Commit Graph

292 Commits

Author SHA1 Message Date
Andrew Nacin 492a5d031c Update esc_url() phpdoc. props sirzooro, fixes #18766.
git-svn-id: https://develop.svn.wordpress.org/trunk@18769 602fd350-edb4-49c9-b593-d223f7449a82
2011-09-24 19:52:26 +00:00
Jon Cave 92054191a1 wp_strip_all_tags() in wp_trim_words() to remove CSS and JS within tags. Props evansolomon. Fixes #18726.
git-svn-id: https://develop.svn.wordpress.org/trunk@18742 602fd350-edb4-49c9-b593-d223f7449a82
2011-09-21 20:39:21 +00:00
Ryan Boren 6ed92f4fb1 Run the sanitize_option_* filter for all options in sanitize_option(). Add some sanity checks for the permalink options while in there. fixes #18737
git-svn-id: https://develop.svn.wordpress.org/trunk@18738 602fd350-edb4-49c9-b593-d223f7449a82
2011-09-21 19:05:06 +00:00
Jon Cave ed5fdbb499 Abstract word-trimming from wp_trim_excerpt() into wp_trim_words(). Props nacin. Fixes #16372.
git-svn-id: https://develop.svn.wordpress.org/trunk@18732 602fd350-edb4-49c9-b593-d223f7449a82
2011-09-20 17:14:23 +00:00
Andrew Nacin 5c6b6c074f Strip a number of special characters in sanitize_title_with_dashes on save. Includes quotes (curly, angle), dashes, marks, etc. props SergeyBiryukov. props ampt for the unit tests in [UT438]. see #10797.
git-svn-id: https://develop.svn.wordpress.org/trunk@18705 602fd350-edb4-49c9-b593-d223f7449a82
2011-09-18 19:53:59 +00:00
Jon Cave 205aa5ba5c Fix typos in documentation (wp-includes/[a-h]). See #18560.
git-svn-id: https://develop.svn.wordpress.org/trunk@18633 602fd350-edb4-49c9-b593-d223f7449a82
2011-09-03 16:02:41 +00:00
Andrew Nacin a73c0ef107 Add 'q' tag to nestable tags list in force_balance_tags(). props solarissmoke, fixes #6870.
git-svn-id: https://develop.svn.wordpress.org/trunk@18585 602fd350-edb4-49c9-b593-d223f7449a82
2011-08-23 15:37:38 +00:00
Ryan Boren fe742b417f Better double encoding handling in _wp_special_chars(). Props miqrogroove.
git-svn-id: https://develop.svn.wordpress.org/trunk@18485 602fd350-edb4-49c9-b593-d223f7449a82
2011-07-29 20:43:45 +00:00
Ryan Boren 4a1c73746f Recognize urls that start with a question mark as relative urls that do not require a scheme to be prepended. fixes #18260
git-svn-id: https://develop.svn.wordpress.org/trunk@18469 602fd350-edb4-49c9-b593-d223f7449a82
2011-07-26 19:44:18 +00:00
Peter Westwood fe2dc7c083 Make [18456] more obvious. Fixes #16432.
git-svn-id: https://develop.svn.wordpress.org/trunk@18465 602fd350-edb4-49c9-b593-d223f7449a82
2011-07-25 13:20:07 +00:00
Andrew Nacin ac3ab55d1e Add pre_ent2ncr filter. props GaryJ, fixes #16432.
git-svn-id: https://develop.svn.wordpress.org/trunk@18456 602fd350-edb4-49c9-b593-d223f7449a82
2011-07-21 21:41:21 +00:00
Ryan Boren 091ec81919 Hardening. Santizers for WPLANG and new_admin_email. Prevent stomping ID and filter. Validate locale filename. Props westi.
git-svn-id: https://develop.svn.wordpress.org/trunk@18346 602fd350-edb4-49c9-b593-d223f7449a82
2011-06-27 15:56:42 +00:00
Ryan Boren 80640b5e25 Allow plus '+' character when sanitizing mime type. Props cyberhobo. fixes #17855
git-svn-id: https://develop.svn.wordpress.org/trunk@18324 602fd350-edb4-49c9-b593-d223f7449a82
2011-06-20 20:05:57 +00:00
Peter Westwood 41d548231e Ensure we have a valid timezone identifier before trying to use it.
Validate the new timezone identifier during option update.
Fixes #17840.

git-svn-id: https://develop.svn.wordpress.org/trunk@18323 602fd350-edb4-49c9-b593-d223f7449a82
2011-06-20 14:58:50 +00:00
Andrew Ozz 9b95eedd76 Fix typo in remove_accents(), props scribu, fixes #16232
git-svn-id: https://develop.svn.wordpress.org/trunk@18159 602fd350-edb4-49c9-b593-d223f7449a82
2011-06-06 02:22:50 +00:00
Ryan Boren 640eed5f4a Update @since
git-svn-id: https://develop.svn.wordpress.org/trunk@18032 602fd350-edb4-49c9-b593-d223f7449a82
2011-05-25 15:47:17 +00:00
Ryan Boren 57b6c9aeda Sanitize guid on save and display. Sanitize mime type on save. Don't allow changing mime type via edit form handlers. Protect hidden meta.
git-svn-id: https://develop.svn.wordpress.org/trunk@17994 602fd350-edb4-49c9-b593-d223f7449a82
2011-05-22 23:19:42 +00:00
Ryan Boren 92b4ffafc3 Properly anchor mime preg.
git-svn-id: https://develop.svn.wordpress.org/trunk@17990 602fd350-edb4-49c9-b593-d223f7449a82
2011-05-22 23:17:09 +00:00
Andrew Nacin 4d9fdaff0a s/coma/comma/. props ocean90.
git-svn-id: https://develop.svn.wordpress.org/trunk@17982 602fd350-edb4-49c9-b593-d223f7449a82
2011-05-21 15:20:25 +00:00
Ryan Boren cde1941b72 Revert part of [17920]. Support for empty tz must remain. Props johnjamesjacoby. fixes #17448
git-svn-id: https://develop.svn.wordpress.org/trunk@17958 602fd350-edb4-49c9-b593-d223f7449a82
2011-05-18 18:56:42 +00:00
Peter Westwood 93fe935843 Fix typos and inconsistencies in PHPdoc / function declarations. See #17414 props duck_
git-svn-id: https://develop.svn.wordpress.org/trunk@17925 602fd350-edb4-49c9-b593-d223f7449a82
2011-05-14 09:50:20 +00:00
Ryan Boren 6e20ec2284 Remove PHP5 back compat code from get_gmt_from_date. Props technosailor. fixes #16920
git-svn-id: https://develop.svn.wordpress.org/trunk@17920 602fd350-edb4-49c9-b593-d223f7449a82
2011-05-13 19:17:07 +00:00
Ryan Boren 0e80d3e440 Performance improvements for wptexturize(). Props solarissmoke, hakre. fixes #16684
git-svn-id: https://develop.svn.wordpress.org/trunk@17636 602fd350-edb4-49c9-b593-d223f7449a82
2011-04-13 17:11:35 +00:00
Andrew Nacin e376455b17 Make underscores valid in sanitize_html_class. fixes #17067.
git-svn-id: https://develop.svn.wordpress.org/trunk@17614 602fd350-edb4-49c9-b593-d223f7449a82
2011-04-06 21:28:52 +00:00
Ryan Boren 4b40ff5454 Reduce backtracking in make_clickable() regex. Reduce pcre.recursion_limit to avoid segfaulting. Props hakre. For trunk.
git-svn-id: https://develop.svn.wordpress.org/trunk@17570 602fd350-edb4-49c9-b593-d223f7449a82
2011-03-28 21:39:16 +00:00
Ryan Boren 170a0cf96b Lose create_function() in links_add_target() and links_add_base_url(). esc_attr() the target to provide extra coverage for plugins. Props Justin Rainbow, nacin. For trunk
git-svn-id: https://develop.svn.wordpress.org/trunk@17459 602fd350-edb4-49c9-b593-d223f7449a82
2011-02-16 19:24:18 +00:00
Ryan Boren eba71eb7c0 Bring out the shears.
git-svn-id: https://develop.svn.wordpress.org/trunk@17228 602fd350-edb4-49c9-b593-d223f7449a82
2011-01-06 04:11:14 +00:00
Ryan Boren 2bc1d7f588 Don't be case sensitive to attribute names. Handle padded entities when checking for bad protocols. Normalize entities before checking for bad protocols in esc_url(). Props Mauro Gentile, duck_, miqrogroove
git-svn-id: https://develop.svn.wordpress.org/trunk@17171 602fd350-edb4-49c9-b593-d223f7449a82
2010-12-29 20:45:37 +00:00
Andrew Nacin f3419ea181 Revert [16995] due to the way the data enters the db. props garyc40, see #15454.
git-svn-id: https://develop.svn.wordpress.org/trunk@17142 602fd350-edb4-49c9-b593-d223f7449a82
2010-12-25 18:10:59 +00:00
Ryan Boren de072fe02a Remove some unnecessary esc_textarea() calls. Props garyc40. see #15454
git-svn-id: https://develop.svn.wordpress.org/trunk@17001 602fd350-edb4-49c9-b593-d223f7449a82
2010-12-16 17:48:20 +00:00
Mark Jaquith dda708677e Use ENT_QUOTES in esc_textarea() in case someone uses it in a value='' situation by accident. see #15454
git-svn-id: https://develop.svn.wordpress.org/trunk@16993 602fd350-edb4-49c9-b593-d223f7449a82
2010-12-16 09:24:22 +00:00
Peter Westwood 905ec5fb30 Ultimate make_clickable. Fixes #14993 props filosofo
git-svn-id: https://develop.svn.wordpress.org/trunk@16948 602fd350-edb4-49c9-b593-d223f7449a82
2010-12-15 13:43:30 +00:00
Peter Westwood a7dbb545d9 Revert [16279] - the recursive nature of this regex doesn't play well with stack space. See #14993
git-svn-id: https://develop.svn.wordpress.org/trunk@16692 602fd350-edb4-49c9-b593-d223f7449a82
2010-12-02 17:26:06 +00:00
Andrew Nacin ccea27cbe7 More param fixes, props duck_. see #14783.
git-svn-id: https://develop.svn.wordpress.org/trunk@16469 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-18 19:12:48 +00:00
Ryan Boren 4b33a0e9c4 Pinking shears
git-svn-id: https://develop.svn.wordpress.org/trunk@16438 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-17 18:47:34 +00:00
Mark Jaquith 55e0256967 esc_textarea() and application for obvious textarea escaping. props alexkingorg. fixes #15454
git-svn-id: https://develop.svn.wordpress.org/trunk@16431 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-17 17:12:01 +00:00
Andrew Nacin 32069ead9d Revert changes to wptexturize() until test cases pass. Reverts [16280], [16378]. see #4539 and #15241.
git-svn-id: https://develop.svn.wordpress.org/trunk@16409 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-16 22:18:48 +00:00
Peter Westwood 9b80ab8ce5 Fix regression in wptexturize with single quotes when used for contraction. See #15241 props norbertm.
git-svn-id: https://develop.svn.wordpress.org/trunk@16378 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-15 08:52:36 +00:00
Andrew Nacin 200eefec46 Use square brackets instead of braces for string access. props hakre, fixes #13900.
git-svn-id: https://develop.svn.wordpress.org/trunk@16340 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-13 09:53:55 +00:00
Andrew Nacin d8c91db1f4 Remove more create_function calls. props huichen, see #14424.
git-svn-id: https://develop.svn.wordpress.org/trunk@16313 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-11 22:50:36 +00:00
Peter Westwood 4a03447530 Improved RegEx for quote matching in wptexturize. Fixes #4539 and #15241 props norbertm.
git-svn-id: https://develop.svn.wordpress.org/trunk@16280 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-10 19:23:57 +00:00
Peter Westwood 06c7e6ed40 Don't capture the pesky trailing punctuation. Fixes #14993 props filosofo
git-svn-id: https://develop.svn.wordpress.org/trunk@16279 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-10 17:47:46 +00:00
Ryan Boren b7ed18e2ec Don't anchor regex. Props ozh. fixes #14628
git-svn-id: https://develop.svn.wordpress.org/trunk@16207 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-05 15:29:50 +00:00
scribu 58aedde597 Introduce wp_basename() and use it for media handling. See #11887
git-svn-id: https://develop.svn.wordpress.org/trunk@16154 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-02 17:19:55 +00:00
Peter Westwood ba0b9ce455 Revert 16150 - breaks things more than it fixes things. See #14993
git-svn-id: https://develop.svn.wordpress.org/trunk@16151 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-02 11:42:30 +00:00
Peter Westwood 3454487449 Don't capture RFC3986 sub-delims when making urls clickable except for ). Fixes #14993 props filosofo.
git-svn-id: https://develop.svn.wordpress.org/trunk@16150 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-02 09:45:09 +00:00
Peter Westwood 4d8416318e Always capture ! as part of a url. See #14993 props filosofo.
git-svn-id: https://develop.svn.wordpress.org/trunk@16111 602fd350-edb4-49c9-b593-d223f7449a82
2010-10-31 09:09:29 +00:00
Peter Westwood 27b777b4a6 Purger more create_function usage during autop and iso descrambling. See #14424 props ScottMac.
git-svn-id: https://develop.svn.wordpress.org/trunk@16035 602fd350-edb4-49c9-b593-d223f7449a82
2010-10-28 07:38:00 +00:00
Ryan Boren 8df8490fde Idempotence for sanitize_user(). Make sanitize_key() match its phpdoc. Props duck_ fixes #15198
git-svn-id: https://develop.svn.wordpress.org/trunk@15948 602fd350-edb4-49c9-b593-d223f7449a82
2010-10-24 20:33:54 +00:00
scribu f61e045d4d Also convert uppercase letters in Latin Extended-B. See #9591
git-svn-id: https://develop.svn.wordpress.org/trunk@15931 602fd350-edb4-49c9-b593-d223f7449a82
2010-10-23 15:36:16 +00:00