Commit Graph

310 Commits

Author SHA1 Message Date
azaozz
73c87020c7 HTML in image captions, first run, see #18311
git-svn-id: http://svn.automattic.com/wordpress/trunk@19982 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2012-02-24 01:58:18 +00:00
nacin
8961a61f89 Combine two identical case statements.
git-svn-id: http://svn.automattic.com/wordpress/trunk@19933 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2012-02-16 15:42:02 +00:00
nacin
66f64c7c01 Use correct reference in regex. props danielbachhuber, fixes #20018.
git-svn-id: http://svn.automattic.com/wordpress/trunk@19907 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2012-02-10 22:28:37 +00:00
duck_
5648dd3547 Add @since and @access tag to _split_str_by_whitespace(). Props ocean90. See #16892.
git-svn-id: http://svn.automattic.com/wordpress/trunk@19900 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2012-02-10 13:57:21 +00:00
duck_
d8a694d8ac Improve efficiency of make_clickable(). Props mdawaffe. Fixes #16892.
Not only does this improve general performance, but also helps to prevent
segfaults caused by malicious input to the regular expression. The regular
expression is also simplified to help readability and maintenance.


git-svn-id: http://svn.automattic.com/wordpress/trunk@19899 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2012-02-10 13:42:15 +00:00
nacin
2aec12b287 wptexturize() does not need to staticize variables it only uses to set up variables it needs statically. see #19602.
git-svn-id: http://svn.automattic.com/wordpress/trunk@19796 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2012-01-31 14:28:30 +00:00
nacin
1b7effa6eb Allow the single quotes, apostrophes, and primes in wptexturize() to be translated. Allows replacements to be disabled by translating them back to " and '. fixes #19602.
git-svn-id: http://svn.automattic.com/wordpress/trunk@19795 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2012-01-31 14:06:32 +00:00
ryan
e3b46b25d3 Lose EOF ?>. Clean up EOF newlines. fixes #12307
git-svn-id: http://svn.automattic.com/wordpress/trunk@19712 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2012-01-08 17:01:11 +00:00
ryan
3eaf083995 Introduce sanitize_trackback_urls(). Don't ping bad urls. Don't ping bad urls or save them to the DB. Props xknown, SergeyBiryukov. fixes #17560
git-svn-id: http://svn.automattic.com/wordpress/trunk@19675 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2012-01-04 19:45:13 +00:00
nacin
2ba0d300c4 Correct the documentation for balanceTags(). props mdawaffe, fixes #19576.
git-svn-id: http://svn.automattic.com/wordpress/trunk@19601 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-12-16 20:57:05 +00:00
ryan
07ff8b216b Use one space, not two, after trailing punctuation. fixes #19537
git-svn-id: http://svn.automattic.com/wordpress/trunk@19593 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-12-13 23:45:31 +00:00
nacin
524284fd6b Allow 8212/8211 (em dash and en dash) to be translated in wptexturize(). props SergeyBiryukov, fixes #15556.
git-svn-id: http://svn.automattic.com/wordpress/trunk@19187 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-11-06 18:31:54 +00:00
nacin
b2560a3025 Add a few characters to remove_accents(). props SergeyBiryukov. props ampt for [UT471]. fixes #9591.
git-svn-id: http://svn.automattic.com/wordpress/trunk@19125 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-11-02 23:08:05 +00:00
ryan
91bc97be7b Allow 0 - 9 in tag_escape(). Props sirzooro. fixes #18765
git-svn-id: http://svn.automattic.com/wordpress/trunk@18955 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-10-12 20:34:14 +00:00
ryan
80351b789d Avoid preg backtrack limit errors with large posts when processing shortcodes. Props mdawaffe. fixes #15600
git-svn-id: http://svn.automattic.com/wordpress/trunk@18952 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-10-12 16:50:30 +00:00
ryan
b3054bd18f phpdoc fix for zeroise(). Props trepmal. fixes #18854
git-svn-id: http://svn.automattic.com/wordpress/trunk@18877 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-10-04 16:02:33 +00:00
duck_
4171ea192b Introduce wp_allowed_protocols() for use in wp_kses() and esc_url(). See #18268.
This allows plugins to filter the list of protocols used for esc_url() too, and helps us keep the list of protocols in sync.


git-svn-id: http://svn.automattic.com/wordpress/trunk@18826 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-29 22:33:51 +00:00
markjaquith
33c150d3de Allow the text parameter in wp_trim_excerpt() to be omitted altogether, instead of requiring a blank string. props SergeyBiryukov. fixes #17492
git-svn-id: http://svn.automattic.com/wordpress/trunk@18824 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-29 21:48:03 +00:00
nacin
07567002bb Update esc_url() phpdoc. props sirzooro, fixes #18766.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18769 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-24 19:52:26 +00:00
duck_
2fb95a133d wp_strip_all_tags() in wp_trim_words() to remove CSS and JS within tags. Props evansolomon. Fixes #18726.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18742 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-21 20:39:21 +00:00
ryan
7aedd7ec52 Run the sanitize_option_* filter for all options in sanitize_option(). Add some sanity checks for the permalink options while in there. fixes #18737
git-svn-id: http://svn.automattic.com/wordpress/trunk@18738 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-21 19:05:06 +00:00
duck_
8cfc0fa5ec Abstract word-trimming from wp_trim_excerpt() into wp_trim_words(). Props nacin. Fixes #16372.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18732 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-20 17:14:23 +00:00
nacin
e5ca4fea40 Strip a number of special characters in sanitize_title_with_dashes on save. Includes quotes (curly, angle), dashes, marks, etc. props SergeyBiryukov. props ampt for the unit tests in [UT438]. see #10797.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18705 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-18 19:53:59 +00:00
duck_
e4ed63fc6f Fix typos in documentation (wp-includes/[a-h]). See #18560.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18633 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-09-03 16:02:41 +00:00
nacin
d5cf830175 Add 'q' tag to nestable tags list in force_balance_tags(). props solarissmoke, fixes #6870.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18585 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-08-23 15:37:38 +00:00
ryan
6c39a6f769 Better double encoding handling in _wp_special_chars(). Props miqrogroove.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18485 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-07-29 20:43:45 +00:00
ryan
55d7366c42 Recognize urls that start with a question mark as relative urls that do not require a scheme to be prepended. fixes #18260
git-svn-id: http://svn.automattic.com/wordpress/trunk@18469 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-07-26 19:44:18 +00:00
westi
009b264271 Make [18456] more obvious. Fixes #16432.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18465 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-07-25 13:20:07 +00:00
nacin
6185986c0e Add pre_ent2ncr filter. props GaryJ, fixes #16432.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18456 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-07-21 21:41:21 +00:00
ryan
593659b8d0 Hardening. Santizers for WPLANG and new_admin_email. Prevent stomping ID and filter. Validate locale filename. Props westi.
git-svn-id: http://svn.automattic.com/wordpress/trunk@18346 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-06-27 15:56:42 +00:00
ryan
bc667be71b Allow plus '+' character when sanitizing mime type. Props cyberhobo. fixes #17855
git-svn-id: http://svn.automattic.com/wordpress/trunk@18324 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-06-20 20:05:57 +00:00
westi
fda24a53ed Ensure we have a valid timezone identifier before trying to use it.
Validate the new timezone identifier during option update.
Fixes #17840.

git-svn-id: http://svn.automattic.com/wordpress/trunk@18323 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-06-20 14:58:50 +00:00
azaozz
ae81d75d39 Fix typo in remove_accents(), props scribu, fixes #16232
git-svn-id: http://svn.automattic.com/wordpress/trunk@18159 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-06-06 02:22:50 +00:00
ryan
4da684cf9a Update @since
git-svn-id: http://svn.automattic.com/wordpress/trunk@18032 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-25 15:47:17 +00:00
ryan
81a5f821fb Sanitize guid on save and display. Sanitize mime type on save. Don't allow changing mime type via edit form handlers. Protect hidden meta.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17994 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-22 23:19:42 +00:00
ryan
569c17df7f Properly anchor mime preg.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17990 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-22 23:17:09 +00:00
nacin
98bd4c0b2f s/coma/comma/. props ocean90.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17982 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-21 15:20:25 +00:00
ryan
b2c2e302be Revert part of [17920]. Support for empty tz must remain. Props johnjamesjacoby. fixes #17448
git-svn-id: http://svn.automattic.com/wordpress/trunk@17958 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-18 18:56:42 +00:00
westi
65e341d0cb Fix typos and inconsistencies in PHPdoc / function declarations. See #17414 props duck_
git-svn-id: http://svn.automattic.com/wordpress/trunk@17925 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-14 09:50:20 +00:00
ryan
58767691f4 Remove PHP5 back compat code from get_gmt_from_date. Props technosailor. fixes #16920
git-svn-id: http://svn.automattic.com/wordpress/trunk@17920 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-05-13 19:17:07 +00:00
ryan
74354459f1 Performance improvements for wptexturize(). Props solarissmoke, hakre. fixes #16684
git-svn-id: http://svn.automattic.com/wordpress/trunk@17636 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-04-13 17:11:35 +00:00
nacin
14ec951269 Make underscores valid in sanitize_html_class. fixes #17067.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17614 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-04-06 21:28:52 +00:00
ryan
975a6a8c8d Reduce backtracking in make_clickable() regex. Reduce pcre.recursion_limit to avoid segfaulting. Props hakre. For trunk.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17570 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-03-28 21:39:16 +00:00
ryan
4d46e8d95e Lose create_function() in links_add_target() and links_add_base_url(). esc_attr() the target to provide extra coverage for plugins. Props Justin Rainbow, nacin. For trunk
git-svn-id: http://svn.automattic.com/wordpress/trunk@17459 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-02-16 19:24:18 +00:00
ryan
85f1feed84 Bring out the shears.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17228 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2011-01-06 04:11:14 +00:00
ryan
81cd855720 Don't be case sensitive to attribute names. Handle padded entities when checking for bad protocols. Normalize entities before checking for bad protocols in esc_url(). Props Mauro Gentile, duck_, miqrogroove
git-svn-id: http://svn.automattic.com/wordpress/trunk@17171 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-12-29 20:45:37 +00:00
nacin
95726df854 Revert [16995] due to the way the data enters the db. props garyc40, see #15454.
git-svn-id: http://svn.automattic.com/wordpress/trunk@17142 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-12-25 18:10:59 +00:00
ryan
3a66c698ee Remove some unnecessary esc_textarea() calls. Props garyc40. see #15454
git-svn-id: http://svn.automattic.com/wordpress/trunk@17001 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-12-16 17:48:20 +00:00
markjaquith
49c11dc768 Use ENT_QUOTES in esc_textarea() in case someone uses it in a value='' situation by accident. see #15454
git-svn-id: http://svn.automattic.com/wordpress/trunk@16993 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-12-16 09:24:22 +00:00
westi
60aa1d3062 Ultimate make_clickable. Fixes #14993 props filosofo
git-svn-id: http://svn.automattic.com/wordpress/trunk@16948 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-12-15 13:43:30 +00:00