WordPress/wp-includes
John Blackbourn 6a33072f68 General: Ignore invalid types for the '_wp_http_referer' URL query variable.
It's expected that this query variable contains a string when it's set, but it's possible for its type to be something else such as an array. Ignoring non-string values prevents cascading errors when its value is passed through functions that expect a string.

Props xknown, costdev, jrf, azaozz

Fixes #57670

Built from https://develop.svn.wordpress.org/trunk@56115


git-svn-id: http://core.svn.wordpress.org/trunk@55627 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2023-06-29 23:27:23 +00:00
..
assets Build/Test Tools: Update terser-webpack-plugin. 2023-06-28 20:08:46 +00:00
block-patterns
block-supports Editor: update duotone support. 2023-06-29 06:21:28 +00:00
blocks Editor: Update npm packages to fix gutenberg_ prefix 2023-06-28 22:38:52 +00:00
certificates
css Editor: update npm packages to latest patch versions. 2023-06-28 07:04:13 +00:00
customize Docs: Fix a few more typos in DocBlocks and inline comments. 2023-05-19 13:27:20 +00:00
fonts
html-api
ID3
images
IXR
js Build/Test Tools: Update terser-webpack-plugin. 2023-06-28 20:08:46 +00:00
php-compat
PHPMailer
pomo Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
random_compat External Libraries: Update random_compat to version 2.0.21. 2022-02-16 21:19:04 +00:00
Requests
rest-api REST API: updates test annotations for global styles revisions 2023-06-29 06:50:20 +00:00
SimplePie
sitemaps
sodium_compat
style-engine Editor: add box shadow support to blocks. 2023-06-26 23:44:29 +00:00
Text
theme-compat General: Replace some instances of "blog" with "site" in documentation, translator comments, and user-facing text strings. 2023-06-19 18:27:27 +00:00
widgets Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
admin-bar.php I18N: Provide gettext context to disambiguate various translation strings. 2023-06-05 21:05:22 +00:00
atomlib.php
author-template.php
block-editor.php Editor: add iframe around post editor. 2023-06-27 00:23:23 +00:00
block-i18n.json
block-patterns.php Editor: allow filtering block patterns by source. 2023-06-27 11:13:27 +00:00
block-template-utils.php REST API: return post modified datetime for Templates. 2023-06-23 06:29:23 +00:00
block-template.php Themes: Block template is located twice in get_query_template(). 2023-06-27 10:15:28 +00:00
blocks.php Editor: Allow Query Block to show posts from multiple selected authors. 2023-06-29 13:30:33 +00:00
bookmark-template.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
bookmark.php
cache-compat.php
cache.php
canonical.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
capabilities.php
category-template.php Docs: Use consistent format for the @return tags in _wp_object_name_sort_cb() and _wp_object_count_sort_cb(). 2023-02-04 15:18:16 +00:00
category.php Coding Standards: Use strict comparison in wp-includes/category.php. 2023-06-05 11:16:18 +00:00
class-feed.php
class-http.php
class-IXR.php
class-json.php
class-oembed.php
class-phpass.php
class-phpmailer.php
class-pop3.php
class-requests.php
class-simplepie.php
class-smtp.php
class-snoopy.php
class-walker-category-dropdown.php
class-walker-category.php Coding Standards: Use strict comparison in wp-includes/class-walker-category.php. 2023-06-06 00:30:20 +00:00
class-walker-comment.php
class-walker-nav-menu.php Menus: Allow themes and plugins to pass HTML attributes to various Nav Walker outputs. 2023-06-27 15:26:27 +00:00
class-walker-page-dropdown.php Coding Standards: Use strict comparison in wp-includes/class-walker-page-dropdown.php. 2023-06-11 09:27:18 +00:00
class-walker-page.php Coding Standards: Use strict comparison in wp-includes/class-walker-page.php. 2023-06-12 06:12:24 +00:00
class-wp-admin-bar.php
class-wp-ajax-response.php
class-wp-application-passwords.php
class-wp-block-editor-context.php
class-wp-block-list.php
class-wp-block-parser-block.php Editor: Update block-serialization-default-parser package for WP 6.3 Beta 1. 2023-06-27 00:45:38 +00:00
class-wp-block-parser-frame.php Editor: Update block-serialization-default-parser package for WP 6.3 Beta 1. 2023-06-27 00:45:38 +00:00
class-wp-block-parser.php Editor: Update block-serialization-default-parser package for WP 6.3 Beta 1. 2023-06-27 00:45:38 +00:00
class-wp-block-pattern-categories-registry.php
class-wp-block-patterns-registry.php
class-wp-block-styles-registry.php
class-wp-block-supports.php
class-wp-block-template.php REST API: return post modified datetime for Templates. 2023-06-23 06:29:23 +00:00
class-wp-block-type-registry.php
class-wp-block-type.php
class-wp-block.php
class-wp-classic-to-block-menu-converter.php Editor: add navigation fallback. 2023-06-27 05:54:19 +00:00
class-wp-comment-query.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
class-wp-comment.php
class-wp-customize-control.php
class-wp-customize-manager.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
class-wp-customize-nav-menus.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
class-wp-customize-panel.php
class-wp-customize-section.php
class-wp-customize-setting.php
class-wp-customize-widgets.php
class-wp-date-query.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
class-wp-dependencies.php
class-wp-dependency.php
class-wp-duotone.php Editor: update duotone support. 2023-06-29 06:21:28 +00:00
class-wp-editor.php Code Modernization: Use str_contains() in a few more places. 2023-06-26 10:17:25 +00:00
class-wp-embed.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
class-wp-error.php
class-wp-fatal-error-handler.php
class-wp-feed-cache-transient.php
class-wp-feed-cache.php
class-wp-hook.php
class-wp-http-cookie.php Code Modernization: Use str_starts_with() and str_ends_with() in a few more places. 2023-06-24 17:17:23 +00:00
class-wp-http-curl.php Docs: Revise comments using “we” in various docblocks. 2023-04-11 22:06:22 +00:00
class-wp-http-encoding.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
class-wp-http-ixr-client.php
class-wp-http-proxy.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
class-wp-http-requests-hooks.php
class-wp-http-requests-response.php
class-wp-http-response.php
class-wp-http-streams.php Coding Standards: Use strict comparison in wp-includes/class-wp-http-streams.php. 2023-06-07 06:40:20 +00:00
class-wp-http.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
class-wp-image-editor-gd.php
class-wp-image-editor-imagick.php
class-wp-image-editor.php
class-wp-list-util.php Coding Standards: Use strict comparison in wp-includes/class-wp-list-util.php. 2023-06-13 04:46:23 +00:00
class-wp-locale-switcher.php
class-wp-locale.php
class-wp-matchesmapregex.php
class-wp-meta-query.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
class-wp-metadata-lazyloader.php
class-wp-navigation-fallback.php Editor: add navigation fallback. 2023-06-27 05:54:19 +00:00
class-wp-network-query.php
class-wp-network.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
class-wp-object-cache.php
class-wp-oembed-controller.php
class-wp-oembed.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
class-wp-paused-extensions-storage.php
class-wp-post-type.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
class-wp-post.php Code Modernization: Add AllowDynamicProperties attribute to all (parent) classes. 2022-09-12 15:47:14 +00:00
class-wp-query.php Code Modernization: Use str_starts_with() and str_ends_with() in a few more places. 2023-06-24 16:50:24 +00:00
class-wp-recovery-mode-cookie-service.php
class-wp-recovery-mode-email-service.php
class-wp-recovery-mode-key-service.php
class-wp-recovery-mode-link-service.php
class-wp-recovery-mode.php
class-wp-rewrite.php Code Modernization: Use str_contains() in a few more places. 2023-06-26 10:17:25 +00:00
class-wp-role.php
class-wp-roles.php
class-wp-scripts.php Script Loader: Fix unintended adding of async to scripts that are printed directly with wp_print_scripts() without enqueueing them beforehand. 2023-06-28 14:16:27 +00:00
class-wp-session-tokens.php
class-wp-simplepie-file.php
class-wp-simplepie-sanitize-kses.php
class-wp-site-query.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
class-wp-site.php
class-wp-styles.php
class-wp-tax-query.php
class-wp-taxonomy.php
class-wp-term-query.php
class-wp-term.php
class-wp-text-diff-renderer-inline.php
class-wp-text-diff-renderer-table.php
class-wp-textdomain-registry.php
class-wp-theme-json-data.php
class-wp-theme-json-resolver.php Themes: Use get_theme_file_path() in wp_theme_has_theme_json(). 2023-06-27 17:12:26 +00:00
class-wp-theme-json-schema.php
class-wp-theme-json.php Editor: update duotone support. 2023-06-29 06:21:28 +00:00
class-wp-theme.php Themes: Change the order of path check in is_block_theme method. 2023-06-19 16:04:22 +00:00
class-wp-user-meta-session-tokens.php
class-wp-user-query.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
class-wp-user-request.php
class-wp-user.php
class-wp-walker.php
class-wp-widget-factory.php
class-wp-widget.php
class-wp-xmlrpc-server.php Code Modernization: Use str_contains() in a few more places. 2023-06-26 10:17:25 +00:00
class-wp.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
class-wpdb.php Database: Move the if statement outside of the loop. 2023-06-27 14:35:29 +00:00
class.wp-dependencies.php
class.wp-scripts.php
class.wp-styles.php
comment-template.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
comment.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
compat.php Coding Standards: Use Yoda condition in str_ends_with(). 2023-06-24 13:54:23 +00:00
cron.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
date.php
default-constants.php General: Introduce WP_DEVELOPMENT_MODE constant to signify context-specific development mode. 2023-06-26 19:57:25 +00:00
default-filters.php Editor: update duotone support. 2023-06-29 06:21:28 +00:00
default-widgets.php
deprecated.php Media: Fix inconsistent docs for existing wp_img_tag_add_loading_attr filter and remove duplicate. 2023-06-29 17:34:23 +00:00
embed-template.php
embed.php
error-protection.php
feed-atom-comments.php
feed-atom.php
feed-rdf.php
feed-rss2-comments.php
feed-rss2.php
feed-rss.php
feed.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
formatting.php Code Modernization: Use str_contains() in a few more places. 2023-06-26 10:17:25 +00:00
functions.php General: Ignore invalid types for the '_wp_http_referer' URL query variable. 2023-06-29 23:27:23 +00:00
functions.wp-scripts.php Script Loader: Add support for HTML 5 "async" and "defer" attributes. 2023-06-26 13:42:23 +00:00
functions.wp-styles.php
general-template.php Code Modernization: Use str_contains() in a few more places. 2023-06-26 10:17:25 +00:00
global-styles-and-settings.php Editor: update duotone support. 2023-06-29 06:21:28 +00:00
http.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
https-detection.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
https-migration.php
kses.php Editor: add box shadow support to blocks. 2023-06-26 23:44:29 +00:00
l10n.php I18N: Ensure determine_locale() does not potentially return an empty string. 2023-06-23 16:03:25 +00:00
link-template.php Editor: fix post edit navigation link. 2023-06-27 06:02:22 +00:00
load.php Editor: update Wordpress npm packages. 2023-06-27 14:24:19 +00:00
locale.php
media-template.php Media: Redirect deprecated wp-admin/media.php file. 2023-06-19 23:20:21 +00:00
media.php Media: Fix inconsistent docs for existing wp_img_tag_add_loading_attr filter and remove duplicate. 2023-06-29 17:34:23 +00:00
meta.php
ms-blogs.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
ms-default-constants.php
ms-default-filters.php
ms-deprecated.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
ms-files.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
ms-functions.php Code Modernization: Use str_starts_with() and str_ends_with() in a few more places. 2023-06-24 16:50:24 +00:00
ms-load.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
ms-network.php
ms-settings.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
ms-site.php
nav-menu-template.php Coding Standards: Replace strval() with (string) type casting in wp_nav_menu(). 2023-02-16 00:04:21 +00:00
nav-menu.php Docs: Add missing param description to update_menu_item_cache in wp_get_nav_menu_items(). 2023-06-21 08:18:19 +00:00
navigation-fallback.php Editor: add navigation fallback. 2023-06-27 05:54:19 +00:00
option.php Options, Meta APIs: Prime network options in a single cache call using wp_cache_get_multiple. 2023-06-27 10:41:30 +00:00
pluggable-deprecated.php
pluggable.php Media: Automatically add fetchpriority="high" to hero image to improve load time performance. 2023-06-26 16:17:23 +00:00
plugin.php Docs: Mark apply_filters() third parameter $args as optional. 2023-06-08 07:54:22 +00:00
post-formats.php
post-template.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
post-thumbnail-template.php
post.php Editor: fix post edit navigation link. 2023-06-27 06:02:22 +00:00
query.php
registration-functions.php
registration.php
rest-api.php REST API: add revisions endpoint for global styles. 2023-06-28 03:35:25 +00:00
revision.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
rewrite.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
robots-template.php
rss-functions.php
rss.php
script-loader.php Editor: update duotone support. 2023-06-29 06:21:28 +00:00
session.php
shortcodes.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
sitemaps.php
spl-autoload-compat.php
style-engine.php
taxonomy.php Taxonomy: Prevent deprecation notices clearing terms. 2023-06-14 23:51:22 +00:00
template-canvas.php
template-loader.php
template.php Code Modernization: Replace usage of strpos() with str_contains(). 2023-06-22 14:36:26 +00:00
theme-i18n.json
theme-templates.php
theme.json Editor: stabilise layout and refactor definitions. 2023-06-27 07:25:22 +00:00
theme.php Administration: Replace contracted verb forms for better consistency. 2023-06-22 05:25:29 +00:00
update.php Upgrade/Install: Pass the full database version string to WordPress.org for parsing. 2023-06-27 05:11:27 +00:00
user.php Users: Introduce the wp_update_user action. 2023-06-27 16:27:29 +00:00
vars.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
version.php General: Ignore invalid types for the '_wp_http_referer' URL query variable. 2023-06-29 23:27:23 +00:00
widgets.php Code Modernization: Replace usage of substr() with str_starts_with() and str_ends_with(). 2023-06-22 14:57:24 +00:00
wp-db.php
wp-diff.php