 18:47:34 +00:00
markjaquith
6482610f9a esc_textarea() and application for obvious textarea escaping. props alexkingorg. fixes #15454 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16431 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-17 17:12:01 +00:00
nacin
3f5b442306 Revert changes to wptexturize() until test cases pass. Reverts [16280], [16378]. see #4539 and #15241. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16409 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-16 22:18:48 +00:00
westi
17d25e2cdc Fix regression in wptexturize with single quotes when used for contraction. See #15241 props norbertm. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16378 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-15 08:52:36 +00:00
nacin
81a8f2d3ce Use square brackets instead of braces for string access. props hakre, fixes #13900. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16340 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-13 09:53:55 +00:00
nacin
5f4a583fb1 Remove more create_function calls. props huichen, see #14424. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16313 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-11 22:50:36 +00:00
westi
71fab5576a Improved RegEx for quote matching in wptexturize. Fixes #4539 and #15241 props norbertm. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16280 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-10 19:23:57 +00:00
westi
2d09607167 Don't capture the pesky trailing punctuation. Fixes #14993 props filosofo 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16279 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-10 17:47:46 +00:00
ryan
dbf7388c5b Don't anchor regex. Props ozh. fixes #14628 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16207 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-05 15:29:50 +00:00
scribu
fdd3556806 Introduce wp_basename() and use it for media handling. See #11887 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16154 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-02 17:19:55 +00:00
westi
81a1c190c4 Revert 16150 - breaks things more than it fixes things. See #14993 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16151 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-02 11:42:30 +00:00
westi
c6471ef6e2 Don't capture RFC3986 sub-delims when making urls clickable except for ). Fixes #14993 props filosofo. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16150 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-02 09:45:09 +00:00
westi
51c714b256 Always capture ! as part of a url. See #14993 props filosofo. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16111 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-10-31 09:09:29 +00:00
westi
fed42ecdf1 Purger more create_function usage during autop and iso descrambling. See #14424 props ScottMac. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16035 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-10-28 07:38:00 +00:00
ryan
614dd3b3a9 Idempotence for sanitize_user(). Make sanitize_key() match its phpdoc. Props duck_ fixes #15198 
git-svn-id: http://svn.automattic.com/wordpress/trunk@15948 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-10-24 20:33:54 +00:00
scribu
81025846b1 Also convert uppercase letters in Latin Extended-B. See #9591 
git-svn-id: http://svn.automattic.com/wordpress/trunk@15931 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-10-23 15:36:16 +00:00
scribu
633daa01cb remove_accents(): Nordic characters fixes. Props einare. Fixes #4739. See #9591 
git-svn-id: http://svn.automattic.com/wordpress/trunk@15930 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-10-23 13:00:21 +00:00
scribu
c613576e77 Introduce sanitize_title_for_query(). See #9591 
git-svn-id: http://svn.automattic.com/wordpress/trunk@15929 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-10-23 12:55:55 +00:00
ryan
fd2896de77 Improve regex performance in wptexturize(). Props mdawaffe. fixes #15093 
git-svn-id: http://svn.automattic.com/wordpress/trunk@15816 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-10-15 14:34:38 +00:00
ryan
6b351163ef Simplify sanitize_key() and use it in more places. see #14910 
git-svn-id: http://svn.automattic.com/wordpress/trunk@15635 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-09-20 15:28:58 +00:00