WordPress/wp-includes/rest-api/endpoints
whyisjake da95cca74c Ensure that a user can publish_posts before making a post sticky.
Props: danielbachhuber, whyisjake, peterwilson, xknown.

Prevent  stored XSS through wp_targeted_link_rel().

Props: vortfu, whyisjake, peterwilsoncc, xknown,  SergeyBiryukov, flaviozavan.

Update `wp_kses_bad_protocol()` to recognize `:` on uri attributes,

`wp_kses_bad_protocol()` makes sure to validate that uri attributes don’t contain invalid/or not allowed protocols. While this works fine in most cases, there’s a risk that by using the colon html5 named entity, one is able to bypass this function.

Brings r46895 to the 5.3 branch.

Props: xknown, nickdaugherty, peterwilsoncc.

Prevent stored XSS in the block editor.

Brings r46896 to the 5.3 branch.

Prevent escaped unicode characters become unescaped in unsafe HTML during JSON decoding.

Props: aduth, epiqueras.

Built from https://develop.svn.wordpress.org/branches/5.2@46901


git-svn-id: http://core.svn.wordpress.org/branches/5.2@46701 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-12-12 18:18:54 +00:00
..
class-wp-rest-attachments-controller.php REST API: Remove unused attachments controller method. 2019-03-19 03:28:51 +00:00
class-wp-rest-autosaves-controller.php REST API: Avoid using 'parent' as path argument name for autosaves. 2018-12-17 03:26:22 +00:00
class-wp-rest-block-renderer-controller.php REST API: Preserve unknown, respect null in server-side block rendering. 2018-12-17 18:00:52 +00:00
class-wp-rest-blocks-controller.php REST API: Always include title.raw/content.raw for Blocks in context=view. 2018-12-17 17:22:52 +00:00
class-wp-rest-comments-controller.php REST API: Always urlencode_deep() query args in get_items methods. 2019-04-25 00:08:52 +00:00
class-wp-rest-controller.php General: Fix problematic string to array parsing. 2019-01-10 21:06:49 +00:00
class-wp-rest-post-statuses-controller.php Coding Standards: Upgrade WPCS to 1.0.0 2018-08-17 01:51:36 +00:00
class-wp-rest-post-types-controller.php Coding Standards: Upgrade WPCS to 1.0.0 2018-08-17 01:51:36 +00:00
class-wp-rest-posts-controller.php Ensure that a user can publish_posts before making a post sticky. 2019-12-12 18:18:54 +00:00
class-wp-rest-revisions-controller.php REST API: Always urlencode_deep() query args in get_items methods. 2019-04-25 00:08:52 +00:00
class-wp-rest-search-controller.php REST API: Always urlencode_deep() query args in get_items methods. 2019-04-25 00:08:52 +00:00
class-wp-rest-settings-controller.php Coding Standards: Upgrade WPCS to 1.0.0 2018-08-17 01:51:36 +00:00
class-wp-rest-taxonomies-controller.php Coding Standards: Upgrade WPCS to 1.0.0 2018-08-17 01:51:36 +00:00
class-wp-rest-terms-controller.php REST API: Always urlencode_deep() query args in get_items methods. 2019-04-25 00:08:52 +00:00
class-wp-rest-themes-controller.php Themes: Introduce responsive embeds support. 2018-12-14 01:50:37 +00:00
class-wp-rest-users-controller.php REST API: Always urlencode_deep() query args in get_items methods. 2019-04-25 00:08:52 +00:00