WordPress/wp-includes
davidbaumwald ae04cdeb91 Grouped backports to the 4.9 branch.
- Comments: Prevent users who can not see a post from seeing comments on it.
- Shortcodes: Restrict media shortcode ajax to certain type.
- REST API: Ensure no-cache headers are sent when methods are overridden.
- REST API: Limit `search_columns` for users without `list_users`.
- Prevent unintended behavior when certain objects are unserialized.

Merges [56834], [56835], [56836], [56838], and [56840] to the 4.9 branch.
Props xknown, jorbin, joehoyle, timothyblynjacobs, peterwilsoncc, ehtis, tykoted, antpb, rmccue.
Built from https://develop.svn.wordpress.org/branches/4.9@56865


git-svn-id: http://core.svn.wordpress.org/branches/4.9@56376 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2023-10-12 18:15:06 +00:00
..
certificates
css Build/Test Tools: Backport GitHub Action and build improvements to the 4.9 branch. 2021-03-31 19:34:28 +00:00
customize Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
fonts
ID3 Media: update the getID3 library to version 1.9.14 to avoid fatal errors in PHP7. 2017-07-31 19:50:45 +00:00
images
IXR XML-RPC: Add default values to IXR_Message for PHP 7.2 compatibility to avoid PHP Warnings. 2018-03-08 19:56:40 +00:00
js Grouped backports to the 4.9 branch. 2023-05-16 15:54:27 +00:00
pomo General: PHP 7.3 throws an E_WARNING when using continue to target a switch. 2018-09-24 20:05:29 +00:00
random_compat Avoid PHP Linting errors in the Random_Compat library under PHP7. 2017-12-01 03:07:42 +00:00
Requests Grouped backports to the 4.9 branch. 2023-10-12 18:15:06 +00:00
rest-api Grouped backports to the 4.9 branch. 2023-10-12 18:15:06 +00:00
SimplePie
Text External Libraries: Remove usage of each() from the Text_Diff_Engine_native class. 2017-10-26 12:52:53 +00:00
theme-compat Embeds: Avoid "Division by zero" warning in embed-content.php template if a thumbnail has a zero height. 2017-10-18 15:09:48 +00:00
widgets Customize: Ensure media playlists get initialized after selective refresh; expose new wp.playlist.initialize() API. 2018-01-30 14:56:41 +00:00
admin-bar.php Users: Remove some links to the dashboard from My Sites for users who cannot access it. 2017-10-09 15:22:46 +00:00
atomlib.php
author-template.php Editor: Add CodeMirror-powered code editor with syntax highlighting, linting, and auto-completion. 2017-09-13 06:08:47 +00:00
bookmark-template.php
bookmark.php Grouped backports to the 4.9 branch. 2022-08-30 15:44:26 +00:00
cache.php Customize: Add additional filters to Customizer to prevent JSON corruption. 2020-04-29 16:16:26 +00:00
canonical.php Canonical: Strip trailing punctuation from permalinks. 2017-10-24 14:18:48 +00:00
capabilities.php REST API: Support meta registration for specific object subtypes. 2018-07-19 18:49:25 +00:00
category-template.php Taxonomy: Restore deprecated argument to term_description() signature. 2017-12-22 02:50:39 +00:00
category.php
class-feed.php
class-http.php Docs: Correct type and description for the $data parameter in WP_Http::browser_redirect_compatibility(). 2017-10-18 16:38:48 +00:00
class-IXR.php
class-json.php
class-oembed.php Embeds: Add oEmbed support for someecards.com. 2017-10-02 19:10:49 +00:00
class-phpass.php
class-phpmailer.php External libraries: Improve attachment handling in PHPMailer 2021-05-12 22:32:26 +00:00
class-pop3.php
class-requests.php
class-simplepie.php
class-smtp.php
class-snoopy.php
class-walker-category-dropdown.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-walker-category.php Taxonomy: Revert [43620] from the 4.9 branch. 2018-10-11 04:42:25 +00:00
class-walker-comment.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-walker-nav-menu.php Menus: Remove an extra space in the <ul> tag in Walker_Nav_Menu::start_lvl(). 2017-10-20 10:40:46 +00:00
class-walker-page-dropdown.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-walker-page.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-admin-bar.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-ajax-response.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-comment-query.php Docs: Remove & prefixes from parameter documentation to avoid doc parsing errors. 2017-10-02 22:03:33 +00:00
class-wp-comment.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-customize-control.php Customize: Deprecate nav menu classes that are no longer used, instead of removing them immediately. 2017-10-28 05:48:47 +00:00
class-wp-customize-manager.php Customize: Add additional filters to Customizer to prevent JSON corruption. 2020-04-29 16:16:26 +00:00
class-wp-customize-nav-menus.php Customize: Do not attempt to count uncountable value. 2018-07-17 14:40:23 +00:00
class-wp-customize-panel.php Accessibility: CodeMirror editing areas minor improvements. 2017-09-24 16:00:46 +00:00
class-wp-customize-section.php Customize: Deprecate nav menu classes that are no longer used, instead of removing them immediately. 2017-10-28 05:48:47 +00:00
class-wp-customize-setting.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-customize-widgets.php Customize: Revert [43611] from the 4.9 branch. 2018-10-11 03:48:25 +00:00
class-wp-dependency.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-editor.php Editor: Use apply_filters_deprecated() for some deprecated filters. 2018-07-17 15:05:25 +00:00
class-wp-embed.php Embeds: Improve consistency of update and refresh logic for oEmbed caching between oembed_cache and post meta. 2017-10-24 23:10:48 +00:00
class-wp-error.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-feed-cache-transient.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-feed-cache.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-hook.php Docs: Use correct order of arguments in the DocBlock for WP_Hook::has_filter(). 2017-09-21 10:00:48 +00:00
class-wp-http-cookie.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-http-curl.php I18N: Replace function name in error message in WP_Http_Curl::request() and WP_Http_Streams::request() with a placeholder. 2017-10-18 15:04:51 +00:00
class-wp-http-encoding.php
class-wp-http-ixr-client.php
class-wp-http-proxy.php
class-wp-http-requests-hooks.php Docs: Remove superfluous @package WordPress and @subpackage notations used outside of file headers in a variety of core files. 2017-07-01 16:58:42 +00:00
class-wp-http-requests-response.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-http-response.php HTTP API: Use WP_HTTP_Response::set_data() in ::__construct() instead of directly accessing the $data property. 2017-10-03 15:18:46 +00:00
class-wp-http-streams.php I18N: Replace function name in error message in WP_Http_Curl::request() and WP_Http_Streams::request() with a placeholder. 2017-10-18 15:04:51 +00:00
class-wp-image-editor-gd.php Media: Rename several attachment related parameters from $post_id to $attachment_id for clarity, and improve related 2017-08-22 11:12:44 +00:00
class-wp-image-editor-imagick.php Media: Rename several attachment related parameters from $post_id to $attachment_id for clarity, and improve related 2017-08-22 11:12:44 +00:00
class-wp-image-editor.php Media: In WP_Image_Editor::make_image(), close previously opened output buffer if the file could not be created. 2018-09-18 22:02:28 +00:00
class-wp-list-util.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-locale-switcher.php General: Improve terminology used when referring to installations of WordPress and its extensions. 2017-08-22 11:52:48 +00:00
class-wp-locale.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-matchesmapregex.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-meta-query.php Grouped backports to the 4.9 branch. 2022-01-06 18:16:25 +00:00
class-wp-metadata-lazyloader.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-network-query.php Multisite: Document all return types in get_networks(). 2017-10-18 18:13:50 +00:00
class-wp-network.php Multisite: Pass network object instead of ID to pre_get_main_site_id. 2017-10-30 19:56:47 +00:00
class-wp-oembed-controller.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-post-type.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-post.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-query.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
class-wp-rewrite.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-role.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-roles.php Multisite: Improve initializing available roles when switch sites. 2017-09-27 21:44:44 +00:00
class-wp-session-tokens.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-simplepie-file.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-simplepie-sanitize-kses.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-site-query.php Multisite: Document all return types in get_sites(). 2017-10-18 17:39:46 +00:00
class-wp-site.php Multisite: Revert [41719]. 2017-10-16 22:29:48 +00:00
class-wp-tax-query.php Grouped backports to the 4.9 branch. 2022-01-06 18:16:25 +00:00
class-wp-taxonomy.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-term-query.php Docs: Correct param documentation for WP_Term_Query. 2018-09-03 21:26:26 +00:00
class-wp-term.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-text-diff-renderer-inline.php
class-wp-text-diff-renderer-table.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-theme.php Grouped backports to the 4.9 branch. 2023-10-12 18:15:06 +00:00
class-wp-user-meta-session-tokens.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-user-query.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-user.php Multisite: Initialize a user's roles correctly when setting them up for a different site. 2017-09-27 21:10:45 +00:00
class-wp-walker.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-widget-factory.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-widget.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-xmlrpc-server.php General: WordPress updates 2020-10-29 18:53:27 +00:00
class-wp.php Backporting several bug fixes. 2019-10-14 18:39:28 +00:00
class.wp-dependencies.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class.wp-scripts.php Docs: Remove & prefixes from parameter documentation to avoid doc parsing errors. 2017-10-02 22:03:33 +00:00
class.wp-styles.php Docs: Remove & prefixes from parameter documentation to avoid doc parsing errors. 2017-10-02 22:03:33 +00:00
comment-template.php Privacy: Revert [43525]. 2018-07-24 17:08:26 +00:00
comment.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
compat.php General: In the is_countable() polyfill, if the provided object implements SimpleXMLElement or ResourceBundle, consider it countable. 2018-05-10 17:59:25 +00:00
cron.php Docs: Use third-person singular verbs in the summaries for wp_unschedule_hook() and wp_clear_scheduled_hook(). 2017-06-30 04:54:41 +00:00
date.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
default-constants.php Docs: Document $wp_version global in wp_initial_constants(). 2017-10-20 22:04:56 +00:00
default-filters.php Dashboard: Remove the Try Gutenberg callout. 2018-12-13 09:07:26 +00:00
default-widgets.php Widgets: Introduce Gallery widget for displaying image galleries. 2017-09-25 06:28:45 +00:00
deprecated.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
embed-template.php
embed.php Grouped backports to the 4.9 branch. 2023-05-16 15:54:27 +00:00
feed-atom-comments.php
feed-atom.php
feed-rdf.php
feed-rss.php
feed-rss2-comments.php
feed-rss2.php
feed.php Hardening: Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds. 2017-11-29 16:11:38 +00:00
formatting.php Grouped backports to the 4.9 branch. 2022-01-06 18:16:25 +00:00
functions.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
functions.wp-scripts.php
functions.wp-styles.php
general-template.php Multisite: Improve messaging for previously activated users. 2018-12-13 00:34:26 +00:00
http.php Backporting several bug fixes. 2019-10-14 18:39:28 +00:00
kses.php Ensure that a user can publish_posts before making a post sticky. 2019-12-12 18:57:27 +00:00
l10n.php I18N: Make sure wp_dropdown_languages() does not print out empty name and id attributes. 2017-10-04 15:23:46 +00:00
link-template.php Privacy: Use the actual Privacy Policy page title in get_the_privacy_policy_link(). 2018-07-18 11:52:25 +00:00
load.php Docs: Document $ini_all staticvar in wp_is_ini_value_changeable(). 2017-10-18 19:54:48 +00:00
locale.php
media-template.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
media.php Grouped backports to the 4.9 branch. 2023-10-12 18:15:06 +00:00
meta.php General: WordPress updates 2020-10-29 18:53:27 +00:00
ms-blogs.php Multisite: Document all return types in get_networks(). 2017-10-18 18:13:50 +00:00
ms-default-constants.php Multisite: Use get_current_blog_id() instead of $wpdb->blogid. 2017-10-02 01:44:47 +00:00
ms-default-filters.php Multisite: Only update a site's post count when post types of post are updated. 2017-10-02 03:09:44 +00:00
ms-deprecated.php Multisite: Validate activation links. 2018-12-13 01:33:26 +00:00
ms-files.php
ms-functions.php Email: Don't send notifications for site or network admin email address change to the default 'admin_email' value. 2018-01-23 13:47:40 +00:00
ms-load.php Multisite: Use WP_Network_Query in ms_load_current_site_and_network(). 2017-10-03 19:26:49 +00:00
ms-settings.php Multisite: Explicitly globalize global variables in ms-settings.php. 2017-10-16 17:06:48 +00:00
nav-menu-template.php Menus: Make sure current-menu-parent and current-menu-ancestor classes are properly set for parent items of post type archive submenu items. 2017-07-05 21:31:44 +00:00
nav-menu.php Menus: Add menu-$i slugs to mapping groups 2017-10-25 22:29:49 +00:00
option.php Transients: After [41963], add missing cron task for delete_expired_transients(). 2017-10-24 23:00:47 +00:00
pluggable-deprecated.php
pluggable.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
plugin.php Revert "Add wp.hooks - JavaScript actions and filters." 2017-10-04 20:25:49 +00:00
post-formats.php Docs: Improve the return description for get_post_format_slugs() to note that the array contains slugs as both keys and values. 2017-08-20 20:03:54 +00:00
post-template.php Grouped backports to the 4.9 branch. 2022-08-30 15:44:26 +00:00
post-thumbnail-template.php Post Thumbnails: Pass post ID to post_thumbnail_size filter. 2017-08-18 18:19:44 +00:00
post.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
query.php Docs: Correct $id parameter type for old_slug_redirect_post_id filter. 2018-04-29 22:37:28 +00:00
registration-functions.php
registration.php
rest-api.php Grouped backports to the 4.9 branch. 2023-10-12 18:15:06 +00:00
revision.php
rewrite.php Rewrite: In url_to_postid(), bail early if the URL does not belong to the site. 2017-10-06 23:29:51 +00:00
rss-functions.php
rss.php
script-loader.php External Librairies: Update jQuery.query to version 2.2.3. 2022-03-10 21:28:26 +00:00
session.php
shortcodes.php Grouped backports to the 4.9 branch. 2023-10-12 18:15:06 +00:00
spl-autoload-compat.php General: Move the __autoload() compat function into its own file to prevent deprecated notices being thrown by the compiler in PHP 7.2. 2017-07-28 01:15:52 +00:00
taxonomy.php Revert [43632] from the 4.9 branch. 2018-10-10 04:17:13 +00:00
template-loader.php
template.php Docs: Don't reference non-existent hooks inline in the DocBlock descriptions for the following template functions: 2017-06-29 16:05:41 +00:00
theme.php Themes: Avoid a PHP 7.2 warning in get_theme_roots() when $wp_theme_directories is an uncountable value. 2018-04-30 04:55:26 +00:00
update.php Updates: Partially revert [42584], as this branch of code should always be run after a core update check. 2018-02-06 12:47:42 +00:00
user.php Customize: Add additional filters to Customizer to prevent JSON corruption. 2020-04-29 16:16:26 +00:00
vars.php General: Introduce a wp_is_mobile filter for controlling whether a request should be treated as coming from a mobile device. 2017-06-15 12:05:42 +00:00
version.php Grouped backports to the 4.9 branch. 2023-05-16 15:54:27 +00:00
widgets.php Grouped backports to the 4.9 branch. 2022-10-17 18:14:49 +00:00
wlwmanifest.xml
wp-db.php WPDB: Use a PCRE syntax which supports PCRE compiled between 2003 and 2006. 2018-01-23 03:40:42 +00:00
wp-diff.php