WordPress/wp-includes/js
whyisjake 1fcbdb46e6 Backporting several bug fixes.
- Query: Remove the static query property.
- HTTP API: Protect against hex interpretation.
- Filesystem API: Prevent directory travelersals when creating new folders.
- Administration: Ensure that admin referer nonce is valid.
- REST API: Send a Vary: Origin header on GET requests.
- Customizer: Properly sanitize background images.

Backports [46474], [46475], [46476], [46477], [46478], [46483], [46485] to the 4.2 branch.

Built from https://develop.svn.wordpress.org/branches/4.2@46500


git-svn-id: http://core.svn.wordpress.org/branches/4.2@46297 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 19:15:22 +00:00
..
crop
imgareaselect
jcrop
jquery WordPress 4.2 2015-04-23 16:26:10 +00:00
mediaelement External Libraries: Remove unnecessary / obsoleted MediaElement.js files. 2018-01-16 08:12:32 +00:00
plupload Media: Simplify upload error message construction. 2017-05-16 18:03:56 +00:00
swfupload
thickbox Update more instances of default admin blues and grays. 2015-04-05 21:20:27 +00:00
tinymce TinyMCE wpView: preserve HTML wrapped in shortcodes. 2015-07-17 22:02:26 +00:00
admin-bar.js Toolbar: Search item consistency for focus state and IE8. 2015-04-08 16:08:28 +00:00
admin-bar.min.js Toolbar: Search item consistency for focus state and IE8. 2015-04-08 16:08:28 +00:00
autosave.js
autosave.min.js
backbone.min.js Don't override minified libraries included in core 2015-04-07 04:38:25 +00:00
colorpicker.js
colorpicker.min.js
comment-reply.js
comment-reply.min.js
customize-base.js Customizer: [31885] actually hasn't fixed the SecurityErrors. This one does. 2015-03-25 23:36:27 +00:00
customize-base.min.js Customizer: [31885] actually hasn't fixed the SecurityErrors. This one does. 2015-03-25 23:36:27 +00:00
customize-loader.js Customizer: Avoid SecurityErrors when the Customizer is embedded in an origin other than wp-admin. 2015-03-25 17:26:26 +00:00
customize-loader.min.js Customizer: Avoid SecurityErrors when the Customizer is embedded in an origin other than wp-admin. 2015-03-25 17:26:26 +00:00
customize-models.js
customize-models.min.js
customize-preview-widgets.js
customize-preview-widgets.min.js
customize-preview.js Customizer: Add loading indicators for the Customizer preview. 2015-03-10 15:56:26 +00:00
customize-preview.min.js Customizer: Add loading indicators for the Customizer preview. 2015-03-10 15:56:26 +00:00
customize-views.js
customize-views.min.js
heartbeat.js
heartbeat.min.js
hoverIntent.js Update hoverIntent to 1.8.1. 2015-03-11 17:15:27 +00:00
hoverIntent.min.js Update hoverIntent to 1.8.1. 2015-03-11 17:15:27 +00:00
json2.js
json2.min.js
masonry.min.js Don't override minified libraries included in core 2015-04-07 04:38:25 +00:00
mce-view.js TinyMCE: Improve the previews for shortcodes. 2017-09-19 12:44:31 +00:00
mce-view.min.js TinyMCE: Improve the previews for shortcodes. 2017-09-19 12:44:31 +00:00
media-audiovideo.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-audiovideo.min.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-editor.js Avoid a PHP notice when adding an embed via Insert from URL. 2015-04-21 14:36:25 +00:00
media-editor.min.js Avoid a PHP notice when adding an embed via Insert from URL. 2015-04-21 14:36:25 +00:00
media-grid.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-grid.min.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-models.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-models.min.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-views.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-views.min.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
quicktags.js
quicktags.min.js
shortcode.js
shortcode.min.js
swfobject.js
tw-sack.js
tw-sack.min.js
twemoji.js Emoji: 2015-04-01 02:39:28 +00:00
twemoji.min.js Emoji: 2015-04-01 02:39:28 +00:00
underscore.min.js Don't override minified libraries included in core 2015-04-07 04:38:25 +00:00
utils.js
utils.min.js
wp-a11y.js Add wp.a11y.speak() for audible alerts/updates in screen readers. Props afercia, GrahamArmfield (for the idea), iseulde. Fixes #31368. 2015-03-01 19:11:27 +00:00
wp-a11y.min.js Add wp.a11y.speak() for audible alerts/updates in screen readers. Props afercia, GrahamArmfield (for the idea), iseulde. Fixes #31368. 2015-03-01 19:11:27 +00:00
wp-ajax-response.js Replace flagrant instances of .html('') with .empty(). 2015-03-09 19:44:26 +00:00
wp-ajax-response.min.js Replace flagrant instances of .html('') with .empty(). 2015-03-09 19:44:26 +00:00
wp-auth-check.js Disable body scrolling when session expired log in modal is open. 2015-03-31 22:55:26 +00:00
wp-auth-check.min.js Disable body scrolling when session expired log in modal is open. 2015-03-31 22:55:26 +00:00
wp-backbone.js
wp-backbone.min.js
wp-emoji-loader.js Emoji: 2015-05-06 01:35:26 +00:00
wp-emoji-loader.min.js Emoji: 2015-05-06 01:35:26 +00:00
wp-emoji-release.min.js Emoji: do not try to replace emoji chars inside SVGs. 2015-07-17 20:17:27 +00:00
wp-emoji.js Emoji: do not try to replace emoji chars inside SVGs. 2015-07-17 20:17:27 +00:00
wp-emoji.min.js Emoji: do not try to replace emoji chars inside SVGs. 2015-07-17 20:17:27 +00:00
wp-list-revisions.js
wp-list-revisions.min.js
wp-lists.js
wp-lists.min.js
wp-pointer.js
wp-pointer.min.js
wp-util.js
wp-util.min.js
wpdialog.js
wpdialog.min.js
wplink.js Editor: Prevent adding javascript: and data: URLs through the inline link dialog. 2017-09-19 10:19:28 +00:00
wplink.min.js Editor: Prevent adding javascript: and data: URLs through the inline link dialog. 2017-09-19 10:19:28 +00:00
zxcvbn-async.js
zxcvbn-async.min.js
zxcvbn.min.js