WordPress/wp-admin
whyisjake 9b67830c05 General: WordPress updates
* XML-RPC: Improve error messages for unprivileged users.
* External Libraries: Disable deserialization in Requests_Utility_FilteredIterator
* Embeds: Disable embeds on deactivated Multisite sites.
* Coding standards: Modify escaping functions to avoid potential false positives.
* XML-RPC: Return error message if attachment ID is incorrect.
* Upgrade/install: Improve logic check when determining installation status.
* Meta: Sanitize meta key before checking protection status.
* Themes: Ensure that only privileged users can set a background image when a theme is using the deprecated custom background page.

Brings the changes from [49380,49382-49388] to the 4.7 branch.

Props xknown, zieladam, peterwilsoncc, whyisjake, desrosj, dd32.

Built from https://develop.svn.wordpress.org/branches/4.7@49399


git-svn-id: http://core.svn.wordpress.org/branches/4.7@49158 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-10-29 18:57:24 +00:00
..
css Customize: Auto-expand a widget area section when expanding the Widgets panel if there is only one registered sidebar and it is active. 2017-04-10 12:36:34 +00:00
images Customize: Add a RTL version of "browser.png" for the site icon preview. 2016-07-05 11:32:29 +00:00
includes General: WordPress updates 2020-10-29 18:57:24 +00:00
js General: WordPress updates 2020-10-29 18:57:24 +00:00
maint I18N: Make the translator comment added in [37858] more explicit and consistent with other similar instances. 2016-07-04 13:10:30 +00:00
network General: WordPress updates 2020-10-29 18:57:24 +00:00
user Docs: Standardize hook docs in wp-admin/* to use third-person singular verbs per the inline documentation standards for PHP. 2016-05-22 18:01:30 +00:00
about.php WordPress 4.7.18. 2020-06-10 21:37:49 +00:00
admin-ajax.php TinyMCE, inline link: 2016-07-26 23:24:28 +00:00
admin-footer.php Hooks: Standardize naming of dynamic hooks to use interpolation vs concatenation. 2016-08-22 18:25:31 +00:00
admin-functions.php Docs: Use 3-digit, x.x.x-style semantic versioning for _doing_it_wrong(), _deprecated_function(), _deprecated_argument(), and _deprecated_file() throughout core. 2016-07-06 12:40:29 +00:00
admin-header.php General: WordPress updates 2020-10-29 18:57:24 +00:00
admin-post.php Spelling: Standardize on "front end"/"back end" (noun) and "front-end"/"back-end" (adjective). 2016-02-25 12:53:27 +00:00
admin.php Hooks: Standardize naming of dynamic hooks to use interpolation vs concatenation. 2016-08-22 18:25:31 +00:00
async-upload.php Escape the output in wp_ajax_upload_attachment(). 2019-09-04 16:35:47 +00:00
comment.php Accessibility: Remove target=_blank from the comment/edit-comments help tabs links. 2016-10-04 06:54:30 +00:00
credits.php About page: Add strings for 4.7 and make available for translation. 2016-12-02 22:45:15 +00:00
custom-background.php General: WordPress updates 2020-10-29 18:57:24 +00:00
custom-header.php General: WordPress updates 2020-10-29 18:57:24 +00:00
customize.php Customize: Ignore invalid customization sessions. 2017-05-16 12:14:35 +00:00
edit-comments.php Administration: Standardise the docblocks for the handle_bulk_actions-* filters. 2016-10-26 14:45:29 +00:00
edit-form-advanced.php I18n: Introduce more translator comments for strings that contain placeholders but don't have an accompanying translator comment. 2016-11-21 02:46:30 +00:00
edit-form-comment.php Accessibility: Standardize the remove/delete/cancel links in the Menus screen and Publish meta boxes. 2016-09-17 15:39:30 +00:00
edit-link-form.php Accessibility: Remove target=_blank from the help tab links on several admin screens. 2016-10-04 20:27:33 +00:00
edit-tag-form.php Taxonomy/Users: Use correct escaping function for URLs. 2017-09-19 21:21:35 +00:00
edit-tags.php Taxonomy: Redirect to current taxonomy when adding a term without AJAX. 2016-12-30 05:55:32 +00:00
edit.php Accessibility: Remove inappropriate content from the Posts and Edit screens headings. 2016-10-27 20:39:39 +00:00
export.php Accessibility: Remove target=_blank from the help tab links on several admin screens. 2016-10-04 20:27:33 +00:00
freedoms.php About page: Add strings for 4.7 and make available for translation. 2016-12-02 22:45:15 +00:00
import.php Accessibility: Remove target=_blank from the help tab links on several admin screens. 2016-10-04 20:27:33 +00:00
index.php Drop the requirement for the entry points to WordPress to be parsable by PHP4. 2016-10-25 03:15:30 +00:00
install-helper.php Docs: Add missing descriptions for the $wpdb global in DocBlocks all the places. 2015-10-14 23:44:25 +00:00
install.php Login and Registration: Avoid a potentially incorrect value for the cookie hash on multisite installations that don't have a value in the siteurl network option. 2017-03-23 19:03:37 +00:00
link-add.php Text Changes: Unify permission error messages. 2016-06-29 15:16:29 +00:00
link-manager.php Administration: Standardise the docblocks for the handle_bulk_actions-* filters. 2016-10-26 14:45:29 +00:00
link-parse-opml.php General: Check to see that the PHP-XML module is enabled before using XML functions. 2016-10-24 04:45:31 +00:00
link.php Docs: Standardize capitalization of Ajax throughout core documentation per the core spelling guide. 2016-07-10 00:51:30 +00:00
load-scripts.php Bootstrap: do not go gentle into that good night r38411, r38412, and parts of r38389. 2016-08-31 16:31:29 +00:00
load-styles.php Bootstrap: do not go gentle into that good night r38411, r38412, and parts of r38389. 2016-08-31 16:31:29 +00:00
media-new.php General: WordPress updates 2020-10-29 18:57:24 +00:00
media-upload.php Hooks: Standardize naming of dynamic hooks to use interpolation vs concatenation. 2016-08-22 18:25:31 +00:00
media.php Accessibility: Remove target=_blank from the help tab links on several admin screens. 2016-10-04 20:27:33 +00:00
menu-header.php Administration: Ensure collapse menu is usable with a keyboard 2016-11-04 17:18:57 +00:00
menu.php Customize: Prevent links to customize.php from being generated which have query vars from wp_removable_query_args() present. 2017-03-25 13:35:38 +00:00
moderation.php
ms-admin.php
ms-delete-site.php I18N: Introduce a locale-switching function. 2016-10-26 15:36:31 +00:00
ms-edit.php
ms-options.php
ms-sites.php
ms-themes.php
ms-upgrade-network.php
ms-users.php
my-sites.php Multisite: Replace get_blog_details() in wp-admin/my-sites.php with get_site(). 2016-10-19 06:02:29 +00:00
nav-menus.php Customize: Prevent links to customize.php from being generated which have query vars from wp_removable_query_args() present. 2017-03-25 13:35:38 +00:00
network.php Accessibility: Remove target=_blank from the help tab links in network.php. 2016-10-30 15:19:37 +00:00
options-discussion.php I18n: Begin introducing translator comments for strings which include placeholders but no accompanying translator comment. 2016-11-21 01:22:32 +00:00
options-general.php I18N: Show available timezones in the user's locale on the settings screen. 2016-11-01 09:16:31 +00:00
options-head.php Docs: Standardize on 'backward compatibility/compatible' nomenclature in core inline docs. 2016-05-13 18:41:31 +00:00
options-media.php Accessibility: Remove target=_blank from the Settings screens help tabs links. 2016-10-04 06:59:29 +00:00
options-permalink.php Accessibility: Remove target=_blank from the Settings screens help tabs links. 2016-10-04 06:59:29 +00:00
options-reading.php Accessibility: Remove target=_blank from the Settings screens help tabs links. 2016-10-04 06:59:29 +00:00
options-writing.php Accessibility: Remove target=_blank from the Settings screens help tabs links. 2016-10-04 06:59:29 +00:00
options.php Text Changes: Merge and clarify some permission error strings in the admin. 2016-11-19 01:38:31 +00:00
plugin-editor.php General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area. 2017-09-19 10:21:48 +00:00
plugin-install.php Plugin install: De-duplicate a conditional, introduced in [38172]. 2016-11-21 21:33:30 +00:00
plugins.php General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area. 2017-09-19 10:21:48 +00:00
post-new.php I18N: Combine two duplicate "Invalid post type" strings. 2016-07-17 16:05:31 +00:00
post.php Editor: Remove unwanted fields before saving posts. 2018-12-13 01:41:22 +00:00
press-this.php Bootstrap: do not go gentle into that good night r38411, r38412, and parts of r38389. 2016-08-31 16:31:29 +00:00
profile.php
revision.php I18n: Begin introducing translator comments for strings which include placeholders but no accompanying translator comment. 2016-11-21 01:22:32 +00:00
setup-config.php Drop the requirement for the entry points to WordPress to be parsable by PHP4. 2016-10-25 03:15:30 +00:00
term.php Taxonomy: Introduce more fine grained capabilities for managing taxonomy terms. 2016-09-30 22:40:28 +00:00
theme-editor.php General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area. 2017-09-19 10:21:48 +00:00
theme-install.php I18N: Move the support forums URL in update-related HTTP API error messages to a separate translatable string that is already used elsewhere. 2016-11-21 01:52:32 +00:00
themes.php General: Backport several commits for release. 2020-06-10 18:56:20 +00:00
tools.php Accessibility: Remove target=_blank from the Plugins, Themes, Media, Update, and Tools screens help tabs links. 2016-10-04 07:08:29 +00:00
update-core.php Updates: Translate plugin data on the Updates screen. 2017-01-11 11:39:34 +00:00
update.php Bootstrap: do not go gentle into that good night r38411, r38412, and parts of r38389. 2016-08-31 16:31:29 +00:00
upgrade-functions.php Docs: Use 3-digit, x.x.x-style semantic versioning for _doing_it_wrong(), _deprecated_function(), _deprecated_argument(), and _deprecated_file() throughout core. 2016-07-06 12:40:29 +00:00
upgrade.php Install/Upgrade: Keep indexing bots away until a site is ready to be seen. 2015-12-08 21:56:27 +00:00
upload.php Administration: Standardise the docblocks for the handle_bulk_actions-* filters. 2016-10-26 14:45:29 +00:00
user-edit.php Taxonomy/Users: Use correct escaping function for URLs. 2017-09-19 21:21:35 +00:00
user-new.php Hardening: Use a properly generated hash for the newbloguser key instead of a determinate substring. 2017-11-29 16:17:35 +00:00
users.php Text Changes: Merge strings referring to list_users capability. 2016-11-19 02:16:30 +00:00
widgets.php Customize: Prevent links to customize.php from being generated which have query vars from wp_removable_query_args() present. 2017-03-25 13:35:38 +00:00