Commit Graph

38105 Commits

Author SHA1 Message Date
davidbaumwald
ae04cdeb91 Grouped backports to the 4.9 branch.
- Comments: Prevent users who can not see a post from seeing comments on it.
- Shortcodes: Restrict media shortcode ajax to certain type.
- REST API: Ensure no-cache headers are sent when methods are overridden.
- REST API: Limit `search_columns` for users without `list_users`.
- Prevent unintended behavior when certain objects are unserialized.

Merges [56834], [56835], [56836], [56838], and [56840] to the 4.9 branch.
Props xknown, jorbin, joehoyle, timothyblynjacobs, peterwilsoncc, ehtis, tykoted, antpb, rmccue.
Built from https://develop.svn.wordpress.org/branches/4.9@56865


git-svn-id: http://core.svn.wordpress.org/branches/4.9@56376 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2023-10-12 18:15:06 +00:00
Sergey Biryukov
0d6d8d811d Grouped backports to the 4.9 branch.
- Media: Prevent CSRF setting attachment thumbnails.
- Embeds: Add protocol validation for WordPress Embed code.

Merges [55763] and [55764] to the 4.9 branch.
Props dd32, isabel_brison, martinkrcho, matveb, ocean90, paulkevan, peterwilsoncc, timothyblynjacobs, xknown, youknowriad.
Built from https://develop.svn.wordpress.org/branches/4.9@55787


git-svn-id: http://core.svn.wordpress.org/branches/4.9@55299 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2023-05-16 15:54:27 +00:00
Peter Wilson
65e9d7950e I18N: Add new strings to about.php for use with end-of-life updates.
This changeset adds two additional translation strings in the changelog file, for use when releasing the final version of WordPress on a particular branch.

Props peterwilsoncc, audrasjb, mukesh27.
Merges [55350] to the 4.9 branch.
Fixes #57216.

Built from https://develop.svn.wordpress.org/branches/4.9@55383


git-svn-id: http://core.svn.wordpress.org/branches/4.9@54916 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2023-02-21 03:05:27 +00:00
Sergey Biryukov
8564a4a082 WordPress 4.9.22.
Built from https://develop.svn.wordpress.org/branches/4.9@54595


git-svn-id: http://core.svn.wordpress.org/branches/4.9@54149 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-10-17 19:55:41 +00:00
Sergey Biryukov
affa0e3fe7 Grouped backports to the 4.9 branch.
- Posts, Post types: Apply KSES to post-by-email content,
- General: Validate host on "Are you sure?" screen,
- Posts, Post types: Remove emails from post-by-email logs,
- Media: Refactor search by filename within the admin,
- Pings/trackbacks: Apply KSES to all trackbacks,
- Comments: Apply kses when editing comments,
- Customize: Escape blogname option in underscores templates,
- REST API: Lockdown post parameter of the terms endpoint,
- Mail: Reset PHPMailer properties between use,
- Query: Validate relation in `WP_Date_Query`,
- Widgets: Escape RSS error messages for display.

Merges [54521], [54522], [54523], [54524], [54525], [54526], [54527], [54528], [54529], [54530], [54541] to the 4.9 branch.
Props voldemortensen, johnbillion, paulkevan, peterwilsoncc, xknown, dd32, audrasjb, martinkrcho, vortfu, davidbaumwald, tykoted, timothyblynjacobs, johnjamesjacoby, ehtis, matveb, talldanwp.

Built from https://develop.svn.wordpress.org/branches/4.9@54569


git-svn-id: http://core.svn.wordpress.org/branches/4.9@54123 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-10-17 18:14:49 +00:00
Peter Wilson
b1801b170f Security: Introduce strings to indicate support status.
Add strings for use in future maintenance/security releases to indicate the security support status of the version of WordPress.

Two strings are introduced:

* indicating the version of WordPress is not receiving security updates, and,
* indicating the version of WordPress will shortly stop receiving security updates.

This change does not make use of the strings, the purpose is to make them available to translators prior to dropping support of selected versions of WordPress.

Props costdev, chesio, robinwpdeveloper, desrosj, rudlinkon, mukesh27, sumitbagthariya16.
Merges [54322] to the 4.9 branch.
See #56532.

Built from https://develop.svn.wordpress.org/branches/4.9@54451


git-svn-id: http://core.svn.wordpress.org/branches/4.9@54010 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-10-10 22:03:28 +00:00
desrosj
e79a7394a5 WordPress 4.9.21.
Built from https://develop.svn.wordpress.org/branches/4.9@53998


git-svn-id: http://core.svn.wordpress.org/branches/4.9@53557 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-08-30 17:35:34 +00:00
Sergey Biryukov
69586ea627 Grouped backports to the 4.9 branch.
- Posts, Post Types: Escape output within `the_meta()`.
- General: Ensure bookmark query limits are numeric.
- Plugins: Escape output in error messages.

Merges [53958-53960] to the 4.9 branch.
Props tykoted, martinkrcho, xknown, dd32, peterwilsoncc, paulkevan, timothyblynjacobs.

Built from https://develop.svn.wordpress.org/branches/4.9@53974


git-svn-id: http://core.svn.wordpress.org/branches/4.9@53533 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-08-30 15:44:26 +00:00
davidbaumwald
4d267bf158 WordPress 4.9.20.
Built from https://develop.svn.wordpress.org/branches/4.9@52881


git-svn-id: http://core.svn.wordpress.org/branches/4.9@52470 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-03-10 22:09:26 +00:00
Sergey Biryukov
b9b627e24f External Librairies: Update jQuery.query to version 2.2.3.
This updates the "jquery-query" library from version 2.1.7 to 2.2.3.

Props jorbin, peterwilsoncc, xknown, audrasjb, jorgefilipecosta.
Merges [52844] to the 4.9 branch.
Built from https://develop.svn.wordpress.org/branches/4.9@52857


git-svn-id: http://core.svn.wordpress.org/branches/4.9@52446 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-03-10 21:28:26 +00:00
desrosj
66eb5e3992 WordPress 4.9.19.
Built from https://develop.svn.wordpress.org/branches/4.9@52496


git-svn-id: http://core.svn.wordpress.org/branches/4.9@52088 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-01-06 18:53:18 +00:00
desrosj
cdb1418a32 Grouped backports to the 4.9 branch.
- Query: Improve sanitization within `WP_Tax_Query`.
- Query: Improve sanitization within `WP_Meta_Query`.
- Upgrade/Install: Avoid using `unserialize()` unnecessarily.
- Formatting: Correctly encode ASCII characters in post slugs.

Merges [52454-52457] to the 4.9 branch.
Props vortfu, dd32, ehtis, zieladam, whyisjake, xknown, peterwilsoncc, desrosj, iandunn.
Built from https://develop.svn.wordpress.org/branches/4.9@52474


git-svn-id: http://core.svn.wordpress.org/branches/4.9@52066 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-01-06 18:16:25 +00:00
Peter Wilson
6de8b73ae1 WordPress 4.9.18.
Built from https://develop.svn.wordpress.org/branches/4.9@50877


git-svn-id: http://core.svn.wordpress.org/branches/4.9@50486 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2021-05-12 23:19:02 +00:00
Peter Wilson
7f47548f35 External libraries: Improve attachment handling in PHPMailer
Props: audrasjb, ayeshrajans, desrosj, peterwilsoncc, xknown.
Partially merges [50799] to the 4.9 branch.


Built from https://develop.svn.wordpress.org/branches/4.9@50855


git-svn-id: http://core.svn.wordpress.org/branches/4.9@50464 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2021-05-12 22:32:26 +00:00
Peter Wilson
88cb968e00 Version bump for 4.9.17.
Built from https://develop.svn.wordpress.org/branches/4.9@50744


git-svn-id: http://core.svn.wordpress.org/branches/4.9@50353 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2021-04-15 01:40:49 +00:00
Peter Wilson
ac28cd61cf Grouped merges for 4.9.17.
* REST API: Allow authors to read their own password protected posts.
* About page update

Merges [50717] to the 4.9 branch.


Built from https://develop.svn.wordpress.org/branches/4.9@50732


git-svn-id: http://core.svn.wordpress.org/branches/4.9@50341 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2021-04-15 01:13:54 +00:00
desrosj
124bbbc653 Build/Test Tools: Backport GitHub Action and build improvements to the 4.9 branch.
This backports several build and test tool improvements to the 4.9 branch. Most notably, this includes:

- The changes required to allow each workflow to be triggered by the `workflow_dispatch` event so that tests can be run on a schedule [50590].
- Splitting single site and multisite tests into parallel jobs [50379].
- Split slow tests into separate, parallel jobs for PHP <= 5.6 [50444].
- Better branch and path scoping for GitHub Action workflows when running on `pull_request` [50432,50479].
- Several `devDependency` updates.

Merges [50379,50387,50413,50416,50432,50435,50436,50444,50446,50473,50474,50476,50479,50485,50486,50487,50545,50579,50590] to the 4.9 branch.
See #50401, #51801, #51802, #52548, #52608, #52612, #52624, #52625, #52645, #52653, #52658, #52660, #52667.
Built from https://develop.svn.wordpress.org/branches/4.9@50625


git-svn-id: http://core.svn.wordpress.org/branches/4.9@50237 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2021-03-31 19:34:28 +00:00
desrosj
5892579440 Build/Test Tools: Support NodeJS 14.x in the 4.9 branch.
This updates the 4.9 branch to support the latest LTS version of NodeJS (currently 14.x), allowing the same version to be used across all WordPress branches that receive security updates as a courtesy.

This also replaces the `npm-shrinkwrap.json` with a `package-lock.json` file. Lock files were not supported in earlier versions of NPM, but can now be used.

In addition to backporting the package updates that happened after branching 4.9, dependencies that were removed in future releases have also been updated to their latest versions.

Props desrosj, dd32, netweb, jorbin.
Merges [42460-42461,42463,42887,43320,43323,43977,44219,44233,44728,45321,45765,46404,46408-46409,47404,47867-47869,47872-47873,48705,49636,49933,49937,49939,50017,50126,50176,50185,50192] to the 4.9 branch.
See #52341.
Built from https://develop.svn.wordpress.org/branches/4.9@50202


git-svn-id: http://core.svn.wordpress.org/branches/4.9@49876 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2021-02-05 04:07:43 +00:00
desrosj
04602bccd8 WordPress 4.9.16.
Built from https://develop.svn.wordpress.org/branches/4.9@49415


git-svn-id: http://core.svn.wordpress.org/branches/4.9@49174 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-10-29 19:39:06 +00:00
whyisjake
01a575e1b0 General: WordPress updates
* XML-RPC: Improve error messages for unprivileged users.
* External Libraries: Disable deserialization in Requests_Utility_FilteredIterator
* Embeds: Disable embeds on deactivated Multisite sites.
* Coding standards: Modify escaping functions to avoid potential false positives.
* XML-RPC: Return error message if attachment ID is incorrect.
* Upgrade/install: Improve logic check when determining installation status.
* Meta: Sanitize meta key before checking protection status.
* Themes: Ensure that only privileged users can set a background image when a theme is using the deprecated custom background page.

Brings the changes from [49380,49382-49388] to the 4.9 branch.

Props xknown, zieladam, peterwilsoncc, whyisjake, desrosj, dd32.

Built from https://develop.svn.wordpress.org/branches/4.9@49397


git-svn-id: http://core.svn.wordpress.org/branches/4.9@49156 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-10-29 18:53:27 +00:00
Sergey Biryukov
ba7ae64a3c Administration: Pass the result of set-screen-option filter to the new set_screen_option_{$option} filter to ensure backward compatibility.
Rename the `$keep` parameter of both filters to `$screen_option` for clarity, update the documentation to better reflect its purpose.

Follow-up to [47951].

Props Chouby, sswells, SergeyBiryukov.
Merges [48241] to the 4.9 branch.
Fixes #50392.
Built from https://develop.svn.wordpress.org/branches/4.9@48249


git-svn-id: http://core.svn.wordpress.org/branches/4.9@48018 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-07-01 09:50:25 +00:00
desrosj
916a395691 WordPress 4.9.15.
Built from https://develop.svn.wordpress.org/branches/4.9@47994


git-svn-id: http://core.svn.wordpress.org/branches/4.9@47762 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-06-10 21:37:03 +00:00
desrosj
b1cb849975 General: Backport several commits for release.
- Editor: Prevent HTML decoding on by setting the proper editor context.
- Formatting: Ensure that wp_validate_redirect() sanitizes a wider variety of characters.
- Themes: Ensure a broken theme name is returned properly.
- Administration: Add a new filter to extend set-screen-option.

Merges [47948-47951] to the 4.9  branch.
Props xknown, sstoqnov, vortfu, SergeyBiryukov, whyisjake.

Built from https://develop.svn.wordpress.org/branches/4.9@47967


git-svn-id: http://core.svn.wordpress.org/branches/4.9@47738 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-06-10 18:52:57 +00:00
Sergey Biryukov
9371029a12 Update the About page for WordPress 4.9.14
Built from https://develop.svn.wordpress.org/branches/4.9@47700


git-svn-id: http://core.svn.wordpress.org/branches/4.9@47477 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-04-29 18:37:32 +00:00
desrosj
d6e61b10b5 WordPress 4.9.14
Built from https://develop.svn.wordpress.org/branches/4.9@47671


git-svn-id: http://core.svn.wordpress.org/branches/4.9@47448 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-04-29 18:00:57 +00:00
whyisjake
0aef0d4b97 Customize: Add additional filters to Customizer to prevent JSON corruption.
User: Invalidate `user_activation_key` on password update.
Query: Ensure that only a single post can be returned on date/time based queries.
Cache API: Ensure proper escaping around the stats method in the cache API.
Formatting: Expand `sanitize_file_name` to have better support for utf8 characters.

Brings the changes in [47633], [47634], [47635], [47637], and [47638] to the 4.9 branch.

Props: batmoo, ehti, nickdaugherty, peterwilsoncc, sergeybiryukov, sstoqnov, westi, westonruter, whyisjake, whyisjake, xknown.

Built from https://develop.svn.wordpress.org/branches/4.9@47648


git-svn-id: http://core.svn.wordpress.org/branches/4.9@47423 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-04-29 16:16:26 +00:00
Sergey Biryukov
315b0d8efe WordPress 4.9.13
Built from https://develop.svn.wordpress.org/branches/4.9@46924


git-svn-id: http://core.svn.wordpress.org/branches/4.9@46724 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-12-12 20:27:12 +00:00
Sergey Biryukov
f524de858c Ensure that a user can publish_posts before making a post sticky.
Props: danielbachhuber, whyisjake, peterwilson, xknown.

Brings r46893 to the 4.9 branch.

Update `wp_kses_bad_protocol()` to recognize `&colon;` on uri attributes,

`wp_kses_bad_protocol()` makes sure to validate that uri attributes don’t contain invalid/or not allowed protocols. While this works fine in most cases, there’s a risk that by using the colon html5 named entity, one is able to bypass this function.

Brings r46895 to the 4.9 branch.

Props: xknown, nickdaugherty, peterwilsoncc.
Built from https://develop.svn.wordpress.org/branches/4.9@46918


git-svn-id: http://core.svn.wordpress.org/branches/4.9@46718 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-12-12 18:57:27 +00:00
desrosj
9c716931a3 WordPress 4.9.12.
Built from https://develop.svn.wordpress.org/branches/4.9@46511


git-svn-id: http://core.svn.wordpress.org/branches/4.9@46308 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 20:09:28 +00:00
whyisjake
ca7629305c Backporting several bug fixes.
- Query: Remove the static query property.
- HTTP API: Protect against hex interpretation.
- Filesystem API: Prevent directory travelersals when creating new folders.
- Administration: Ensure that admin referer nonce is valid.
- REST API: Send a Vary: Origin header on GET requests.

Backports [46474], [46475], [46476], [46477], [46478], [46483], [46485] to the 5.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.9@46493


git-svn-id: http://core.svn.wordpress.org/branches/4.9@46290 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 18:39:28 +00:00
desrosj
0df80b099e WordPress 4.9.11.
Built from https://develop.svn.wordpress.org/branches/4.9@46043


git-svn-id: http://core.svn.wordpress.org/branches/4.9@45855 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 22:05:54 +00:00
Andrew Ozz
bef4964cc3 jQuery: Backport the patch from jQuery 3.4.0.
Merges [45342] to the 4.9 branch.

Props MikeNGarrett, peterwilsoncc, azaozz.
Fixes #47020.
Built from https://develop.svn.wordpress.org/branches/4.9@46020


git-svn-id: http://core.svn.wordpress.org/branches/4.9@45831 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 21:45:33 +00:00
desrosj
061b316605 Fix for URL sanitization in wp_kses_bad_protocol_once().
Merges [45997] to the 4.9 branch.

Props irsdl, sstoqnov, whyisjake.
Built from https://develop.svn.wordpress.org/branches/4.9@46005


git-svn-id: http://core.svn.wordpress.org/branches/4.9@45816 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 21:39:04 +00:00
Sergey Biryukov
ee57ce6745 Improve handling the existing rel attribute in wp_rel_nofollow_callback().
Merges [45990] to the 4.9 branch.
Props xknown, sstoqnov.
Built from https://develop.svn.wordpress.org/branches/4.9@45994


git-svn-id: http://core.svn.wordpress.org/branches/4.9@45805 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 17:48:24 +00:00
Sergey Biryukov
0b53ca170a Improve URL validation in wp_validate_redirect().
Merges [45971] to the 4.9 branch.
Props vortfu, whyisjake, peterwilsoncc.
Built from https://develop.svn.wordpress.org/branches/4.9@45975


git-svn-id: http://core.svn.wordpress.org/branches/4.9@45786 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 17:08:24 +00:00
whyisjake
f4bc98cc1d Remove _convert_urlencoded_to_entities() from the get_the_content() callback.
Merges [45937] to the 4.9 branch.

Props vortfu, whyisjake, peterwilsoncc

Built from https://develop.svn.wordpress.org/branches/4.9@45946


git-svn-id: http://core.svn.wordpress.org/branches/4.9@45757 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 16:35:26 +00:00
Sergey Biryukov
94aa7baeb2 Escape the output in wp_ajax_upload_attachment().
Merges [45936] to the 4.9 branch.
Props whyisjake, sstoqnov.
Built from https://develop.svn.wordpress.org/branches/4.9@45943


git-svn-id: http://core.svn.wordpress.org/branches/4.9@45754 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 16:29:27 +00:00
Gary Pendergast
0e494b043d WordPress 4.9.10
Built from https://develop.svn.wordpress.org/branches/4.9@44868


git-svn-id: http://core.svn.wordpress.org/branches/4.9@44699 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-03-13 00:58:25 +00:00
Sergey Biryukov
176bfb2694 Comments: Improve comment content filtering.
Merges [44842] to the 4.9 branch.
Built from https://develop.svn.wordpress.org/branches/4.9@44845


git-svn-id: http://core.svn.wordpress.org/branches/4.9@44677 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-03-12 22:34:26 +00:00
Sergey Biryukov
9940eb5493 Formatting: Improve rel="nofollow" handling in comments.
Merges [44833] to the 4.9 branch.
Built from https://develop.svn.wordpress.org/branches/4.9@44836


git-svn-id: http://core.svn.wordpress.org/branches/4.9@44668 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-03-12 22:19:26 +00:00
Gary Pendergast
f105803f14 Dashboard: Remove the Try Gutenberg callout.
Merge of [43807] from the 5.0 branch.

Props mukesh27.
Fixes #45063.


Built from https://develop.svn.wordpress.org/branches/4.9@44106


git-svn-id: http://core.svn.wordpress.org/branches/4.9@43936 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-12-13 09:07:26 +00:00
Jeremy Felt
21095bb883 Bump 4.9 branch to version 4.9.9.
Built from https://develop.svn.wordpress.org/branches/4.9@44078


git-svn-id: http://core.svn.wordpress.org/branches/4.9@43908 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-12-13 02:12:11 +00:00
Gary Pendergast
ed38a616b1 Editor: Remove unwanted fields before saving posts.
The `meta_input`, `file`, and `guid` fields are not intended to be updated through user input.

Merges [44047] to the 4.9 branch.


Built from https://develop.svn.wordpress.org/branches/4.9@44053


git-svn-id: http://core.svn.wordpress.org/branches/4.9@43883 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-12-13 01:38:25 +00:00
Peter Wilson
298af5bcf2 Multisite: Validate activation links.
Merges [44048] to the 4.9 branch.

Built from https://develop.svn.wordpress.org/branches/4.9@44051


git-svn-id: http://core.svn.wordpress.org/branches/4.9@43881 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-12-13 01:33:26 +00:00
Peter Wilson
6559bdf187 Multisite: Improve messaging for previously activated users.
Ensure activation of a site is not attempted multiple times and users are shown the correct message if they follow the link a second time.

Merges [44021] to the 4.9 branch.

Built from https://develop.svn.wordpress.org/branches/4.9@44024


git-svn-id: http://core.svn.wordpress.org/branches/4.9@43854 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-12-13 00:34:26 +00:00
iandunn
39710dcb5a KSES: Make the URI attributes DRY.
This commit introduces the `wp_kses_uri_attributes` function and filter. The function centralizes the list of attributes, in order to prevent inconsistency, and the filter provides a way for plugins to customize the attributes.

Merges [44014] and [44017] to the `4.9` branch.

Built from https://develop.svn.wordpress.org/branches/4.9@44020


git-svn-id: http://core.svn.wordpress.org/branches/4.9@43850 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-12-13 00:14:26 +00:00
Gary Pendergast
070403f1c7 KSES: Conditionally remove the <form> element from $allowedposttags.
To avoid backwards compatibility issues, `<form>` is re-added if a custom filter has added the `<input>` or `<select>` elements to `$allowedposttags`.

Merges [43994] to the 4.9 branch.

Built from https://develop.svn.wordpress.org/branches/4.9@43997


git-svn-id: http://core.svn.wordpress.org/branches/4.9@43829 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-12-12 23:17:43 +00:00
Jeremy Felt
498a6acb14 Media: Improve verification of MIME file types.
Merges [43988] to the 4.9 branch.

Built from https://develop.svn.wordpress.org/branches/4.9@43989


git-svn-id: http://core.svn.wordpress.org/branches/4.9@43821 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-12-12 23:03:26 +00:00
Peter Wilson
59a3c2199c Media: Revert [43602] from the 4.9 branch.
Reverts changes to the "Edit more details" link in the attachment details modal.

This is out of scope for 4.9.9 and will be re-introduced in 5.0.0.

Fixes #44620.

Built from https://develop.svn.wordpress.org/branches/4.9@43948


git-svn-id: http://core.svn.wordpress.org/branches/4.9@43780 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-11-29 21:21:27 +00:00
Dion Hulse
fe76b0206d Bump akismet external to 4.1
git-svn-id: http://core.svn.wordpress.org/branches/4.9@43728 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-11-15 07:01:19 +00:00