WordPress/wp-includes
whyisjake afeec1960d Privacy: Ensure that exported user data reports can't be found with directory listings.
By moving from .html to .php files, we can prevent directory listings, and ensure that WordPress can load.

This brings the changes from [50037] to the 5.6 branch.

Fixes #52299.

Props lucasbustamante, xkon, freewebmentor, SergeyBiryukov, whyisjake.

Built from https://develop.svn.wordpress.org/branches/5.6@50038


git-svn-id: http://core.svn.wordpress.org/branches/5.6@49739 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2021-01-27 23:48:58 +00:00
..
assets Build/Test Tools: Update several dependencies in the 5.6 branch. 2021-01-26 15:18:33 +00:00
block-patterns Editor: Don't unnecessarily split a translatable string in block templates. 2020-12-01 17:06:05 +00:00
block-supports General: Convert wp_array_get() to a "private" function and add tests. 2020-11-12 20:20:12 +00:00
blocks Editor: Update packages. 2020-11-12 19:36:36 +00:00
certificates HTTP: Update the Root Certificate bundle. 2020-08-01 14:09:06 +00:00
css Editor: Update packages for WordPress 5.6 RC2. 2020-12-01 12:21:40 +00:00
customize Customize: Ensure multiple CSS classes are passed to nav_menu_link_attributes as an array 2020-11-17 04:31:08 +00:00
fonts Administration: Reverse the arrow direction for database import/export icons. 2020-07-17 17:11:03 +00:00
ID3 Code Modernization: Only call libxml_disable_entity_loader() in PHP < 8. 2020-11-17 01:00:08 +00:00
images
IXR
js Editor: Fix improper triggering of the "Are you sure" prompt when navigating away from the old, "classic" Edit Post screen and there are no changes. Was triggered when there is an instance of TinyMCE in the Excerpt postbox. 2021-01-27 19:52:00 +00:00
PHPMailer External Libraries: Upgrade PHPMailer to version 6.2.0. 2020-11-30 17:26:08 +00:00
pomo Code Modernization: Remove unnecessary reference sign from PO::export_entry() definition. 2020-10-18 06:29:05 +00:00
random_compat
Requests External Libraries: Disable deserialization in Requests_Utility_FilteredIterator 2020-10-29 18:00:08 +00:00
rest-api REST API: Pass the previous state of the post as a parameter to the wp_after_insert_post hook. 2020-12-01 20:57:05 +00:00
SimplePie External Libraries: Update the SimplePie library to version 1.5.6. 2020-10-16 17:20:07 +00:00
sitemaps Sitemaps: Center the container for sitemap content. 2020-10-20 02:22:07 +00:00
sodium_compat Upgrade/Install: Update sodium_compat to v1.14.0. 2020-12-03 17:43:04 +00:00
Text Code Modernization: Use instanceof instead of a comparison with get_class(). 2020-10-18 17:33:07 +00:00
theme-compat
widgets General: Remove noreferrer from wp_targeted_link_rel() and other uses. 2020-10-19 23:39:04 +00:00
admin-bar.php Docs: First pass at some inline docs fixes mostly made by PHPCBF. 2020-07-23 20:01:04 +00:00
atomlib.php Feeds: Fix "Only variables should be passed by reference" PHP notice in atomlib.php. 2020-10-17 15:45:06 +00:00
author-template.php Docs: Further corrections and improvements to various inline docblocks. 2020-07-23 07:39:02 +00:00
block-patterns.php Block Editor: Update the Core Block Patterns. 2020-07-27 15:14:04 +00:00
blocks.php Editor: Remove render_block hooks from WP_Block 2020-11-25 01:15:11 +00:00
bookmark-template.php Coding Standards: Replace alias PHP functions with the canonical names. 2020-10-18 17:27:06 +00:00
bookmark.php Docs: Miscellaneous DocBlock corrections. 2020-07-23 21:55:04 +00:00
cache-compat.php
cache.php Docs: First pass at some inline docs fixes mostly made by PHPCBF. 2020-07-23 20:01:04 +00:00
canonical.php Permalinks: Prevent attachment pages 404ing following [49563]. 2020-11-17 03:29:12 +00:00
capabilities.php Taxonomy: Rename the default_taxonomy_$taxonomy option key to default_term_$taxonomy. 2020-07-28 15:42:07 +00:00
category-template.php Docs: Various docblock corrections and improvements. 2020-11-14 16:35:06 +00:00
category.php Docs: Miscellaneous DocBlock corrections. 2020-07-23 21:55:04 +00:00
class-feed.php
class-http.php Docs: Standardise the type name for booleans and integers. 2020-10-10 20:02:05 +00:00
class-IXR.php
class-json.php Coding Standards: Pass an empty string instead of null as the $replacement parameter to _deprecated_file(). 2020-11-12 11:17:07 +00:00
class-oembed.php
class-phpass.php
class-phpmailer.php Mail: Make sure the PHPMailer class is only required once if a plugin requires wp-includes/class-phpmailer.php directly. 2020-07-21 12:58:02 +00:00
class-pop3.php
class-requests.php
class-simplepie.php External Libraries: Update the SimplePie library to version 1.5.6. 2020-10-16 17:20:07 +00:00
class-smtp.php
class-snoopy.php
class-walker-category-dropdown.php Docs: Fix and upgrade various object docblock notations. 2020-10-17 16:05:09 +00:00
class-walker-category.php Docs: Fix and upgrade various object docblock notations. 2020-10-17 16:05:09 +00:00
class-walker-comment.php Comments: Further remove unnecessary context switch in Walker_Comment. 2020-10-15 15:26:05 +00:00
class-walker-nav-menu.php General: Remove noreferrer from wp_targeted_link_rel() and other uses. 2020-10-19 23:39:04 +00:00
class-walker-page-dropdown.php
class-walker-page.php
class-wp-admin-bar.php Docs: Improve description for WP_Admin_Bar::add_group(). 2020-08-19 02:46:04 +00:00
class-wp-ajax-response.php
class-wp-application-passwords.php App Passwords: Store the "in use" option in the main network options. 2020-12-07 20:01:06 +00:00
class-wp-block-list.php Editor: Introduce WP_Block and WP_Block_List classes 2020-06-25 05:16:11 +00:00
class-wp-block-parser.php Editor: update packages; Port block supports to WordPress core. 2020-10-13 13:10:30 +00:00
class-wp-block-pattern-categories-registry.php Docs: Add missing @since tags for properties in some block editor classes: 2020-10-26 21:51:08 +00:00
class-wp-block-patterns-registry.php Docs: Add missing @since tags for properties in some block editor classes: 2020-10-26 21:51:08 +00:00
class-wp-block-styles-registry.php Docs: Standardise the type name for booleans and integers. 2020-10-10 20:02:05 +00:00
class-wp-block-supports.php Docs: Correct DocBlock formatting for render_block(). 2020-10-26 21:55:10 +00:00
class-wp-block-type-registry.php Docs: Add a note that the $args parameter of register_block_type() accepts any public property of WP_Block_Type. 2020-07-26 22:17:01 +00:00
class-wp-block-type.php Block Editor: Expose api_version in the block type and the REST endpoint. 2020-10-20 07:54:10 +00:00
class-wp-block.php Editor: Remove render_block hooks from WP_Block 2020-11-25 01:15:11 +00:00
class-wp-comment-query.php Docs: Use a consistent plural form of "status". 2020-11-02 01:38:07 +00:00
class-wp-comment.php Docs: Various docblock corrections and improvements. 2020-09-04 20:41:07 +00:00
class-wp-customize-control.php Docs: Miscellaneous docblock fixes. 2020-10-17 14:54:05 +00:00
class-wp-customize-manager.php REST API: Pass the previous state of the post as a parameter to the wp_after_insert_post hook. 2020-12-01 20:57:05 +00:00
class-wp-customize-nav-menus.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
class-wp-customize-panel.php
class-wp-customize-section.php
class-wp-customize-setting.php Docs: Another pass at some inline docs fixes mostly made by PHPCBF. 2020-07-23 21:11:05 +00:00
class-wp-customize-widgets.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
class-wp-date-query.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
class-wp-dependency.php Docs: Various corrections to inline docblocks. 2020-07-23 00:48:06 +00:00
class-wp-editor.php I18N: Merge duplicate "Column" strings, remove unnecessary context. 2020-11-09 11:17:07 +00:00
class-wp-embed.php Docs: First pass at some inline docs fixes mostly made by PHPCBF. 2020-07-23 20:01:04 +00:00
class-wp-error.php General: Docblock improvements for the WP_Error class. 2020-10-09 22:30:04 +00:00
class-wp-fatal-error-handler.php Site Health: Site errors are for *this* site, not necessarily *your* site. 2020-11-02 19:55:07 +00:00
class-wp-feed-cache-transient.php
class-wp-feed-cache.php Feeds: Register transient feed cache handler using the recommended method for SimplePie 1.3 or later. 2020-11-12 14:36:10 +00:00
class-wp-hook.php Docs: Add more information about how to use filters that run before WordPress initialises. 2020-11-03 17:36:09 +00:00
class-wp-http-cookie.php Docs: Further corrections and improvements to various inline docblocks. 2020-07-23 07:39:02 +00:00
class-wp-http-curl.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
class-wp-http-encoding.php
class-wp-http-ixr-client.php Docs: First pass at some inline docs fixes mostly made by PHPCBF. 2020-07-23 20:01:04 +00:00
class-wp-http-proxy.php
class-wp-http-requests-hooks.php Docs: Standardise the type name for booleans and integers. 2020-10-10 20:02:05 +00:00
class-wp-http-requests-response.php
class-wp-http-response.php
class-wp-http-streams.php Docs: Various docblock corrections and improvements. 2020-11-14 16:35:06 +00:00
class-wp-image-editor-gd.php Media: Return WP_Error when cropping with bad input to avoid fatal. 2020-12-04 21:46:06 +00:00
class-wp-image-editor-imagick.php Coding Standards: Use consistent formatting for error messages in WP_Image_Editor_Imagick::write_image() and ::strip_meta(). 2020-11-09 15:35:05 +00:00
class-wp-image-editor.php Media: Support Stream Wrappers In WP_Image_Editor_Imagick 2020-10-20 14:37:05 +00:00
class-wp-list-util.php Coding Standards: Use strict comparison in WP_List_Util::filter(). 2020-07-10 12:46:09 +00:00
class-wp-locale-switcher.php I18N: Revert [49236] for now to investigate alternative implementations. 2020-11-12 14:43:09 +00:00
class-wp-locale.php Docs: Update the URL for PHP date formats table in translator comments. 2020-09-18 10:37:08 +00:00
class-wp-matchesmapregex.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
class-wp-meta-query.php Docs: Improve docs for arguments that accept a numerically indexed array of associative arrays. 2020-07-14 12:10:05 +00:00
class-wp-metadata-lazyloader.php
class-wp-network-query.php Networks and Sites: Assign the array of site or network data returned from filters to the respective class property: 2020-11-08 11:47:06 +00:00
class-wp-network.php
class-wp-object-cache.php
class-wp-oembed-controller.php Docs: Corrections and improvements to inline docs relating to the REST API. 2020-11-16 11:04:12 +00:00
class-wp-oembed.php Docs: Document the $args parameter of wp_oembed_get(). 2020-11-17 10:11:11 +00:00
class-wp-paused-extensions-storage.php
class-wp-post-type.php Docs: Change the @since entry for template and template_lock post type arguments to 5.0.0. 2020-11-04 02:47:05 +00:00
class-wp-post.php Docs: Docblock corrections relating to WP_Post objects. 2020-11-09 15:15:08 +00:00
class-wp-query.php Docs: Improve documentation for WP_Query::is_archive() per the documentation standards. 2020-11-05 09:44:05 +00:00
class-wp-recovery-mode-cookie-service.php Docs: Consistently use third-person singular verbs for various filter descriptions, per the documentation standards. 2020-08-11 00:34:08 +00:00
class-wp-recovery-mode-email-service.php Docs: Add a @since note for the recovery_mode_email filter about the $email argument now including the attachments key. 2020-09-18 11:03:02 +00:00
class-wp-recovery-mode-key-service.php
class-wp-recovery-mode-link-service.php Docs: Consistently use third-person singular verbs for various filter descriptions, per the documentation standards. 2020-08-11 00:34:08 +00:00
class-wp-recovery-mode.php Docs: Consistently use third-person singular verbs for various filter descriptions, per the documentation standards. 2020-08-11 00:34:08 +00:00
class-wp-rewrite.php Code Modernization: Use explicit visibility for class property declarations. 2020-10-17 16:26:09 +00:00
class-wp-role.php Docs: Various formatting improvements to inline docblocks. 2020-07-23 00:52:05 +00:00
class-wp-roles.php Docs: First pass at some inline docs fixes mostly made by PHPCBF. 2020-07-23 20:01:04 +00:00
class-wp-session-tokens.php Code Modernization: Remove final keyword from private methods. 2020-08-12 15:05:08 +00:00
class-wp-simplepie-file.php Feed: Merge multiple header values to avoid fatal error. 2020-12-16 14:26:06 +00:00
class-wp-simplepie-sanitize-kses.php Docs: Standardise the type name for booleans and integers. 2020-10-10 20:02:05 +00:00
class-wp-site-query.php Networks and Sites: Assign the array of site or network data returned from filters to the respective class property: 2020-11-08 11:47:06 +00:00
class-wp-site.php
class-wp-tax-query.php Docs: Improve docs for arguments that accept a numerically indexed array of associative arrays. 2020-07-14 12:10:05 +00:00
class-wp-taxonomy.php Taxonomy: Revert Light-weight/partial term counts. 2020-10-30 04:59:08 +00:00
class-wp-term-query.php Users: Use do_action_ref_array() for pre_get_users and pre_get_terms actions. 2020-11-17 20:09:05 +00:00
class-wp-term.php
class-wp-text-diff-renderer-inline.php
class-wp-text-diff-renderer-table.php Coding Standards: Replace alias PHP functions with the canonical names. 2020-10-18 17:27:06 +00:00
class-wp-theme.php Bundled Themes: Make Twenty Twenty-One the default theme. 2020-10-20 02:04:07 +00:00
class-wp-user-meta-session-tokens.php
class-wp-user-query.php Users: Use do_action_ref_array() for pre_get_users and pre_get_terms actions. 2020-11-17 20:09:05 +00:00
class-wp-user-request.php
class-wp-user.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
class-wp-walker.php Docs: Fix typo in a comment in Walker::display_element(). 2020-11-05 18:46:10 +00:00
class-wp-widget-factory.php
class-wp-widget.php Docs: Standardise the type name for booleans and integers. 2020-10-10 20:02:05 +00:00
class-wp-xmlrpc-server.php XML-RPC: Return error message if attachment ID is incorrect. 2020-10-29 18:05:06 +00:00
class-wp.php Docs: Synchronize descriptions of some query functions and their counterpart methods in WP and WP_Query classes: 2020-10-06 08:59:04 +00:00
class.wp-dependencies.php
class.wp-scripts.php Script Loader: Disable concatenation for scripts with translations to ensure they are printed in the right order. 2020-08-27 21:58:04 +00:00
class.wp-styles.php
comment-template.php General: Ensure that filtered arguments in get_search_form() contain all required default values. 2020-10-28 16:57:08 +00:00
comment.php General: Remove noreferrer from wp_targeted_link_rel() and other uses. 2020-10-19 23:39:04 +00:00
compat.php Coding Standards: Replace alias PHP functions with the canonical names. 2020-10-18 17:27:06 +00:00
cron.php Cron API: Improve the inline documentation for the args passed to the cron event scheduling functions. 2020-10-28 18:37:07 +00:00
date.php
default-constants.php Bundled Themes: Make Twenty Twenty-One the default theme. 2020-10-20 02:04:07 +00:00
default-filters.php Block Editor: Update the WordPress Packages to the latest version. 2020-10-20 13:36:16 +00:00
default-widgets.php
deprecated.php Docs: Various docblock corrections and improvements. 2020-11-14 16:35:06 +00:00
embed-template.php
embed.php Build/Test Tools: Update several dependencies in the 5.6 branch. 2021-01-26 15:18:33 +00:00
error-protection.php Docs: Add more information about how to use filters that run before WordPress initialises. 2020-11-03 17:36:09 +00:00
feed-atom-comments.php
feed-atom.php
feed-rdf.php
feed-rss2-comments.php Docs: Use more appropriate variable names in the inline docs for action and filter parameters. 2020-07-23 19:06:03 +00:00
feed-rss2.php
feed-rss.php
feed.php Feeds: Register transient feed cache handler using the recommended method for SimplePie 1.3 or later. 2020-11-12 14:36:10 +00:00
formatting.php Build/Test Tools: Update several dependencies in the 5.6 branch. 2021-01-26 15:18:33 +00:00
functions.php Privacy: Ensure that exported user data reports can't be found with directory listings. 2021-01-27 23:48:58 +00:00
functions.wp-scripts.php Docs: Another pass at some inline docs fixes mostly made by PHPCBF. 2020-07-23 21:11:05 +00:00
functions.wp-styles.php
general-template.php Docs: Various docblock corrections and improvements. 2020-11-14 16:35:06 +00:00
http.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
kses.php Docs: Correct an example in wp_kses_normalize_entities() description. 2020-10-25 00:14:05 +00:00
l10n.php I18N: Avoid PHP notices for relative URLs in load_script_textdomain(). 2020-11-17 20:52:09 +00:00
link-template.php Permalinks: Prevent attachment pages 404ing following [49563]. 2020-11-17 03:29:12 +00:00
load.php General: Rename the wp_error_checked action to is_wp_error_instance for clarity. 2020-11-17 19:21:05 +00:00
locale.php
media-template.php Media: Fix the template for the "Align" and "Link To" fields in the media modal when inserting an image from URL. 2020-12-17 13:02:05 +00:00
media.php Media: Use consistent method for instantiating an attachment author object in Media Library. 2021-01-21 12:21:58 +00:00
meta.php Meta: Sanitize meta key before checking protection status. 2020-10-29 18:08:06 +00:00
ms-blogs.php Docs: Fix and upgrade various object docblock notations. 2020-10-17 16:05:09 +00:00
ms-default-constants.php
ms-default-filters.php
ms-deprecated.php
ms-files.php
ms-functions.php Multisite: Rename the calculate_current_dirsize filter to pre_recurse_dirsize. 2020-11-17 15:44:07 +00:00
ms-load.php Docs: Further corrections and promotions for docblocks relating to object types. 2020-10-18 20:53:08 +00:00
ms-network.php Coding Standards: Replace alias PHP functions with the canonical names. 2020-10-18 17:27:06 +00:00
ms-settings.php
ms-site.php Docs: Various docblock corrections and improvements. 2020-11-14 16:35:06 +00:00
nav-menu-template.php Docs: Miscellaneous DocBlock corrections. 2020-07-08 13:15:03 +00:00
nav-menu.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
option.php Docs: For clarity, add some information about the return types of get_option(). 2020-11-14 17:02:05 +00:00
pluggable-deprecated.php
pluggable.php Coding Standards: Replace alias PHP functions with the canonical names. 2020-10-18 17:27:06 +00:00
plugin.php Docs: Improve the docs for the globals that are used in the actions and filters API. 2020-10-18 19:19:06 +00:00
post-formats.php Docs: Docblock corrections relating to WP_Post objects. 2020-11-09 15:15:08 +00:00
post-template.php Coding Standards: Replace alias PHP functions with the canonical names. 2020-10-18 17:27:06 +00:00
post-thumbnail-template.php Media: Standardise the description for image size parameters. 2020-09-20 16:23:07 +00:00
post.php REST API: Pass the previous state of the post as a parameter to the wp_after_insert_post hook. 2020-12-01 20:57:05 +00:00
query.php Docs: Improve documentation for WP_Query::is_archive() per the documentation standards. 2020-11-05 09:44:05 +00:00
registration-functions.php Coding Standards: Pass an empty string instead of null as the $replacement parameter to _deprecated_file(). 2020-11-12 11:17:07 +00:00
registration.php Coding Standards: Pass an empty string instead of null as the $replacement parameter to _deprecated_file(). 2020-11-12 11:17:07 +00:00
rest-api.php Docs: Add missing full stop for a comment in create_initial_rest_routes(). 2020-11-16 16:48:12 +00:00
revision.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
rewrite.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
rss-functions.php Feeds: Add an early exit when calling RSS functions directly. 2020-11-16 22:52:05 +00:00
rss.php
script-loader.php Site Health, App Passwords: Ensure REST API responses are properly translated. 2020-12-01 18:07:08 +00:00
session.php
shortcodes.php Coding Standards: Replace alias PHP functions with the canonical names. 2020-10-18 17:27:06 +00:00
sitemaps.php Sitemaps: Prevent incorrect redirection of paged sitemap requests. 2020-08-27 01:30:04 +00:00
spl-autoload-compat.php Coding Standards: Pass an empty string instead of null as the $replacement parameter to _deprecated_file(). 2020-11-12 11:17:07 +00:00
taxonomy.php Docs: Fix typo in wp_get_object_terms filter DocBlock. 2020-11-16 17:28:08 +00:00
template-loader.php
template.php Themes: Allow template loading functions to pass additional arguments to the template via the $args parameter. 2020-07-07 11:01:59 +00:00
theme.php Themes: Clarify the _doing_it_wrong() message for post formats in add_theme_support(). 2020-10-29 00:08:06 +00:00
update.php Upgrade/Install: Allow WordPress sites to opt-in to beta & RC releases. 2020-10-20 17:56:06 +00:00
user.php App Passwords: Prevent conflicts when Basic Auth is already used by the site. 2020-12-04 21:48:03 +00:00
vars.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
version.php Privacy: Ensure that exported user data reports can't be found with directory listings. 2021-01-27 23:48:58 +00:00
widgets.php Docs: Clarify sprintf() usage for the before_widget argument of register_sidebar(). 2020-11-11 10:39:09 +00:00
wlwmanifest.xml
wp-db.php Code Modernization: Use explicit visibility for class property declarations. 2020-10-17 16:26:09 +00:00
wp-diff.php