WordPress/wp-includes
Andrew Ozz 5168f9c7c6 Secure embeds in the editor (first run):
- When the user pastes an embeddable http URL, try to get the https embed.
- If an embed provider doesn't support ssl embeds, show a placeholder/error message.
- Revise the way we return error messages.
See #28195, #28507.
Built from https://develop.svn.wordpress.org/trunk@28919


git-svn-id: http://core.svn.wordpress.org/trunk@28718 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-06-30 05:49:16 +00:00
..
certificates WP_HTTP: Update the Root Certificate bundle used for SSL communication by WP_HTTP. 2014-02-27 02:33:14 +00:00
css Fix feature pointer positioning issues for both LTR and RTL. 2014-06-29 16:06:14 +00:00
fonts Update Dashicons. 2014-04-07 17:52:16 +00:00
ID3
images Edit Image modal: 2014-03-27 22:41:14 +00:00
js Secure embeds in the editor (first run): 2014-06-30 05:49:16 +00:00
pomo Introduce a binary-safe wrapper for strlen() and use it in seems_utf8(), utf8_uri_encode(), and wp_read_image_metadata(). 2014-06-23 14:48:14 +00:00
SimplePie
Text
theme-compat Eliminate use of extract() in wp-includes/theme-compat/comments-popup.php. 2014-05-13 04:40:16 +00:00
admin-bar.php Reference https://wordpress.org rather than http://wordpress.org in strings, links, comments, etc. 2014-03-03 02:34:27 +00:00
atomlib.php First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin. 2013-12-24 18:57:12 +00:00
author-template.php Convert documentation of default arguments in wp_list_authors() to the hash-notation style. 2014-06-29 22:34:14 +00:00
bookmark-template.php In wp_list_bookmarks(), $categorize should now be $r['categorize]. 2014-05-19 05:11:14 +00:00
bookmark.php Replace all uses of like_escape() with $wpdb->esc_like(). 2014-06-10 00:44:15 +00:00
cache.php Classes that have __set() also need __isset() and __unset(). 2014-05-19 06:52:14 +00:00
canonical.php Fix typo in a comment. 2014-06-28 03:30:16 +00:00
capabilities.php These functions import $wpdb but do not use it. 2014-05-22 17:37:14 +00:00
category-template.php Cleanup for switch statements: 2014-05-30 17:58:15 +00:00
category.php Deprecate get_all_category_ids(). Suggest get_terms() as a replacement. 2014-06-05 16:25:14 +00:00
class-feed.php Add access modifiers to methods/members in WP_Feed_Cache, WP_SimplePie_File, and WP_Feed_Cache_Transient. 2014-05-19 05:27:15 +00:00
class-http.php Avoid a PHP notice and warning on language selection screen. 2014-06-27 00:25:15 +00:00
class-IXR.php Allow query strings for servers in IXR_Client and WP_HTTP_IXR_Client. 2014-03-15 05:01:14 +00:00
class-json.php
class-oembed.php When wp_oembed_add_provider() or wp_oembed_remove_provider() is called before the plugins_loaded hook has, store the values statically on the WP_oEmbed object and add them just-in-time when the object is instantiated. 2014-06-26 02:30:15 +00:00
class-phpass.php First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin. 2013-12-24 18:57:12 +00:00
class-phpmailer.php Update PHPMailer to 5.2.7 from 5.2.4. 2014-03-03 20:25:14 +00:00
class-pop3.php
class-simplepie.php hackificator complains if you call include 'file.php' without the parens, needs to be include( 'file.php' ) 2014-05-18 20:52:15 +00:00
class-smtp.php Update PHPMailer to 5.2.7 from 5.2.4. 2014-03-03 20:25:14 +00:00
class-snoopy.php
class-wp-admin-bar.php In wp-includes/class-wp-admin-bar.php, break is unreachabled after return. 2014-05-06 18:29:15 +00:00
class-wp-ajax-response.php Classes that have __set() also need __isset() and __unset(). 2014-05-19 06:52:14 +00:00
class-wp-customize-control.php Add missing access modifiers to methods/members in WP_Customize_*. 2014-05-19 05:45:16 +00:00
class-wp-customize-manager.php Customizer: Introduce a "panel" API to organize multiple sections into a one section. 2014-06-26 20:17:15 +00:00
class-wp-customize-section.php Customizer: Introduce a "panel" API to organize multiple sections into a one section. 2014-06-26 20:17:15 +00:00
class-wp-customize-setting.php Allow for easier adding of custom class variables when extending WP_Customize_Section or WP_Customize_Setting. 2014-06-24 22:56:14 +00:00
class-wp-customize-widgets.php Customizer: Introduce a "panel" API to organize multiple sections into a one section. 2014-06-26 20:17:15 +00:00
class-wp-editor.php TinyMCE: update to 4.0.26. Includes fixes for the 'paste' plugin (paste from Word/Excel, paste in WebKit/Blink), show/hide/isHidden in inline mode, drag/drop in tables and in Safari, and others. Fixes #28342, #28016, #28250 and #28067 2014-05-24 01:44:15 +00:00
class-wp-embed.php Secure embeds in the editor (first run): 2014-06-30 05:49:16 +00:00
class-wp-error.php Improve inline documentation for the __construct() and add() methods in WP_Error class. 2014-06-04 06:06:14 +00:00
class-wp-http-ixr-client.php Add access modifiers to methods/members in WP_HTTP_IXR_Client. 2014-05-19 05:51:15 +00:00
class-wp-image-editor-gd.php Add ->get_quality() method to WP_Image_Editor class. 2014-06-28 03:50:15 +00:00
class-wp-image-editor-imagick.php Add ->get_quality() method to WP_Image_Editor class. 2014-06-28 03:50:15 +00:00
class-wp-image-editor.php Add ->get_quality() method to WP_Image_Editor class. 2014-06-28 03:50:15 +00:00
class-wp-theme.php Remove redundant 'Visit author homepage' title attributes for plugins and themes. 2014-06-05 04:52:16 +00:00
class-wp-walker.php Ensure that a has_children parameter is given to Walker::start_el(). 2014-06-24 17:06:14 +00:00
class-wp-xmlrpc-server.php XML-RPC: Make sure wp.newPost does not produce a fatal error when a post_date field is included in the data. 2014-06-26 17:43:14 +00:00
class-wp.php Classes that have __set() also need __isset() and __unset(). 2014-05-19 06:52:14 +00:00
class.wp-dependencies.php Add missing access modifiers to methods in WP_Dependencies and _WP_Dependency. 2014-05-19 06:14:14 +00:00
class.wp-scripts.php WP_Scripts->in_default_dir() should use the WPINC constant 2014-06-29 22:23:15 +00:00
class.wp-styles.php Add missing access modifiers to methods in WP_Scripts and WP_Styles. 2014-05-19 06:17:14 +00:00
comment-template.php Add a function, get_comments_number_text(), that returns instead of echoing. comments_number() wraps it. 2014-06-29 23:13:15 +00:00
comment.php Normalize 'user_id' and 'user_ID' values in wp_new_comment() before passing the comment data to 'preprocess_comment' filter. 2014-06-30 00:41:16 +00:00
compat.php
cron.php Remove SSL verification by default for requests to wp-cron.php. Props sivel, rhurling. Fixes #12609. 2014-06-19 22:53:19 +00:00
date.php WP_Date_Query was only missing one access modifier. 2014-05-19 17:30:17 +00:00
default-constants.php Force SSL admin when siteurl is explicitly configured with HTTPS. 2014-06-05 14:09:18 +00:00
default-filters.php Allow for custom authentication handlers for all requests. 2014-03-09 15:23:15 +00:00
default-widgets.php Cleanup wp_widget_rss_form() after [28734]. "$$input used sanitized variables which contained actual values, unlike $inputs[$input] which in that context contains data about which input fields are hidden." 2014-06-20 17:29:14 +00:00
deprecated.php LIKE escape sanity: 2014-06-10 00:30:15 +00:00
feed-atom-comments.php Inline documentation for hooks in wp-includes/feed-atom-comments.php. 2013-12-21 20:22:12 +00:00
feed-atom.php Inline documentation for hooks in wp-includes/feed-atom.php. 2013-09-20 22:50:10 +00:00
feed-rdf.php
feed-rss2-comments.php
feed-rss2.php
feed-rss.php
feed.php Where a filter no longer exists, it need not be notated. 2014-05-06 05:38:15 +00:00
formatting.php Use less greedy regex in wptexturize(). Adds unit tests. 2014-06-26 17:15:14 +00:00
functions.php General inline documentation improvements in wp-includes/functions.php. 2014-06-30 03:56:15 +00:00
functions.wp-scripts.php In wp_localize_script(), instantiate the $wp_scripts global instead of bailing when it is called before wp_enqueue_scripts. This allows wp_enqueue_media() to be called on the front end with no JS errors. 2014-06-26 01:38:15 +00:00
functions.wp-styles.php
general-template.php Use includes_url() in wlwmanifest_link(). 2014-06-29 22:27:15 +00:00
http.php Remove by-reference modifiers from arguments in wp_remote_retrieve_* functions. 2014-05-05 18:46:15 +00:00
kses.php In kses.php, ensure that $allowedposttags, $allowedtags, and $allowedentitynames are added to the global namespace. 2014-06-26 02:14:15 +00:00
l10n.php Allow a language to be chosen before installing WordPress. First pass. 2014-06-18 19:58:15 +00:00
link-template.php Don't generate adjacent links in wp_head() for attachments. 2014-06-18 00:05:16 +00:00
load.php Improve inline documentation for wp-includes/load.php. 2014-06-04 04:12:17 +00:00
locale.php Better description for WP_Locale::_strings_for_pot(). props dimadin. fixes #25937. 2013-11-13 14:01:09 +00:00
media-template.php Use the proper height property when calculating video size in wp_underscore_video_template(). 2014-06-23 20:35:18 +00:00
media.php Add documentation for the default playlist shortcode attributes in wp_playlist_shortcode(). 2014-06-29 21:29:17 +00:00
meta.php Replace all uses of like_escape() with $wpdb->esc_like(). 2014-06-10 00:44:15 +00:00
ms-blogs.php In multisite, on the updated_option action, if the option name is one of: 'blogname', 'siteurl', 'post_count' - refresh the blog details cache for the current blog id. 2014-06-28 04:07:16 +00:00
ms-default-constants.php Use get_current_site() instead of the $current_site global when possible. 2013-11-13 03:23:10 +00:00
ms-default-filters.php In multisite, on the updated_option action, if the option name is one of: 'blogname', 'siteurl', 'post_count' - refresh the blog details cache for the current blog id. 2014-06-28 04:07:16 +00:00
ms-deprecated.php Theme compat: Move <head profile> to <link>. 2014-03-25 17:22:15 +00:00
ms-files.php
ms-functions.php get_blog_details()->post_count should update on more actions than just publish_post. 2014-06-26 00:53:15 +00:00
ms-load.php Replace all uses of like_escape() with $wpdb->esc_like(). 2014-06-10 00:44:15 +00:00
ms-settings.php Add initial unit tests for multisite's bootstrap. 2014-06-29 22:51:16 +00:00
nav-menu-template.php Correct filter documentation in wp_nav_menu(). 2014-06-27 03:37:16 +00:00
nav-menu.php return false in has_nav_menu() if the $location does not exist in the $_wp_registered_nav_menus global. 2014-06-26 00:57:15 +00:00
option.php Conditionally set the the secure flag on the test cookie, post password cookie, settings cookies, and comment author cookies depending on whether the front end and/or admin area are served over https. Fixes #28427 2014-06-29 13:25:16 +00:00
pluggable-deprecated.php Reference https://wordpress.org rather than http://wordpress.org in strings, links, comments, etc. 2014-03-03 02:34:27 +00:00
pluggable.php Use the WPINC constant when loading class-phpass.php 2014-06-29 22:12:16 +00:00
plugin.php General phpDoc fixes in wp-includes/plugin.php. 2014-06-29 09:19:15 +00:00
post-formats.php Allow has_post_format() to be used to check for any format. 2013-11-24 13:45:10 +00:00
post-template.php Use the WPINC constant when loading class-phpass.php 2014-06-29 22:12:16 +00:00
post-thumbnail-template.php Revert [27166]. 2014-03-26 18:43:14 +00:00
post.php Notify developers when register_post_type() or register_taxonomy() fails because of post type or taxonomy key length. 2014-06-29 21:54:14 +00:00
query.php First-run documention of WP_Query argument defaults. 2014-06-28 23:03:17 +00:00
registration-functions.php
registration.php
revision.php Ensure $post_id is documented as optional where applicable. 2014-06-03 04:44:16 +00:00
rewrite.php WP_Query was only missing one access modifier. 2014-05-19 17:41:13 +00:00
rss-functions.php
rss.php
script-loader.php Revert [28911] for performance concerns. 2014-06-29 23:43:14 +00:00
shortcodes.php Update the inline docs for add_shortcode() to eliminate suggestion to use extract(). 2014-05-15 03:28:15 +00:00
taxonomy.php Notify developers when register_post_type() or register_taxonomy() fails because of post type or taxonomy key length. 2014-06-29 21:54:14 +00:00
template-loader.php
template.php Replaces all uses of TEMPLATEPATH and STYLESHEETPATH in core with get_template_directory() and get_stylesheet_directory(). 2014-05-23 20:12:15 +00:00
theme.php Replaces all uses of TEMPLATEPATH and STYLESHEETPATH in core with get_template_directory() and get_stylesheet_directory(). 2014-05-23 20:12:15 +00:00
update.php Use direct typecasting instead of intval() for better performance. 2014-06-24 16:06:14 +00:00
user.php Use the WPINC constant when loading class-phpass.php 2014-06-29 22:12:16 +00:00
vars.php Update the wp-inclues/vars.php file header to include Nginx as a recognized web server. 2014-01-10 18:15:13 +00:00
version.php Normalize 'user_id' and 'user_ID' values in wp_new_comment() before passing the comment data to 'preprocess_comment' filter. 2014-06-30 00:41:16 +00:00
widgets.php Add public access modifier to methods/members of WP_Widget and WP_Widget_Factory. 2014-05-19 15:42:13 +00:00
wlwmanifest.xml The Pinking Shears stir from their slumber, awakened by what may seem, to those 2013-12-11 19:49:11 +00:00
wp-db.php In $wpdb->update(), prevent explosions when $where is empty. 2014-06-24 00:24:14 +00:00
wp-diff.php Add access modifiers to WP_Text_Diff_Renderer_Table that are compatible with its parent class. Some of the inline docs suggest access that, if implemented, would produce fatal errors. 2014-05-19 15:23:14 +00:00