WordPress/wp-includes
Aaron Jorbin 946217dcca General: wp_safe_redirect() and wp_redirect() shouldn't allow non-3xx status codes
Redirects should use redirect status codes and if you attempt to call wp_safe_redirect or wp_redirect with a non redirect status it can lead to undesired behavior and head scratching.

Fixes #44317.
Props spenserhale, johnbillion, mjnewman for initial patch.


Built from https://develop.svn.wordpress.org/trunk@46641


git-svn-id: http://core.svn.wordpress.org/trunk@46441 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-11-03 22:10:02 +00:00
..
blocks Docs: Remove some funky nested filters. 2019-10-28 19:04:05 +00:00
certificates HTTP: Update the Root Certificate bundle. 2019-09-12 12:04:59 +00:00
css Block Editor: Bug fixes targetted for WordPress 5.3 RC3. 2019-10-28 14:13:09 +00:00
customize Customize: Formally deprecate unused Customizer classes. 2019-11-03 16:48:00 +00:00
fonts
ID3 External Library: Update getid3 to 1.9.18 2019-09-18 14:54:57 +00:00
images Build/Test tools: Update grunt-contrib-imagemin and run it 2019-10-05 14:20:59 +00:00
IXR Date/Time: Replace all instances of date() with gmdate(). 2019-05-26 00:12:54 +00:00
js External Libraries: Revert [46634-46635]. 2019-11-03 17:09:02 +00:00
pomo Code Modernization: Call PHP 5 constructors in methods extending POMO_Reader. 2019-11-02 20:49:01 +00:00
random_compat
Requests External Libraries: Fix PHP 7.4 compatibility issue in the Requests library. 2019-10-06 17:14:02 +00:00
rest-api Docs: Update URLs in some @link tags and switch them to HTTPS. 2019-11-01 14:57:02 +00:00
SimplePie External Libraries: Fix PHP 7.4 compatibility issues in the SimplePie library. 2019-09-23 18:17:58 +00:00
sodium_compat Upgrade/Install: Update sodium_compat to v1.10.0. 2019-05-17 10:58:51 +00:00
Text
theme-compat Docs: Correct some more invalid inline docs. 2019-10-31 21:20:02 +00:00
widgets Docs: Correct invalid hook docblock placement. 2019-10-27 19:35:01 +00:00
admin-bar.php Script Loader: Introduce HTML5 support for scripts and styles. 2019-09-18 14:50:56 +00:00
atomlib.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
author-template.php Build/Test Tools: Introduce automated PHP compatibility checking. 2019-09-25 13:47:58 +00:00
blocks.php Docs: Docblock corrections and improvements, mostly related to various pre_* filters. 2019-09-21 17:41:57 +00:00
bookmark-template.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
bookmark.php Docs: Improve documentation for get_bookmarks(). 2019-09-16 19:55:56 +00:00
cache.php
canonical.php Docs: Add missing description for $wp_query and $wp_the_query globals. 2019-08-04 01:59:56 +00:00
capabilities.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
category-template.php Docs: Add a @since note about new parameters with the spread operator added to function signatures. 2019-10-09 04:28:02 +00:00
category.php I18N: Improve translator comments. 2019-09-01 17:13:59 +00:00
class-feed.php Docs: Add missing @deprecated tags in the file docblock of some deprecated files. 2019-10-08 17:19:04 +00:00
class-http.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
class-IXR.php
class-json.php Docs: Correct @see references for PHP 4 constructors in wp-includes/class-json.php. 2019-11-02 20:13:02 +00:00
class-oembed.php Coding Standards: Move wp-includes/class-oembed.php to wp-includes/class-wp-oembed.php. 2019-07-19 04:32:57 +00:00
class-phpass.php Docs: Update URLs in some @link tags and switch them to HTTPS. 2019-11-01 14:57:02 +00:00
class-phpmailer.php General: Patch PHMailer for PHP 7.4 compatibility. 2019-10-03 15:45:59 +00:00
class-pop3.php PHP 7.4 compatibility fix / accessing arrays/string using curly brace syntax 2019-08-03 20:21:55 +00:00
class-requests.php External Libraries: Fix PHP 7.4 compatibility issues in the Requests library. 2019-09-23 18:11:59 +00:00
class-simplepie.php
class-smtp.php Mail: Update PHPMailer to 5.2.27. 2019-09-12 14:37:57 +00:00
class-snoopy.php
class-walker-category-dropdown.php
class-walker-category.php Menus: In Walker_Nav_Menu, Walker_Category, and Walker_Page, properly output link attributes having a legitimate "empty" value, for example an HTML data attribute with a value of zero (0). 2019-10-06 15:06:03 +00:00
class-walker-comment.php Docs: Add missing description for $comment global. 2019-10-04 22:19:57 +00:00
class-walker-nav-menu.php Menus: In Walker_Nav_Menu, Walker_Category, and Walker_Page, properly output link attributes having a legitimate "empty" value, for example an HTML data attribute with a value of zero (0). 2019-10-06 15:06:03 +00:00
class-walker-page-dropdown.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
class-walker-page.php Menus: In Walker_Nav_Menu, Walker_Category, and Walker_Page, properly output link attributes having a legitimate "empty" value, for example an HTML data attribute with a value of zero (0). 2019-10-06 15:06:03 +00:00
class-wp-admin-bar.php Code Modernisation: Remove redundant calls to func_get_arg() in wp-includes/class-wp-admin-bar.php. 2019-09-15 11:46:54 +00:00
class-wp-ajax-response.php Coding Standards: Rename $r variable used with wp_parse_args() to $parsed_args for clarity. 2019-07-25 00:48:58 +00:00
class-wp-block-parser.php
class-wp-block-styles-registry.php Editor: Fix typo in an error message in WP_Block_Styles_Registry::register(). 2019-10-27 14:09:02 +00:00
class-wp-block-type-registry.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
class-wp-block-type.php
class-wp-comment-query.php Code Modernisation: Replace call_user_func_array() in various __call() methods with dynamic function calls. 2019-09-15 11:53:56 +00:00
class-wp-comment.php
class-wp-customize-control.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
class-wp-customize-manager.php Customize: Formally deprecate unused Customizer classes. 2019-11-03 16:48:00 +00:00
class-wp-customize-nav-menus.php Menus: Replace http with https in placeholders. 2019-09-26 20:32:55 +00:00
class-wp-customize-panel.php Code Modernisation: Replace call_user_func_array() in wp-includes/class-wp-customize-*.php with direct function calls in combination with the spread operator. 2019-09-15 11:27:55 +00:00
class-wp-customize-section.php Customize: Formally deprecate unused Customizer classes. 2019-11-03 16:48:00 +00:00
class-wp-customize-setting.php Code Modernisation: Replace call_user_func_array() in wp-includes/class-wp-customize-*.php with direct function calls in combination with the spread operator. 2019-09-15 11:27:55 +00:00
class-wp-customize-widgets.php Code Modernisation: Replace call_user_func_array() in wp-includes/class-wp-customize-*.php with direct function calls in combination with the spread operator. 2019-09-15 11:27:55 +00:00
class-wp-date-query.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
class-wp-dependency.php Docs: Add a @since note about new parameters with the spread operator added to function signatures. 2019-10-09 04:28:02 +00:00
class-wp-editor.php Docs: Convert 'Block Editor' to lowercase. 2019-10-04 20:12:58 +00:00
class-wp-embed.php Coding Standards: Fix the Squiz.PHP.DisallowMultipleAssignments violations in wp-includes. 2019-07-02 23:42:58 +00:00
class-wp-error.php
class-wp-fatal-error-handler.php Site Health: Add a link to "Debugging in WordPress" support article to fatal PHP error handler's default message. 2019-09-16 17:23:55 +00:00
class-wp-feed-cache-transient.php
class-wp-feed-cache.php
class-wp-hook.php Code Modernisation: Replace call_user_func_array() in combination with an empty array in wp-includes/class-wp-hook.php with call_user_func(). 2019-09-15 11:45:56 +00:00
class-wp-http-cookie.php Docs: Correct @type annotation for WP_HTTP_Cookie::$expires. 2019-08-05 07:56:56 +00:00
class-wp-http-curl.php Code Modernization: Remove a workaround for CURLOPT_PROTOCOLS in WP_Http_Curl::request(). 2019-09-20 22:23:58 +00:00
class-wp-http-encoding.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
class-wp-http-ixr-client.php
class-wp-http-proxy.php Docs: Docblock corrections and improvements, mostly related to various pre_* filters. 2019-09-21 17:41:57 +00:00
class-wp-http-requests-hooks.php Coding Standards: Mark the handful of hook names with uppercase characters or hyphens as ignored. 2019-07-05 01:45:56 +00:00
class-wp-http-requests-response.php Docs: Fix and improve inline documentation for the HTTP API. 2019-10-12 18:05:04 +00:00
class-wp-http-response.php Coding Standards: Fix/ignore the WordPress.NamingConventions.ValidFunctionName violations. 2019-07-01 08:01:57 +00:00
class-wp-http-streams.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
class-wp-image-editor-gd.php Docs: Miscellaneous docblock fixes and improvements. 2019-10-26 20:43:04 +00:00
class-wp-image-editor-imagick.php Docs: Miscellaneous docblock fixes and improvements. 2019-10-26 20:43:04 +00:00
class-wp-image-editor.php Media/Upload: rotate images on upload according to EXIF Orientation. 2019-09-20 18:21:57 +00:00
class-wp-list-util.php Coding Standards: Fix the Squiz.PHP.DisallowMultipleAssignments violations in wp-includes. 2019-07-02 23:42:58 +00:00
class-wp-locale-switcher.php Docs: Add missing description for $wp_locale global. 2019-08-04 01:46:55 +00:00
class-wp-locale.php Code Modernization: Remove all code using a version_compare() with a PHP version older than PHP 5.6. 2019-09-20 22:02:57 +00:00
class-wp-matchesmapregex.php
class-wp-meta-query.php Query: Expand the list of operators available to compare_key in WP_Meta_Query. 2019-09-19 15:03:56 +00:00
class-wp-metadata-lazyloader.php
class-wp-network-query.php Multisite: improve sites_pre_query and networks_pre_query filters, avoiding db queries. 2019-09-12 22:17:55 +00:00
class-wp-network.php Multisite: Improve performance by caching not found lookups for sites and networks. 2019-08-29 12:42:56 +00:00
class-wp-oembed-controller.php Coding Standards: Move wp-includes/class-oembed.php to wp-includes/class-wp-oembed.php. 2019-07-19 04:32:57 +00:00
class-wp-oembed.php Code Modernisation: Replace call_user_func_array() in various __call() methods with dynamic function calls. 2019-09-15 11:53:56 +00:00
class-wp-paused-extensions-storage.php
class-wp-post-type.php REST API: Ensure rest_controller instantiates the post type's declared REST controller class. 2019-10-08 13:43:02 +00:00
class-wp-post.php
class-wp-query.php Query: Remove the static query property. 2019-10-14 15:20:03 +00:00
class-wp-recovery-mode-cookie-service.php Bootstrap/Load: Set expiration of the recovery mode cookie to the same amount of time for which the token in it is valid: a week by default. 2019-06-17 19:17:54 +00:00
class-wp-recovery-mode-email-service.php Site Health: Include simple debug data in fatal error protection email. 2019-09-23 20:27:56 +00:00
class-wp-recovery-mode-key-service.php
class-wp-recovery-mode-link-service.php
class-wp-recovery-mode.php Bootstrap/Load: Return a 403 error code when the recovery mode cookie is invalid or expired, or the exit recovery mode nonce check failed. 2019-06-17 18:37:55 +00:00
class-wp-rewrite.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
class-wp-role.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
class-wp-roles.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
class-wp-session-tokens.php
class-wp-simplepie-file.php
class-wp-simplepie-sanitize-kses.php
class-wp-site-query.php Multisite: improve sites_pre_query and networks_pre_query filters, avoiding db queries. 2019-09-12 22:17:55 +00:00
class-wp-site.php Multisite: Improve performance by caching not found lookups for sites and networks. 2019-08-29 12:42:56 +00:00
class-wp-tax-query.php Coding Standards: Fix the Squiz.PHP.DisallowMultipleAssignments violations in wp-includes. 2019-07-02 23:42:58 +00:00
class-wp-taxonomy.php Docs: Add missing description for $wp global. 2019-08-04 01:28:55 +00:00
class-wp-term-query.php Taxonomy: Ensure consistency of hide_empty in term queries when taxonomy is excluded. 2019-08-23 16:05:56 +00:00
class-wp-term.php
class-wp-text-diff-renderer-inline.php
class-wp-text-diff-renderer-table.php Accessibility: Improve the differences between revisions. 2019-08-03 15:46:54 +00:00
class-wp-theme.php Bundled Themes: Make Twenty Twenty the new default theme. 2019-09-23 21:00:58 +00:00
class-wp-user-meta-session-tokens.php
class-wp-user-query.php Docs: Correct accepted values for search_columns parameter in WP_User_Query. 2019-09-17 15:43:56 +00:00
class-wp-user-request.php Privacy tools: 2019-06-10 23:54:53 +00:00
class-wp-user.php Docs: Add a @since note about new parameters with the spread operator added to function signatures. 2019-10-09 04:28:02 +00:00
class-wp-walker.php Docs: Tweak the @since note in Walker::walk() and ::paged_walk() for better readability and consistency with other notes. 2019-10-09 04:35:01 +00:00
class-wp-widget-factory.php Docs: Add missing @deprecated tags to PHP 4 constructors in WP_Widget and WP_Widget_Factory(). 2019-11-02 20:06:03 +00:00
class-wp-widget.php Docs: Add missing @deprecated tags to PHP 4 constructors in WP_Widget and WP_Widget_Factory(). 2019-11-02 20:06:03 +00:00
class-wp-xmlrpc-server.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
class-wp.php Query: Remove the static query property. 2019-10-14 15:20:03 +00:00
class.wp-dependencies.php Coding Standards: Fix the Squiz.PHP.DisallowMultipleAssignments violations in wp-includes. 2019-07-02 23:42:58 +00:00
class.wp-scripts.php Script Loader: Add function_exists() checks for is_admin() and current_theme_supports(), to accomodate for using WP_Dependencies as a standalone class. 2019-09-24 02:56:57 +00:00
class.wp-styles.php Script Loader: Add function_exists() checks for is_admin() and current_theme_supports(), to accomodate for using WP_Dependencies as a standalone class. 2019-09-24 02:56:57 +00:00
comment-template.php Docs: Correct some more invalid inline docs. 2019-10-31 21:20:02 +00:00
comment.php Docs: Correct invalid hook docblocks. 2019-10-27 19:11:02 +00:00
compat.php Code Modernization: Remove JSON related polyfills. 2019-09-20 20:16:58 +00:00
cron.php Docs: Docblock corrections and improvements, mostly related to various pre_* filters. 2019-09-21 17:41:57 +00:00
date.php Coding Standards: Move wp-includes/date.php to wp-includes/class-wp-date-query.php. 2019-07-25 23:31:56 +00:00
default-constants.php Bundled Themes: Make Twenty Twenty the new default theme. 2019-09-23 21:00:58 +00:00
default-filters.php Coding Standards: Correct the number of accepted arguments in add_action() calls in wp-includes/default-filters.php for functions that don't accept any arguments. 2019-10-08 03:20:02 +00:00
default-widgets.php
deprecated.php Build/Test Tools: Introduce automated PHP compatibility checking. 2019-09-25 13:47:58 +00:00
embed-template.php
embed.php Build/Test Tools: Add banner to RTL CSS and minified JS files. 2019-10-26 00:17:07 +00:00
error-protection.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
feed-atom-comments.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
feed-atom.php
feed-rdf.php
feed-rss2-comments.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
feed-rss2.php
feed-rss.php
feed.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
formatting.php Docs: Correct invalid hook docblocks. 2019-10-27 19:11:02 +00:00
functions.php General: Wrap the error message in _deprecated_constructor() in <code> tags instead of <pre>. 2019-11-03 10:56:03 +00:00
functions.wp-scripts.php Docs: Switch to typed array notation for the docs for asset dependency functions. 2019-10-26 21:02:02 +00:00
functions.wp-styles.php Docs: Switch to typed array notation for the docs for asset dependency functions. 2019-10-26 21:02:02 +00:00
general-template.php Docs: Correct some more invalid inline docs. 2019-10-31 21:20:02 +00:00
http.php HTTP API: Protect against hex interpretation. 2019-10-14 15:27:04 +00:00
kses.php KSES: Add support for modern layout techniques in style attribute. 2019-09-22 22:17:57 +00:00
l10n.php Docs: Correct invalid hook docblocks. 2019-10-27 19:11:02 +00:00
link-template.php Docs: Clarify default value for the $link parameter in edit_tag_link(), edit_term_link(), and edit_bookmark_link(). 2019-10-03 23:12:57 +00:00
load.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
locale.php Docs: Add missing @deprecated tags in the file docblock of some deprecated files. 2019-10-08 17:19:04 +00:00
media-template.php Accessibility: Media: Improve the text of the Media Modal actions toggle button displayed in the responsive view. 2019-10-14 18:03:04 +00:00
media.php Docs: Correct invalid hook docblocks. 2019-10-27 19:11:02 +00:00
meta.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
ms-blogs.php Multisite/Sites: Add links to filter websites by status. 2019-09-23 17:35:59 +00:00
ms-default-constants.php
ms-default-filters.php
ms-deprecated.php Coding Standards: Fix WPCS issues in wp-includes/ms-deprecated.php. 2019-10-07 15:18:03 +00:00
ms-files.php
ms-functions.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
ms-load.php Docs: Correct invalid hook docblocks. 2019-10-27 19:11:02 +00:00
ms-network.php
ms-settings.php
ms-site.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
nav-menu-template.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
nav-menu.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
option.php Coding Standards: Fix WPCS issue in [46120]. 2019-09-15 02:07:55 +00:00
pluggable-deprecated.php
pluggable.php General: wp_safe_redirect() and wp_redirect() shouldn't allow non-3xx status codes 2019-11-03 22:10:02 +00:00
plugin.php Plugins: Restore backward compatibility for PHP4-style passing of array( &$this ) as action argument to do_action(). 2019-10-22 00:11:03 +00:00
post-formats.php Docs: Add missing description for $wp_rewrite global. 2019-08-04 01:19:56 +00:00
post-template.php Docs: Miscellaneous docblock corrections. 2019-10-28 19:48:01 +00:00
post-thumbnail-template.php Docs: Add missing description for $wp_query and $wp_the_query globals. 2019-08-04 01:59:56 +00:00
post.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
query.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
registration-functions.php Docs: Add missing @deprecated tags in the file docblock of some deprecated files. 2019-10-08 17:19:04 +00:00
registration.php Docs: Add missing @deprecated tags in the file docblock of some deprecated files. 2019-10-08 17:19:04 +00:00
rest-api.php REST API: Allow for multiple Vary: Origin headers in GET responses. 2019-10-15 15:47:03 +00:00
revision.php Coding Standards: Fix all WordPress.CodeAnalysis.AssignmentInCondition issues. 2019-07-05 03:14:56 +00:00
rewrite.php Docs: Add missing description for $wp global. 2019-08-04 01:28:55 +00:00
rss-functions.php Docs: Add missing @deprecated tags in the file docblock of some deprecated files. 2019-10-08 17:19:04 +00:00
rss.php
script-loader.php External Libraries: Revert [46634-46635]. 2019-11-03 17:09:02 +00:00
session.php Docs: Add missing @deprecated tags in the file docblock of some deprecated files. 2019-10-08 17:19:04 +00:00
shortcodes.php Shortcodes: Revert [46369] for now to allow more time to investigate and prepare for backward compatibility changes. 2019-10-15 19:36:02 +00:00
spl-autoload-compat.php Code Modernisation: Remove the SPL autoloader polyfill. 2019-07-15 05:11:56 +00:00
taxonomy.php Docs: Switch more docs over to typed array notation, plus some fixes. 2019-10-26 21:09:04 +00:00
template-loader.php Coding Standards: Fix the Squiz.PHP.DisallowMultipleAssignments violations in wp-includes. 2019-07-02 23:42:58 +00:00
template.php Docs: Add missing description for $comment global. 2019-10-04 22:19:57 +00:00
theme.php Docs: Correct invalid hook docblocks. 2019-10-27 19:11:02 +00:00
update.php I18N: Capitalize translator comments consistently, add trailing punctuation. 2019-09-03 00:41:05 +00:00
user.php Login and Registration: Allow email logins to be more flexible. 2019-11-03 20:12:02 +00:00
vars.php General: First pass at replacing Codex URLs with a corresponding HelpHub or DevHub article. 2019-07-25 22:45:57 +00:00
version.php General: wp_safe_redirect() and wp_redirect() shouldn't allow non-3xx status codes 2019-11-03 22:10:02 +00:00
widgets.php Docs: Add a @since note about new parameters with the spread operator added to function signatures. 2019-10-09 04:28:02 +00:00
wlwmanifest.xml
wp-db.php Docs: Add a @since note about new parameters with the spread operator added to function signatures. 2019-10-09 04:28:02 +00:00
wp-diff.php