John Blackbourn
7cb146f92a
Build/Test tools: Further trimming of CI jobs on the 4.7 branch.
...
This removes the PHP 5.6 job which runs without an object cache in place as the likelihood of a change being backported that only breaks 5.6 environments without an object cache is small.
Merges [45005] into the 4.7 branch.
See #42387
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@45008 602fd350-edb4-49c9-b593-d223f7449a82
2019-03-25 16:26:30 +00:00
John Blackbourn
22197bb051
Build/Test tools: Switch npm dependency caching strategy on Travis CI.
...
This switches to caching npm's local cache instead of `node_modules` in order to prevent issues caused by modules compiled using a different version of node.
Merges [44993] into the 4.7 branch.
See #46632
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@44998 602fd350-edb4-49c9-b593-d223f7449a82
2019-03-25 00:56:45 +00:00
Gary Pendergast
8ce540c75a
WordPress 4.7.13
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@44872 602fd350-edb4-49c9-b593-d223f7449a82
2019-03-13 01:12:46 +00:00
Sergey Biryukov
1961df533b
Comments: Improve comment content filtering.
...
Merges [44842] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@44847 602fd350-edb4-49c9-b593-d223f7449a82
2019-03-12 22:35:52 +00:00
Sergey Biryukov
ba357da827
Formatting: Improve rel="nofollow"
handling in comments.
...
Merges [44833] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@44838 602fd350-edb4-49c9-b593-d223f7449a82
2019-03-12 22:21:44 +00:00
Jeremy Felt
bf9a7a79cc
Bump 4.7 branch to version 4.7.12.
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@44080 602fd350-edb4-49c9-b593-d223f7449a82
2018-12-13 02:11:39 +00:00
Gary Pendergast
78e2bde3cd
Editor: Remove unwanted fields before saving posts.
...
The `meta_input`, `file`, and `guid` fields are not intended to be updated through user input.
Merges [44047] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@44056 602fd350-edb4-49c9-b593-d223f7449a82
2018-12-13 01:40:40 +00:00
Peter Wilson
ea84b9bad8
Multisite: Validate activation links.
...
Merges [44048] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@44054 602fd350-edb4-49c9-b593-d223f7449a82
2018-12-13 01:38:24 +00:00
Ian Dunn
a3fc848cb6
KSES: Make the URI attributes DRY.
...
This commit introduces the `wp_kses_uri_attributes` function and filter. The function centralizes the list of attributes, in order to prevent inconsistency, and the filter provides a way for plugins to customize the attributes.
Merges [44014] and [44017] to the `4.7` branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@44027 602fd350-edb4-49c9-b593-d223f7449a82
2018-12-13 00:43:21 +00:00
Peter Wilson
e4b7c0bf40
Multisite: Improve messaging for previously activated users.
...
Ensure activation of a site is not attempted multiple times and users are shown the correct message if they follow the link a second time.
Merges [44021] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@44026 602fd350-edb4-49c9-b593-d223f7449a82
2018-12-13 00:39:23 +00:00
Gary Pendergast
3cdf982fff
KSES: Conditionally remove the <form>
element from $allowedposttags
.
...
To avoid backwards compatibility issues, `<form>` is re-added if a custom filter has added the `<input>` or `<select>` elements to `$allowedposttags`.
Merges [43994] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@44000 602fd350-edb4-49c9-b593-d223f7449a82
2018-12-12 23:24:50 +00:00
Jeremy Felt
efd9885803
Media: Improve verification of MIME file types.
...
Merges [43988] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@43991 602fd350-edb4-49c9-b593-d223f7449a82
2018-12-12 23:04:17 +00:00
Aaron D. Campbell
3e822cbf1c
Bump 4.7 branch to version 4.7.11
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@43409 602fd350-edb4-49c9-b593-d223f7449a82
2018-07-05 16:10:24 +00:00
John Blackbourn
824d5b6bd3
Media: Limit thumbnail file deletions to the same directory as the original file.
...
Merges [43393] into the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@43395 602fd350-edb4-49c9-b593-d223f7449a82
2018-07-05 14:50:26 +00:00
Aaron D. Campbell
c993a967e6
Bump 4.7 branch to version 4.7.10
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42935 602fd350-edb4-49c9-b593-d223f7449a82
2018-04-03 20:26:02 +00:00
Dominik Schilling (ocean90)
3700a18382
Template: Make sure the version string is correctly escaped for use in attributes.
...
Merge of [42893] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42919 602fd350-edb4-49c9-b593-d223f7449a82
2018-04-03 16:05:30 +00:00
Dominik Schilling (ocean90)
278641ebbc
Meta: Simplify the delete all meta query in delete_metadata()
.
...
Merge of [42913] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42914 602fd350-edb4-49c9-b593-d223f7449a82
2018-04-03 15:40:58 +00:00
Dominik Schilling (ocean90)
42b1dd5acc
HTTP: Don't treat localhost
as same host by default.
...
Merge of [42894] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42910 602fd350-edb4-49c9-b593-d223f7449a82
2018-04-03 15:34:45 +00:00
Dominik Schilling (ocean90)
6d5d03d9a1
Login: Use wp_safe_redirect()
when redirecting the login page if forced to use HTTPS.
...
Merge of [42892] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42897 602fd350-edb4-49c9-b593-d223f7449a82
2018-04-03 15:28:30 +00:00
Sergey Biryukov
54a3c366e5
General: Update copyright year to 2018 in license.txt.
...
Props rachelbaker.
Merges [42424] to the 4.7 branch.
Fixes #43007 .
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42554 602fd350-edb4-49c9-b593-d223f7449a82
2018-01-23 11:25:19 +00:00
Dion Hulse
7ec2dc809d
Bump the 4.7 branch to 4.7.9.
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42496 602fd350-edb4-49c9-b593-d223f7449a82
2018-01-16 21:38:55 +00:00
Dion Hulse
698a3fb29c
External Libraries: Remove unnecessary / obsoleted MediaElement.js files.
...
Merges [42478] to the 4.7 branch.
Fixes #42720 for 4.7.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42479 602fd350-edb4-49c9-b593-d223f7449a82
2018-01-16 08:05:00 +00:00
Dion Hulse
5018b6595c
Upgrade: When deleting old files, if deletion fails attempt to empty the file instead.
...
Props joemcgill, dd32.
Merges [42434] to the 4.7 branch.
Fixes #42963 for 4.7.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42467 602fd350-edb4-49c9-b593-d223f7449a82
2018-01-16 06:52:42 +00:00
John Blackbourn
e80bdf5116
Bump 4.7 branch to 4.7.8.
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42318 602fd350-edb4-49c9-b593-d223f7449a82
2017-11-29 18:57:45 +00:00
John Blackbourn
87ac33af45
Hardening: Remove the ability to upload JavaScript files for users who do not have the unfiltered_html
capability.
...
Merges [42261] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42275 602fd350-edb4-49c9-b593-d223f7449a82
2017-11-29 16:19:42 +00:00
John Blackbourn
662033dc14
Hardening: Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds.
...
Merges [42260] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42274 602fd350-edb4-49c9-b593-d223f7449a82
2017-11-29 16:18:56 +00:00
John Blackbourn
2700e8e672
Hardening: Add escaping to the language attributes used on html
elements.
...
Merges [42259] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42273 602fd350-edb4-49c9-b593-d223f7449a82
2017-11-29 16:17:04 +00:00
John Blackbourn
c30d484e4f
Hardening: Use a properly generated hash for the newbloguser
key instead of a determinate substring.
...
Merges [42258] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42272 602fd350-edb4-49c9-b593-d223f7449a82
2017-11-29 16:16:03 +00:00
John Blackbourn
2844aa499e
Users: Correct the value of the lang
attribute in the admin area.
...
This corrects the value when the user's language is set to `English (United States)` but the site language is not.
Props ocean90, afercia
See #42242
Merges [42220] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42263 602fd350-edb4-49c9-b593-d223f7449a82
2017-11-29 16:05:10 +00:00
Dion Hulse
eeb633b797
WPDB: Check that AUTH_SALT
is not empty, Fix a PHP notice when AUTH_SALT
is undefined.
...
Props jsonfry, mkomar, pento.
Merges [42119] and [42120] to the 4.7 branch.
Fixes #42431 and #42401 for 4.7.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42231 602fd350-edb4-49c9-b593-d223f7449a82
2017-11-27 01:07:45 +00:00
John Blackbourn
4e26af05f6
General: Remove the version number from the readme file in the 4.7 branch.
...
See #42386
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42100 602fd350-edb4-49c9-b593-d223f7449a82
2017-10-31 18:05:59 +00:00
Gary Pendergast
0c987581fe
Bump 4.7 branch to version 4.7.7.
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42070 602fd350-edb4-49c9-b593-d223f7449a82
2017-10-31 13:12:09 +00:00
Gary Pendergast
16a56fae1f
Database: Restore numbered placeholders in wpdb::prepare()
.
...
[41496] removed support for numbered placeholders in queries send through `wpdb::prepare()`, which, despite being undocumented, were quite commonly used.
This change restores support for numbered placeholders (as well as a subset of placeholder formatting), while also adding extra checks to ensure the correct number of arguments are being passed to `wpdb::prepare()`, given the number of placeholders.
Merges [41662], [42056] to the 4.7 branch.
See #41925 .
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42058 602fd350-edb4-49c9-b593-d223f7449a82
2017-10-31 12:33:25 +00:00
Gary Pendergast
dc63393569
Build/Test Tools: Pass correct $message
argument to WP_UnitTestCase::setExpectedException()
in Tests_Ajax_CompressionTest::test_logged_out()
and Tests_Ajax_TagSearch::test_no_results()
.
...
PHPUnit 6.4.1 and earlier versions ignored the `'0'` value, causing the issue to go unnoticed.
Merge of [41870] to the 4.7 branch.
Props SergeyBiryukov.
See #42232 .
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@42052 602fd350-edb4-49c9-b593-d223f7449a82
2017-10-31 06:19:42 +00:00
Dominik Schilling (ocean90)
ed053e1cd6
Taxonomy/Users: Use correct escaping function for URLs.
...
Merge of [41522] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41524 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 21:20:09 +00:00
Dominik Schilling (ocean90)
71cf727550
Bump 4.7 branch to version 4.7.6.
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41511 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 19:55:25 +00:00
Dominik Schilling (ocean90)
065a0ac2f4
Bump 4.7 branch to version 4.7.3.
...
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41510 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 19:50:22 +00:00
Aaron D. Campbell
c134dea3b6
Database: Hardening to bring wpdb::prepare()
inline with documentation.
...
`wpdb::prepare()` supports %s, %d, and %F as placeholders in the query string. Any other non-escaped % will be escaped.
Merges [41496] to 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41498 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 18:11:46 +00:00
Aaron D. Campbell
48d3ca8825
Database: Don’t trigger _doing_it_wrong()
for null values in wpdb::prepare()
.
...
While `wpdb::prepare()` does not support null values (see #12819 ) they still appear in the wild like in the WordPress Importer and other plugins.
Merges [41483] to 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41485 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 16:18:58 +00:00
Aaron D. Campbell
66f675be1c
Database: Hardening for wpdb::prepare()
...
Previously if you passed an array of values for placeholders, additional values could be passed as well. Now additional values will be ignored.
Merges [41470] to 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41472 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 14:58:49 +00:00
John Blackbourn
1dcdbc9d60
Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues.
...
Merges [41457] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41459 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 14:38:01 +00:00
Aaron D. Campbell
61c059d708
oEmbed: Add extra hardening around allowed HTML for improved sandboxing.
...
Merges [41448] to 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41451 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 13:47:30 +00:00
Dominik Schilling (ocean90)
f97c9838d5
TinyMCE: Improve the previews for shortcodes.
...
Merge of [41395] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41436 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 12:40:10 +00:00
Dominik Schilling (ocean90)
55f0d1aeb1
Customize: Ensure valid themes in the preview.
...
Merge of [41397] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41430 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 11:49:40 +00:00
Dominik Schilling (ocean90)
b7b7358c90
Taxonomy/Users: Provide a fallback for incorrect HTTP referrers.
...
Merge of [41398] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41418 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 11:10:23 +00:00
John Blackbourn
db84ba77ad
General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.
...
Merges [41412] to the 4.7 branch
See #13377
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41413 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 10:17:44 +00:00
Dominik Schilling (ocean90)
dd44bf6b4c
Editor: Prevent adding javascript:
and data:
URLs through the inline link dialog.
...
Merge of [41393] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41401 602fd350-edb4-49c9-b593-d223f7449a82
2017-09-19 10:14:45 +00:00
John Blackbourn
597a88861b
Build/Test tools: Trim the test matrix on Travis in order to speed up the 4.7 branch build.
...
This removes the PHP 7.0, 5.5, 5.4, 5.3, and nightly jobs.
Fixes #41707
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41307 602fd350-edb4-49c9-b593-d223f7449a82
2017-08-22 21:40:43 +00:00
John Blackbourn
f780dd4734
Build/Test Tools: Remove ancient UT ticket handling for the 4.7 branch.
...
See #40533
Merges [40523] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41305 602fd350-edb4-49c9-b593-d223f7449a82
2017-08-22 19:58:16 +00:00
John Blackbourn
0935a18cc7
Build/Test tools: Use the latest in the 4.x and 6.x branches of PHPUnit when running tests on Travis for the 4.7 branch.
...
See #41472
Merges [41294] to the 4.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/4.7@41296 602fd350-edb4-49c9-b593-d223f7449a82
2017-08-22 17:10:00 +00:00