Commit Graph

394 Commits

Author SHA1 Message Date
duck_
4171ea192b Introduce wp_allowed_protocols() for use in wp_kses() and esc_url(). See #18268.
This allows plugins to filter the list of protocols used for esc_url() too, and helps us keep the list of protocols in sync.


git-svn-id: http://svn.automattic.com/wordpress/trunk@18826 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-29 22:33:51 +00:00
markjaquith
33c150d3de Allow the text parameter in wp_trim_excerpt() to be omitted altogether, instead of requiring a blank string. props SergeyBiryukov. fixes #17492
git-svn-id: http://svn.automattic.com/wordpress/trunk@18824 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-29 21:48:03 +00:00
nacin
07567002bb Update esc_url() phpdoc. props sirzooro, fixes #18766.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18769 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-24 19:52:26 +00:00
duck_
2fb95a133d wp_strip_all_tags() in wp_trim_words() to remove CSS and JS within tags. Props evansolomon. Fixes #18726.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18742 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-21 20:39:21 +00:00
ryan
7aedd7ec52 Run the sanitize_option_* filter for all options in sanitize_option(). Add some sanity checks for the permalink options while in there. fixes #18737
git-svn-id: http://svn.automattic.com/wordpress/trunk@18738 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-21 19:05:06 +00:00
duck_
8cfc0fa5ec Abstract word-trimming from wp_trim_excerpt() into wp_trim_words(). Props nacin. Fixes #16372.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18732 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-20 17:14:23 +00:00
nacin
e5ca4fea40 Strip a number of special characters in sanitize_title_with_dashes on save. Includes quotes (curly, angle), dashes, marks, etc. props SergeyBiryukov. props ampt for the unit tests in [UT438]. see #10797.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18705 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-18 19:53:59 +00:00
duck_
e4ed63fc6f Fix typos in documentation (wp-includes/[a-h]). See #18560.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18633 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-03 16:02:41 +00:00
nacin
d5cf830175 Add 'q' tag to nestable tags list in force_balance_tags(). props solarissmoke, fixes #6870.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18585 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-08-23 15:37:38 +00:00
ryan
6c39a6f769 Better double encoding handling in _wp_special_chars(). Props miqrogroove.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18485 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-07-29 20:43:45 +00:00
ryan
55d7366c42 Recognize urls that start with a question mark as relative urls that do not require a scheme to be prepended. fixes #18260
git-svn-id: http://svn.automattic.com/wordpress/trunk@18469 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-07-26 19:44:18 +00:00
westi
009b264271 Make [18456] more obvious. Fixes #16432.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18465 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-07-25 13:20:07 +00:00
nacin
6185986c0e Add pre_ent2ncr filter. props GaryJ, fixes #16432.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18456 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-07-21 21:41:21 +00:00
ryan
593659b8d0 Hardening. Santizers for WPLANG and new_admin_email. Prevent stomping ID and filter. Validate locale filename. Props westi.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18346 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-06-27 15:56:42 +00:00
ryan
bc667be71b Allow plus '+' character when sanitizing mime type. Props cyberhobo. fixes #17855
git-svn-id: http://svn.automattic.com/wordpress/trunk@18324 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-06-20 20:05:57 +00:00
westi
fda24a53ed Ensure we have a valid timezone identifier before trying to use it.
Validate the new timezone identifier during option update.
Fixes #17840.

git-svn-id: http://svn.automattic.com/wordpress/trunk@18323 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-06-20 14:58:50 +00:00
azaozz
ae81d75d39 Fix typo in remove_accents(), props scribu, fixes #16232
git-svn-id: http://svn.automattic.com/wordpress/trunk@18159 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-06-06 02:22:50 +00:00
ryan
4da684cf9a Update @since
git-svn-id: http://svn.automattic.com/wordpress/trunk@18032 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-25 15:47:17 +00:00
ryan
81a5f821fb Sanitize guid on save and display. Sanitize mime type on save. Don't allow changing mime type via edit form handlers. Protect hidden meta.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17994 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-22 23:19:42 +00:00
ryan
569c17df7f Properly anchor mime preg.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17990 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-22 23:17:09 +00:00
nacin
98bd4c0b2f s/coma/comma/. props ocean90.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17982 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-21 15:20:25 +00:00
ryan
b2c2e302be Revert part of [17920]. Support for empty tz must remain. Props johnjamesjacoby. fixes #17448
git-svn-id: http://svn.automattic.com/wordpress/trunk@17958 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-18 18:56:42 +00:00
westi
65e341d0cb Fix typos and inconsistencies in PHPdoc / function declarations. See #17414 props duck_
git-svn-id: http://svn.automattic.com/wordpress/trunk@17925 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-14 09:50:20 +00:00
ryan
58767691f4 Remove PHP5 back compat code from get_gmt_from_date. Props technosailor. fixes #16920
git-svn-id: http://svn.automattic.com/wordpress/trunk@17920 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-13 19:17:07 +00:00
ryan
74354459f1 Performance improvements for wptexturize(). Props solarissmoke, hakre. fixes #16684
git-svn-id: http://svn.automattic.com/wordpress/trunk@17636 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-04-13 17:11:35 +00:00
nacin
14ec951269 Make underscores valid in sanitize_html_class. fixes #17067.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17614 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-04-06 21:28:52 +00:00
ryan
975a6a8c8d Reduce backtracking in make_clickable() regex. Reduce pcre.recursion_limit to avoid segfaulting. Props hakre. For trunk.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17570 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-03-28 21:39:16 +00:00
ryan
4d46e8d95e Lose create_function() in links_add_target() and links_add_base_url(). esc_attr() the target to provide extra coverage for plugins. Props Justin Rainbow, nacin. For trunk
git-svn-id: http://svn.automattic.com/wordpress/trunk@17459 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-02-16 19:24:18 +00:00
ryan
85f1feed84 Bring out the shears.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17228 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-01-06 04:11:14 +00:00
ryan
81cd855720 Don't be case sensitive to attribute names. Handle padded entities when checking for bad protocols. Normalize entities before checking for bad protocols in esc_url(). Props Mauro Gentile, duck_, miqrogroove
git-svn-id: http://svn.automattic.com/wordpress/trunk@17171 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-12-29 20:45:37 +00:00
nacin
95726df854 Revert [16995] due to the way the data enters the db. props garyc40, see #15454.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17142 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-12-25 18:10:59 +00:00
ryan
3a66c698ee Remove some unnecessary esc_textarea() calls. Props garyc40. see #15454
git-svn-id: http://svn.automattic.com/wordpress/trunk@17001 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-12-16 17:48:20 +00:00
markjaquith
49c11dc768 Use ENT_QUOTES in esc_textarea() in case someone uses it in a value='' situation by accident. see #15454
git-svn-id: http://svn.automattic.com/wordpress/trunk@16993 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-12-16 09:24:22 +00:00
westi
60aa1d3062 Ultimate make_clickable. Fixes #14993 props filosofo
git-svn-id: http://svn.automattic.com/wordpress/trunk@16948 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-12-15 13:43:30 +00:00
westi
1df7f1be64 Revert [16279] - the recursive nature of this regex doesn't play well with stack space. See #14993
git-svn-id: http://svn.automattic.com/wordpress/trunk@16692 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-12-02 17:26:06 +00:00
nacin
b8ce0261df More param fixes, props duck_. see #14783.
git-svn-id: http://svn.automattic.com/wordpress/trunk@16469 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-11-18 19:12:48 +00:00
ryan
847499e531 Pinking shears
git-svn-id: http://svn.automattic.com/wordpress/trunk@16438 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-11-17 18:47:34 +00:00
markjaquith
6482610f9a esc_textarea() and application for obvious textarea escaping. props alexkingorg. fixes #15454
git-svn-id: http://svn.automattic.com/wordpress/trunk@16431 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-11-17 17:12:01 +00:00
nacin
3f5b442306 Revert changes to wptexturize() until test cases pass. Reverts [16280], [16378]. see #4539 and #15241.
git-svn-id: http://svn.automattic.com/wordpress/trunk@16409 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-11-16 22:18:48 +00:00
westi
17d25e2cdc Fix regression in wptexturize with single quotes when used for contraction. See #15241 props norbertm.
git-svn-id: http://svn.automattic.com/wordpress/trunk@16378 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-11-15 08:52:36 +00:00
nacin
81a8f2d3ce Use square brackets instead of braces for string access. props hakre, fixes #13900.
git-svn-id: http://svn.automattic.com/wordpress/trunk@16340 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-11-13 09:53:55 +00:00
nacin
5f4a583fb1 Remove more create_function calls. props huichen, see #14424.
git-svn-id: http://svn.automattic.com/wordpress/trunk@16313 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-11-11 22:50:36 +00:00
westi
71fab5576a Improved RegEx for quote matching in wptexturize. Fixes #4539 and #15241 props norbertm.
git-svn-id: http://svn.automattic.com/wordpress/trunk@16280 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-11-10 19:23:57 +00:00
westi
2d09607167 Don't capture the pesky trailing punctuation. Fixes #14993 props filosofo
git-svn-id: http://svn.automattic.com/wordpress/trunk@16279 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-11-10 17:47:46 +00:00
ryan
dbf7388c5b Don't anchor regex. Props ozh. fixes #14628
git-svn-id: http://svn.automattic.com/wordpress/trunk@16207 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-11-05 15:29:50 +00:00
scribu
fdd3556806 Introduce wp_basename() and use it for media handling. See #11887
git-svn-id: http://svn.automattic.com/wordpress/trunk@16154 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-11-02 17:19:55 +00:00
westi
81a1c190c4 Revert 16150 - breaks things more than it fixes things. See #14993
git-svn-id: http://svn.automattic.com/wordpress/trunk@16151 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-11-02 11:42:30 +00:00
westi
c6471ef6e2 Don't capture RFC3986 sub-delims when making urls clickable except for ). Fixes #14993 props filosofo.
git-svn-id: http://svn.automattic.com/wordpress/trunk@16150 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-11-02 09:45:09 +00:00
westi
51c714b256 Always capture ! as part of a url. See #14993 props filosofo.
git-svn-id: http://svn.automattic.com/wordpress/trunk@16111 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-10-31 09:09:29 +00:00
westi
fed42ecdf1 Purger more create_function usage during autop and iso descrambling. See #14424 props ScottMac.
git-svn-id: http://svn.automattic.com/wordpress/trunk@16035 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-10-28 07:38:00 +00:00
ryan
614dd3b3a9 Idempotence for sanitize_user(). Make sanitize_key() match its phpdoc. Props duck_ fixes #15198
git-svn-id: http://svn.automattic.com/wordpress/trunk@15948 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-10-24 20:33:54 +00:00
scribu
81025846b1 Also convert uppercase letters in Latin Extended-B. See #9591
git-svn-id: http://svn.automattic.com/wordpress/trunk@15931 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-10-23 15:36:16 +00:00
scribu
633daa01cb remove_accents(): Nordic characters fixes. Props einare. Fixes #4739. See #9591
git-svn-id: http://svn.automattic.com/wordpress/trunk@15930 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-10-23 13:00:21 +00:00
scribu
c613576e77 Introduce sanitize_title_for_query(). See #9591
git-svn-id: http://svn.automattic.com/wordpress/trunk@15929 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-10-23 12:55:55 +00:00
ryan
fd2896de77 Improve regex performance in wptexturize(). Props mdawaffe. fixes #15093
git-svn-id: http://svn.automattic.com/wordpress/trunk@15816 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-10-15 14:34:38 +00:00
ryan
6b351163ef Simplify sanitize_key() and use it in more places. see #14910
git-svn-id: http://svn.automattic.com/wordpress/trunk@15635 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-09-20 15:28:58 +00:00
nacin
5a20c05d27 Phpdoc argument/@param cleanups. props duck_, see #14783.
git-svn-id: http://svn.automattic.com/wordpress/trunk@15590 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-09-07 11:21:11 +00:00
ryan
5d5f2ed563 Make smilies links SSL aware. Props tech163. fixes #14360
git-svn-id: http://svn.automattic.com/wordpress/trunk@15554 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-08-31 18:26:18 +00:00
markjaquith
798ba9900d Leonard Lin was kind enough to relicense his balanceTags() function as "GPL (any version)" instead of "GPL v2.0." http://github.com/lhl/balanceTags/blob/master/README
git-svn-id: http://svn.automattic.com/wordpress/trunk@15536 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-08-26 15:43:32 +00:00
markjaquith
57deb5ec03 More judicious Wordpress-to-WordPress correction, to avoid bungling reasonable URLs. fixes #13971
git-svn-id: http://svn.automattic.com/wordpress/trunk@15377 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-07-08 19:35:29 +00:00
dd32
a14d289755 Alot more tabs. Props jacobsantos & Viper007bond. See #14147
git-svn-id: http://svn.automattic.com/wordpress/trunk@15355 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-06-30 00:05:18 +00:00
nacin
2eadcb9aef Fix warnings related to static pages. props zeo for initial patch. fixes #13830.
git-svn-id: http://svn.automattic.com/wordpress/trunk@15227 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-06-11 17:04:06 +00:00
nacin
c3cf7e4ee0 Forever eliminate 'Wordpress' from the planet (or at least the little bit we can influence). props matt.
git-svn-id: http://svn.automattic.com/wordpress/trunk@14996 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-05-27 16:11:27 +00:00
westi
e8b8361ffe Attempt to make stripslashes_deep object safe. See #12860
git-svn-id: http://svn.automattic.com/wordpress/trunk@14766 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-05-20 21:16:44 +00:00
westi
390a40981f Improve cross DST future post publishing behaviour to try and publish at the correct time if we have PHP5 timezone support available to help. Fixes #9285 props technosailor.
git-svn-id: http://svn.automattic.com/wordpress/trunk@14487 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-05-06 20:40:29 +00:00
ryan
2ecda01ce0 Fix user validation feedback. Props sivel. fixes #13162
git-svn-id: http://svn.automattic.com/wordpress/trunk@14428 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-05-03 23:46:42 +00:00
markjaquith
0c1ce4e9bc Add some new protocols for KSES. Make the list of protocols filterable. Start esc_url() with the same list. fixes #10914. props technosailor
git-svn-id: http://svn.automattic.com/wordpress/trunk@14412 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-05-03 21:20:20 +00:00
ryan
7b7243d94a Strip trailing whites.
git-svn-id: http://svn.automattic.com/wordpress/trunk@14404 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-05-03 20:26:11 +00:00
nacin
b63ee5748a Deprecate checkdnsrr from is_email. Unused in core, and wonky on some server setups (Mac OS X < PHP 5.3 specifically). A plugin can always add it back. props technosailor, fixes #12503.
git-svn-id: http://svn.automattic.com/wordpress/trunk@14381 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-05-03 18:54:37 +00:00
dd32
898168f927 Add basic email/url validation to General options page. Prevents users entering a invalid Admin email or WordPress/Site Address which is not in URL form. Props technosailor for initial patch, slightly reworked. See #12868
git-svn-id: http://svn.automattic.com/wordpress/trunk@14231 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-04-25 08:16:10 +00:00
dd32
029e988594 Make (\d)x(\d) texturization less greedy, requires a word boundary either side of the phrase. See #12118
git-svn-id: http://svn.automattic.com/wordpress/trunk@14144 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-04-18 08:26:38 +00:00
westi
436232d505 Improve behaviour of wptexturize with respect to single quotes. See #4539 props jmstacey.
git-svn-id: http://svn.automattic.com/wordpress/trunk@14095 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-04-15 21:39:58 +00:00
dd32
442d41291a Tweak new strings for better typography. Props demetris. Fixes #12962
git-svn-id: http://svn.automattic.com/wordpress/trunk@14070 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-04-11 10:41:54 +00:00
nacin
5f134c587e Deprecate funky_javascript_fix() and it's callback. fixes #12520.
git-svn-id: http://svn.automattic.com/wordpress/trunk@13988 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-04-04 07:11:23 +00:00
nacin
ecec297237 Cast subject of _deep_replace() to string to prevent an infinite loop. props mdawaffe, fixes #12386
git-svn-id: http://svn.automattic.com/wordpress/trunk@13983 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-04-04 03:07:14 +00:00
nacin
e4aabba998 Add block-level HTML5 elements to wpautop(). props rmccue. fixes #12335
git-svn-id: http://svn.automattic.com/wordpress/trunk@13982 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-04-04 01:14:22 +00:00
dd32
cba11b1ecd A better default except, Remove multiple white spaces from the except as well as splitting safely on UTF8 strings. Props Denis-de-Bernardy for the UTF8 split. Fixes #10376
git-svn-id: http://svn.automattic.com/wordpress/trunk@13942 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-04-02 07:10:51 +00:00
dd32
3793a4fee2 Whitespace and coding standards cleanup for balanceTags(). See #11968
git-svn-id: http://svn.automattic.com/wordpress/trunk@13914 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-04-01 13:18:34 +00:00
dd32
2660f3f8f3 Recognise namespaces in tags for balanceTags(). Fixes #11968
git-svn-id: http://svn.automattic.com/wordpress/trunk@13913 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-04-01 13:16:44 +00:00
dd32
165d200ced Dont pee on <option>. Prevents the addition of a <br/> following a </option>. Props akerem. Fixes #11947
git-svn-id: http://svn.automattic.com/wordpress/trunk@13903 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-03-31 09:32:44 +00:00
nacin
3918b75cbe Change @since 2.9 to @since 2.9.0.
git-svn-id: http://svn.automattic.com/wordpress/trunk@13829 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-03-26 19:23:39 +00:00
ryan
e25a65b36a Trim trailing whitespace
git-svn-id: http://svn.automattic.com/wordpress/trunk@13733 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-03-17 16:27:25 +00:00
markjaquith
58d47426cc More pedantry. "Setup" is not a verb. http://notaverb.com/setup
git-svn-id: http://svn.automattic.com/wordpress/trunk@13725 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-03-17 04:39:50 +00:00
ryan
6f27182cf1 Introduce sanitize_key().
git-svn-id: http://svn.automattic.com/wordpress/trunk@13718 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-03-16 19:19:32 +00:00
ryan
f91e95f100 make *_option(), *_transient() functions consistently expect unslashed data. Props Denis-de-Bernardy. see #12416
git-svn-id: http://svn.automattic.com/wordpress/trunk@13673 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-03-11 21:49:56 +00:00
nacin
56c3658154 Add some whitespace to get_body_class(). props coffee2code. Clarify fallback parameter in sanitize_html_class(). see #11331
git-svn-id: http://svn.automattic.com/wordpress/trunk@13468 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-02-27 20:06:35 +00:00
nacin
8bcc5969dc Spelling and grammar fun. Fixes #11875 props cnorris23
git-svn-id: http://svn.automattic.com/wordpress/trunk@13382 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-02-24 20:13:23 +00:00
ryan
0a81feaaeb Whitelist entities. Props miqrogroove. see #12284
git-svn-id: http://svn.automattic.com/wordpress/trunk@13358 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-02-24 05:37:20 +00:00
nacin
cd767cd7a8 Deprecate clean_url() for esc_url(). Fixes #12309
git-svn-id: http://svn.automattic.com/wordpress/trunk@13299 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-02-22 18:25:51 +00:00
dd32
80d9329e5e Remove unused references to global $wpdb
git-svn-id: http://svn.automattic.com/wordpress/trunk@13240 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-02-20 00:50:29 +00:00
ryan
3878927045 add_settings_error fixes. Props jeremyclarke. fixes #11474
git-svn-id: http://svn.automattic.com/wordpress/trunk@13197 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-02-18 19:43:44 +00:00
ryan
08bb3568c6 Option validation error reporting. Props jeremyclarke. see #11474
git-svn-id: http://svn.automattic.com/wordpress/trunk@13177 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-02-17 17:50:42 +00:00
nacin
e70189bba5 Fix typos in inline docs for clean_url() and esc_url().
git-svn-id: http://svn.automattic.com/wordpress/trunk@13108 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-02-13 10:58:01 +00:00
nacin
b76d0dc22e Deprecate old l10n and sanitization APIs. Deprecate __ngettext() for _n(), __ngettext_noop() for _n_noop(), translate_with_context() for _x(). Deprecate sanitize_url for esc_url_raw, js_escape for esc_js, wp_specialchars for esc_html, attribute_escape for esc_attr. See #11388
git-svn-id: http://svn.automattic.com/wordpress/trunk@13096 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-02-13 07:28:19 +00:00
dd32
22e4b1200e Initialise Variables, Whitespace cleanup, Remove unused variables, Cast start_of_week option to int in sanitization.
git-svn-id: http://svn.automattic.com/wordpress/trunk@13089 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-02-13 06:08:15 +00:00
nacin
53ac3d960e Fix inline documentation for esc_js(). Intended for inline JS only, fixes #11690.
git-svn-id: http://svn.automattic.com/wordpress/trunk@13076 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-02-13 02:54:54 +00:00
westi
530f9273a7 Revert [12460] for now while we consider a better fix. See #10041
git-svn-id: http://svn.automattic.com/wordpress/trunk@12957 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-02-04 21:40:02 +00:00
westi
1e5c83ab2a Fix typo in phpdoc for sanitize_text_field. Fixes #12091 props joshtime.
git-svn-id: http://svn.automattic.com/wordpress/trunk@12912 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-01-31 15:41:19 +00:00
ryan
94859834fc i18n fixes. Props nbachiyski. fixes #11954
git-svn-id: http://svn.automattic.com/wordpress/trunk@12789 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-01-21 21:37:43 +00:00
ryan
6da55f7792 Trailing whitespace cleanup
git-svn-id: http://svn.automattic.com/wordpress/trunk@12733 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-01-15 22:11:12 +00:00
westi
bf4a5241e1 Add missing version numbers to _deprecated_argument() calls.
Remove deprecated argument from xfn_check() calls.
Pass version number to deprecated_file_included, deprecated_function_run and deprecated_argument_run actions.
Fixes #11386 props nacin.

git-svn-id: http://svn.automattic.com/wordpress/trunk@12680 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-01-09 10:03:55 +00:00
westi
ff7831207c Updates and improvements to _depreceated_argument. See #11386 props nacin.
git-svn-id: http://svn.automattic.com/wordpress/trunk@12584 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-12-30 16:23:39 +00:00
westi
b47a03278e Only run a second spaces strip if we replaced some octets. Also only replace spaces and we have already removed the other whitespace chars. Fixes #11573 props azaozz.
git-svn-id: http://svn.automattic.com/wordpress/trunk@12504 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-12-23 11:00:29 +00:00
westi
aec63aa377 Improve sanitize_text_field() some more so that we don't leave extra whitespace after stripping octets. Fixes #11573.
git-svn-id: http://svn.automattic.com/wordpress/trunk@12503 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-12-23 09:52:48 +00:00
azaozz
2128c3f4db Fix sanitize_text_field() issue with some UTF-8 characters, fixes #11528 for trunk
git-svn-id: http://svn.automattic.com/wordpress/trunk@12499 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-12-23 09:10:26 +00:00
westi
7d31610f6f Improve like_escape to also escape '\'. Fixes #10041 props miau_jp and Denis-de-Bernardy.
git-svn-id: http://svn.automattic.com/wordpress/trunk@12460 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-12-19 11:07:16 +00:00
ryan
b82594d1cd Make the excerpt_more filter include the space. Props demetris. fixes #11456
git-svn-id: http://svn.automattic.com/wordpress/trunk@12414 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-12-16 16:38:58 +00:00
matt
cff2ea75c7 Cast out the lowercase P demons that snuck in. http://www.google.com/search?q=out+out+you+demons+of+stupidity
git-svn-id: http://svn.automattic.com/wordpress/trunk@12341 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-12-08 19:59:34 +00:00
azaozz
31bc813a6d Separate the removal of <p> wrapping from shortcodes into another function and apply it with different filter, props miqrogroove, props mdawaffe, see #11257, see #11249
git-svn-id: http://svn.automattic.com/wordpress/trunk@12302 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-12-01 07:46:36 +00:00
azaozz
6efcb2913a Autop: add fieldset to blocks, remove support for empty <p> for now, fix block in block problems when switching the editor from visual to html and back, fixes #8644
git-svn-id: http://svn.automattic.com/wordpress/trunk@12275 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-11-25 09:50:20 +00:00
westi
d2fa378957 Ensure that make_clickable links correctly when the link is placed in brackets and has trailing punctuation. Fixes #11211 props filosofo.
git-svn-id: http://svn.automattic.com/wordpress/trunk@12250 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-11-21 09:14:17 +00:00
ryan
6a65d30970 Sanitize filenames with multiple extensions. see #11122
git-svn-id: http://svn.automattic.com/wordpress/trunk@12165 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-11-11 23:07:29 +00:00
westi
2c79c7c71f Ensure that trailing ) in urls are included in the link when it looks appropriate. Fixes #10990 props filosofo.
git-svn-id: http://svn.automattic.com/wordpress/trunk@12088 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-10-22 18:46:27 +00:00
westi
c29de44907 Improve wptexturize performance. Fixes #10987 props johanee.
git-svn-id: http://svn.automattic.com/wordpress/trunk@12084 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-10-21 21:57:27 +00:00
ryan
4f3eab3de3 Strip nulls
git-svn-id: http://svn.automattic.com/wordpress/trunk@12072 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-10-20 18:52:37 +00:00
ryan
18f11f1fbc Use oEmbed for youtube. Props Viper007Bond. see #10337
git-svn-id: http://svn.automattic.com/wordpress/trunk@12027 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-10-13 22:36:24 +00:00
ryan
410fcc2e42 Embeds. Props Viper007Bond. see #10337
git-svn-id: http://svn.automattic.com/wordpress/trunk@12023 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-10-13 17:04:22 +00:00
markjaquith
4ead128521 esc_sql() for wp-includes
git-svn-id: http://svn.automattic.com/wordpress/trunk@11978 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-09-27 05:33:56 +00:00
azaozz
eccd75e38c Strip \r when escaping strings for JS, props nbachiyski, fixes #7041
git-svn-id: http://svn.automattic.com/wordpress/trunk@11935 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-09-15 10:11:59 +00:00
ryan
8e3808bce2 Remove trailing whitespace
git-svn-id: http://svn.automattic.com/wordpress/trunk@11930 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-09-14 14:03:32 +00:00
ryan
aa1e377ede Filter fields through kses upon display. Introduce sanitize_user_object() and sanitize_user_field(). see #10751
git-svn-id: http://svn.automattic.com/wordpress/trunk@11929 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-09-14 13:57:48 +00:00
westi
b4e7804bf0 Give plugins and themes simple control over the text displayed at the end of an autogenerated excerpt. Fixes #10395 props ramiy.
git-svn-id: http://svn.automattic.com/wordpress/trunk@11907 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-09-09 16:34:44 +00:00
westi
e545f9af13 Treat comma, colon and semi-colon the same way.
git-svn-id: http://svn.automattic.com/wordpress/trunk@11848 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-20 07:58:41 +00:00
westi
f9aff1739a Ensure that drafts viewed over XMLRPC have a correct gmt date set. Fixes #10244 for trunk props josephscott.
git-svn-id: http://svn.automattic.com/wordpress/trunk@11846 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-20 06:59:02 +00:00
azaozz
934eadc858 Better regex for [11844]
git-svn-id: http://svn.automattic.com/wordpress/trunk@11845 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-20 00:19:00 +00:00
azaozz
668cfea9f2 Removed trailing .) from the URL in make_clickable()
git-svn-id: http://svn.automattic.com/wordpress/trunk@11844 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-19 23:56:10 +00:00
westi
249f2d39b1 Fix wptexturisation of quotes when enclosed by brackets. Fixes #1418 props voyou1.
git-svn-id: http://svn.automattic.com/wordpress/trunk@11813 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-14 16:43:22 +00:00
westi
c484dd5c17 Ensure that users_can_register is sanitised correctly. See #10454 props josephscott.
git-svn-id: http://svn.automattic.com/wordpress/trunk@11772 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-04 21:28:42 +00:00
ryan
90f9d33c42 add smilies_src filter. Props Otto42. see #10145
git-svn-id: http://svn.automattic.com/wordpress/trunk@11738 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-07-22 18:27:13 +00:00
ryan
c6838b1761 Pass delimiter to preg_quote(). Props Denis-de-Bernardy. see #9955
git-svn-id: http://svn.automattic.com/wordpress/trunk@11634 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-23 22:10:46 +00:00
westi
0dba5eddcf Introduce _deep_replace() and use it to improve the stripping of percent encoded values from urls. Fixes #10226 for trunk.
git-svn-id: http://svn.automattic.com/wordpress/trunk@11615 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-20 17:42:24 +00:00
ryan
c7d287c45a Don't pass by reference. Props kamiyeye. fixes #9994
git-svn-id: http://svn.automattic.com/wordpress/trunk@11518 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-04 05:32:58 +00:00
azaozz
d99872af71 Allow translators to change the curly quotes in wptexturize(), props nbachiyski fixes #10001
git-svn-id: http://svn.automattic.com/wordpress/trunk@11504 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-02 00:27:53 +00:00
markjaquith
cacfffd068 Add esc_sql(), for completeness.
git-svn-id: http://svn.automattic.com/wordpress/trunk@11490 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-29 20:31:52 +00:00
ryan
2df887bd07 Trim tailing whitespace
git-svn-id: http://svn.automattic.com/wordpress/trunk@11450 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-24 23:47:49 +00:00
westi
fc3b5ba6da Rename new function to sanitize_html_class() to hilight exactly what it is for, Fixes #8446.
git-svn-id: http://svn.automattic.com/wordpress/trunk@11435 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-22 21:31:42 +00:00
westi
108f7c1063 Introduce sanitise_css_classname() and use it to give categories, tags, users etc meaningful classnames where possible. Falls back to the id if not. Fixes #8446.
git-svn-id: http://svn.automattic.com/wordpress/trunk@11433 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-22 17:44:26 +00:00
ryan
a6580f16f5 seems_utf8() cleanup. Props hakre. fixes #9692
git-svn-id: http://svn.automattic.com/wordpress/trunk@11414 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-20 21:13:14 +00:00
ryan
46c5f5b84c Fix item count in wp_sprintf_l(). Props abelcheung. fixes #9847
git-svn-id: http://svn.automattic.com/wordpress/trunk@11394 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-19 15:36:01 +00:00
markjaquith
3ebf837ced Deprecate sanitize_url() and clean_url() in favor of esc_url_raw() and esc_url()
git-svn-id: http://svn.automattic.com/wordpress/trunk@11383 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-18 16:00:33 +00:00
markjaquith
119b39cec2 deprecate wp_specialchars() in favor of esc_html(). Encode quotes for esc_html() as in esc_attr(), to improve plugin security.
git-svn-id: http://svn.automattic.com/wordpress/trunk@11380 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-18 15:11:07 +00:00
ryan
0f7d055621 Handle nested tag in wptexturize(). Props nbachiyski. fixes #7056 see #6969
git-svn-id: http://svn.automattic.com/wordpress/trunk@11345 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-15 21:37:18 +00:00
westi
378aaa973e Ensure that wp_specialchars captures all pre-encoded entities correctly when preventing double encoding. Fixes #9821.
git-svn-id: http://svn.automattic.com/wordpress/trunk@11338 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-15 06:29:19 +00:00
markjaquith
5f17b95d0f Exclude <tt> from formatting. props JulienV. fixes #8321
git-svn-id: http://svn.automattic.com/wordpress/trunk@11313 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-12 22:51:24 +00:00
markjaquith
d7b015645d esc_js(). Shorter, follows new escaping naming convention.
git-svn-id: http://svn.automattic.com/wordpress/trunk@11245 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-09 07:27:22 +00:00
ryan
bf92d8a323 Escape title attributes in calendar links. fixes #8967
git-svn-id: http://svn.automattic.com/wordpress/trunk@11215 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-06 04:56:32 +00:00
markjaquith
6c2ffddf31 _a(), _ea(), _xa(), attr() are now esc_attr__(), esc_attr_e(), esc_attr_x(), esc_attr() -- still short, but less cryptic. see #9650
git-svn-id: http://svn.automattic.com/wordpress/trunk@11204 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-05 19:43:53 +00:00
ryan
3072fbb30d sanitize_file_name() improvements. Props sivel. fixes #9416
git-svn-id: http://svn.automattic.com/wordpress/trunk@11178 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-04 20:20:48 +00:00
ryan
64e33fdaa8 Don't prepend http to fragments. Props scohoust. fixes #4051
git-svn-id: http://svn.automattic.com/wordpress/trunk@11126 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-04-29 20:10:06 +00:00
ryan
2d489767bb s/attribute_escape/attr/. see #9650
git-svn-id: http://svn.automattic.com/wordpress/trunk@11109 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-04-28 05:58:45 +00:00