WordPress/wp-includes
Aaron Campbell db266e95e1 Strip control characters before validating redirect.
Merges [40183] to 4.2 branch.

Built from https://develop.svn.wordpress.org/branches/4.2@40189


git-svn-id: http://core.svn.wordpress.org/branches/4.2@40128 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 13:44:24 +00:00
..
certificates
css WordPress 4.2 2015-04-23 16:26:10 +00:00
fonts
ID3
images Smilies: Update our few remaining smilies to better align with Twemoji, and add frownie.png until Twemoji provide a build containing it. 2015-04-10 06:20:26 +00:00
js External Libraries: Update plupload from upstream 2016-05-06 17:59:26 +00:00
pomo Replace array_shift() with reset() where appropriate for performance. 2015-03-19 03:56:27 +00:00
SimplePie
Text
theme-compat Theme Compat: Make string translatable and add translator comments. Added in [31941]. 2015-04-08 18:15:28 +00:00
admin-bar.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
atomlib.php
author-template.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
bookmark-template.php
bookmark.php
cache.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
canonical.php If the URL being visited has non-breaking spaces at the end of it, they were probably inserted by an errant URL copy/paste. Instead of showing a 404 for no obvious reason, let's just trim them. 2015-03-20 01:02:28 +00:00
capabilities.php Capabilities: Fall back to the edit_posts capability for orphaned comments. 2015-09-09 06:01:28 +00:00
category-template.php Fix description alignment for the category_css_class filter docs. 2015-04-05 14:49:27 +00:00
category.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
class-feed.php In PHP 5.0.0, is_a() became deprecated in favour of the instanceof operator. Calling is_a() would result in an E_STRICT warning. 2015-01-16 01:06:24 +00:00
class-http.php self should be used for accessing local static members. 2015-03-09 02:22:26 +00:00
class-IXR.php
class-json.php
class-oembed.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
class-phpass.php
class-phpmailer.php Update PHPMailer to 5.2.22. 2017-01-11 05:25:28 +00:00
class-pop3.php
class-simplepie.php
class-smtp.php Update PHPMailer to 5.2.22. 2017-01-11 05:25:28 +00:00
class-snoopy.php Snoopy: use escapeshellarg instead of escapeshellcmd 2016-03-30 14:08:28 +00:00
class-wp-admin-bar.php Accessibility: Add landmark roles to WordPress admin areas. 2015-04-01 13:17:27 +00:00
class-wp-ajax-response.php
class-wp-customize-control.php Theme Switcher: Provide an easier way to reset back to the current active theme. 2015-04-22 16:15:27 +00:00
class-wp-customize-manager.php Theme Switcher: Provide an easier way to reset back to the current active theme. 2015-04-22 16:15:27 +00:00
class-wp-customize-panel.php Add a missing file header to wp-includes/class-wp-customize-panel.php, separate out the class DocBlock for WP_Customize_Panel. 2015-02-25 08:09:25 +00:00
class-wp-customize-section.php Customizer Theme Switcher: Use text input for the search field to prevent double tap issues for Preview and Customize buttons on iOS. 2015-04-14 17:45:27 +00:00
class-wp-customize-setting.php Add missing @access tags to two DocBlocks in WP_Customize_Setting. 2015-04-05 15:17:27 +00:00
class-wp-customize-widgets.php Customizer: Use hash_equals() for widgets. 2015-08-04 04:52:16 +00:00
class-wp-editor.php Remove some old backwards compatilibity code from TinyMCE. 2015-04-20 05:50:27 +00:00
class-wp-embed.php Backport r33469 and r33470 to 4.2. 2015-07-30 19:41:27 +00:00
class-wp-error.php In PHP 5.0.0, is_a() became deprecated in favour of the instanceof operator. Calling is_a() would result in an E_STRICT warning. 2015-01-16 01:06:24 +00:00
class-wp-http-ixr-client.php
class-wp-image-editor-gd.php In the ->multi_resize() method of the WP_Image_Editor subclasses, when looping through potential crops, we need to make sure the crop isn't the exact same dimensions as the original image before copying it as a new crop. 2015-02-27 19:38:27 +00:00
class-wp-image-editor-imagick.php In the ->multi_resize() method of the WP_Image_Editor subclasses, when looping through potential crops, we need to make sure the crop isn't the exact same dimensions as the original image before copying it as a new crop. 2015-02-27 19:38:27 +00:00
class-wp-image-editor.php
class-wp-theme.php Themes: Fix markup for theme name fallbacks. 2017-01-11 11:11:56 +00:00
class-wp-walker.php
class-wp-xmlrpc-server.php XMLRPC: Don't allow private posts to be sticky. 2015-09-14 22:51:28 +00:00
class-wp.php [31210] broke Supportflow on dotorg, which declares these methods as protected. Switch to protected for the noop methods. The subclasses can make them more visible using public. 2015-01-16 18:37:24 +00:00
class.wp-dependencies.php
class.wp-scripts.php Revert [31030] and [31033]. Incidentally, there is no lazy-loading happening here anyway. 2015-04-14 15:13:28 +00:00
class.wp-styles.php
comment-template.php In comment_form(), ensure that filtered arguments contain all required default values. 2015-07-17 06:14:26 +00:00
comment.php WPDB: When checking that a string can be sent to MySQL, we shouldn't use mb_convert_encoding(), as it behaves differently to MySQL's character encoding conversion. 2015-05-06 03:30:30 +00:00
compat.php WPDB: When checking that a string can be sent to MySQL, we shouldn't use mb_convert_encoding(), as it behaves differently to MySQL's character encoding conversion. 2015-05-06 03:30:30 +00:00
cron.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
date.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
default-constants.php
default-filters.php Clean up wp_staticize_emoji() and friends. 2015-04-20 04:15:26 +00:00
default-widgets.php Nav menus: Consistent titles in widgets. 2015-08-03 20:57:42 +00:00
deprecated.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
feed-atom-comments.php
feed-atom.php
feed-rdf.php
feed-rss.php
feed-rss2-comments.php
feed-rss2.php
feed.php Clean up wp_staticize_emoji() and friends. 2015-04-20 04:15:26 +00:00
formatting.php Media: Improve handling of extensionless filenames. 2016-06-21 14:56:48 +00:00
functions.php Media: Fix exif_imagetype check in wp_get_image_mime 2017-01-11 16:43:32 +00:00
functions.wp-scripts.php Revert [31030] and [31033]. Incidentally, there is no lazy-loading happening here anyway. 2015-04-14 15:13:28 +00:00
functions.wp-styles.php Add a missing return description for wp_styles(). 2015-04-05 15:56:26 +00:00
general-template.php Update more instances of default admin blues and grays. 2015-04-05 21:20:27 +00:00
http.php HTTP: Improve detection of valid IP addresses. 2016-03-30 15:52:12 +00:00
kses.php Shortcodes: Improve the reliablity of shortcodes inside HTML tags. 2015-07-22 05:44:27 +00:00
l10n.php Don't blindly trust the output of glob() to be an array. 2015-07-29 06:53:28 +00:00
link-template.php Press This: check the bookmarklet version and add the update notice from PHP. 2015-04-10 21:08:29 +00:00
load.php Add useremail and userslugs as global cache groups. fixes #31243. 2015-02-06 03:24:23 +00:00
locale.php
media-template.php Revert editing of video embed parameters in the media modal, [31620] and [31626] for now. Plan on revisiting in 4.3. 2015-04-21 22:41:26 +00:00
media.php Embeds: URL encode YouTube video IDs for broader compatibility. 2017-03-06 12:07:35 +00:00
meta.php Add a missing @access tag to the DocBlock for the WP_Meta_Query->$clauses property. 2015-04-05 16:11:27 +00:00
ms-blogs.php Remove leading space from the definition of a global cache group. 2015-02-06 03:26:22 +00:00
ms-default-constants.php
ms-default-filters.php There are some random add_action() and add_filter() calls littered around some files in wp-includes/. These should be moved to wp-includes/default-filters.php with the rest of the registered hooks. It seems like this was the best practice for awhile and then we randomly stopped. This file loads way before any of the includes, so the hooks will be registered for any request that loads WordPress, even SHORTINIT - a lot of the hooks registered won't run anyways (that's already the case). 2015-01-12 16:40:23 +00:00
ms-deprecated.php [31210] broke Supportflow on dotorg, which declares these methods as protected. Switch to protected for the noop methods. The subclasses can make them more visible using public. 2015-01-16 18:37:24 +00:00
ms-files.php
ms-functions.php Multisite: Use wp_rand() in signup key creation. 2017-01-11 05:34:56 +00:00
ms-load.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
ms-settings.php
nav-menu-template.php There are some random add_action() and add_filter() calls littered around some files in wp-includes/. These should be moved to wp-includes/default-filters.php with the rest of the registered hooks. It seems like this was the best practice for awhile and then we randomly stopped. This file loads way before any of the includes, so the hooks will be registered for any request that loads WordPress, even SHORTINIT - a lot of the hooks registered won't run anyways (that's already the case). 2015-01-12 16:40:23 +00:00
nav-menu.php Nav menus: Return to calling links "Custom Links". 2015-03-12 06:15:27 +00:00
option.php Allow $autoload setting to be changed for existing options using update_option(). 2015-03-06 13:57:26 +00:00
pluggable-deprecated.php
pluggable.php Strip control characters before validating redirect. 2017-03-06 13:44:24 +00:00
plugin.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
post-formats.php Replace array_shift() with reset() where appropriate for performance. 2015-03-19 03:56:27 +00:00
post-template.php Admin: Escape attachment name in case it contains special characters 2016-06-21 14:26:11 +00:00
post-thumbnail-template.php Adjust DocBlocks for get_|the_post_thumbnail() to clarify the difference between the 'thumbnail' and 'post-thumbnail' image sizes. 2015-03-20 19:57:26 +00:00
post.php Comments: IDs are integers. 2015-08-04 04:59:00 +00:00
query.php Query: Ensure that queries work correctly with post type names with special characters. 2017-01-26 13:52:00 +00:00
registration-functions.php
registration.php
revision.php
rewrite.php When shifting WP_Rewrite::flush_rules() to a later action if it was called too early, make sure to do a hard flush if requested. 2015-04-01 19:06:29 +00:00
rss-functions.php
rss.php
script-loader.php External Libraries: Update MediaElement.js from upstream. 2016-05-06 17:55:00 +00:00
session.php Fix some internal types that are passed to functions to avoid changing the acceptable types passed as arguments to those functions: 2015-01-16 22:51:21 +00:00
shortcodes.php Shortcodes: don't allow unclosed HTML elements in attributes 2015-09-14 22:48:27 +00:00
taxonomy.php Taxonomies: make sure taxonomy functions work correctly with taxonomy names with special characters 2016-03-30 17:29:28 +00:00
template-loader.php
template.php In PHP 5.0.0, is_a() became deprecated in favour of the instanceof operator. Calling is_a() would result in an E_STRICT warning. 2015-01-16 01:06:24 +00:00
theme.php Themes: Fix some broken links in the legacy theme preview. 2015-08-04 04:56:47 +00:00
update.php Background Updates: Remove the 7am/7pm background update check. 2016-01-06 13:24:33 +00:00
user.php Ensure that 'who' param is respected when generating meta_query in WP_User_Query. 2015-04-20 15:16:27 +00:00
vars.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
version.php Bump 4.2 branch to version 4.2.12. 2017-01-26 18:25:29 +00:00
widgets.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
wlwmanifest.xml
wp-db.php WPDB: get_table_from_query() didn't find table names with hyphens in them. 2015-09-10 06:57:28 +00:00
wp-diff.php Add a missing description for the $_diff_threshold property in the WP_Text_Diff_Renderer_Table class. 2015-01-29 11:36:22 +00:00