Commit Graph

276 Commits

Author SHA1 Message Date
Ryan Boren
57b6c9aeda Sanitize guid on save and display. Sanitize mime type on save. Don't allow changing mime type via edit form handlers. Protect hidden meta.
git-svn-id: https://develop.svn.wordpress.org/trunk@17994 602fd350-edb4-49c9-b593-d223f7449a82
2011-05-22 23:19:42 +00:00
Ryan Boren
92b4ffafc3 Properly anchor mime preg.
git-svn-id: https://develop.svn.wordpress.org/trunk@17990 602fd350-edb4-49c9-b593-d223f7449a82
2011-05-22 23:17:09 +00:00
Andrew Nacin
4d9fdaff0a s/coma/comma/. props ocean90.
git-svn-id: https://develop.svn.wordpress.org/trunk@17982 602fd350-edb4-49c9-b593-d223f7449a82
2011-05-21 15:20:25 +00:00
Ryan Boren
cde1941b72 Revert part of [17920]. Support for empty tz must remain. Props johnjamesjacoby. fixes #17448
git-svn-id: https://develop.svn.wordpress.org/trunk@17958 602fd350-edb4-49c9-b593-d223f7449a82
2011-05-18 18:56:42 +00:00
Peter Westwood
93fe935843 Fix typos and inconsistencies in PHPdoc / function declarations. See #17414 props duck_
git-svn-id: https://develop.svn.wordpress.org/trunk@17925 602fd350-edb4-49c9-b593-d223f7449a82
2011-05-14 09:50:20 +00:00
Ryan Boren
6e20ec2284 Remove PHP5 back compat code from get_gmt_from_date. Props technosailor. fixes #16920
git-svn-id: https://develop.svn.wordpress.org/trunk@17920 602fd350-edb4-49c9-b593-d223f7449a82
2011-05-13 19:17:07 +00:00
Ryan Boren
0e80d3e440 Performance improvements for wptexturize(). Props solarissmoke, hakre. fixes #16684
git-svn-id: https://develop.svn.wordpress.org/trunk@17636 602fd350-edb4-49c9-b593-d223f7449a82
2011-04-13 17:11:35 +00:00
Andrew Nacin
e376455b17 Make underscores valid in sanitize_html_class. fixes #17067.
git-svn-id: https://develop.svn.wordpress.org/trunk@17614 602fd350-edb4-49c9-b593-d223f7449a82
2011-04-06 21:28:52 +00:00
Ryan Boren
4b40ff5454 Reduce backtracking in make_clickable() regex. Reduce pcre.recursion_limit to avoid segfaulting. Props hakre. For trunk.
git-svn-id: https://develop.svn.wordpress.org/trunk@17570 602fd350-edb4-49c9-b593-d223f7449a82
2011-03-28 21:39:16 +00:00
Ryan Boren
170a0cf96b Lose create_function() in links_add_target() and links_add_base_url(). esc_attr() the target to provide extra coverage for plugins. Props Justin Rainbow, nacin. For trunk
git-svn-id: https://develop.svn.wordpress.org/trunk@17459 602fd350-edb4-49c9-b593-d223f7449a82
2011-02-16 19:24:18 +00:00
Ryan Boren
eba71eb7c0 Bring out the shears.
git-svn-id: https://develop.svn.wordpress.org/trunk@17228 602fd350-edb4-49c9-b593-d223f7449a82
2011-01-06 04:11:14 +00:00
Ryan Boren
2bc1d7f588 Don't be case sensitive to attribute names. Handle padded entities when checking for bad protocols. Normalize entities before checking for bad protocols in esc_url(). Props Mauro Gentile, duck_, miqrogroove
git-svn-id: https://develop.svn.wordpress.org/trunk@17171 602fd350-edb4-49c9-b593-d223f7449a82
2010-12-29 20:45:37 +00:00
Andrew Nacin
f3419ea181 Revert [16995] due to the way the data enters the db. props garyc40, see #15454.
git-svn-id: https://develop.svn.wordpress.org/trunk@17142 602fd350-edb4-49c9-b593-d223f7449a82
2010-12-25 18:10:59 +00:00
Ryan Boren
de072fe02a Remove some unnecessary esc_textarea() calls. Props garyc40. see #15454
git-svn-id: https://develop.svn.wordpress.org/trunk@17001 602fd350-edb4-49c9-b593-d223f7449a82
2010-12-16 17:48:20 +00:00
Mark Jaquith
dda708677e Use ENT_QUOTES in esc_textarea() in case someone uses it in a value='' situation by accident. see #15454
git-svn-id: https://develop.svn.wordpress.org/trunk@16993 602fd350-edb4-49c9-b593-d223f7449a82
2010-12-16 09:24:22 +00:00
Peter Westwood
905ec5fb30 Ultimate make_clickable. Fixes #14993 props filosofo
git-svn-id: https://develop.svn.wordpress.org/trunk@16948 602fd350-edb4-49c9-b593-d223f7449a82
2010-12-15 13:43:30 +00:00
Peter Westwood
a7dbb545d9 Revert [16279] - the recursive nature of this regex doesn't play well with stack space. See #14993
git-svn-id: https://develop.svn.wordpress.org/trunk@16692 602fd350-edb4-49c9-b593-d223f7449a82
2010-12-02 17:26:06 +00:00
Andrew Nacin
ccea27cbe7 More param fixes, props duck_. see #14783.
git-svn-id: https://develop.svn.wordpress.org/trunk@16469 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-18 19:12:48 +00:00
Ryan Boren
4b33a0e9c4 Pinking shears
git-svn-id: https://develop.svn.wordpress.org/trunk@16438 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-17 18:47:34 +00:00
Mark Jaquith
55e0256967 esc_textarea() and application for obvious textarea escaping. props alexkingorg. fixes #15454
git-svn-id: https://develop.svn.wordpress.org/trunk@16431 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-17 17:12:01 +00:00
Andrew Nacin
32069ead9d Revert changes to wptexturize() until test cases pass. Reverts [16280], [16378]. see #4539 and #15241.
git-svn-id: https://develop.svn.wordpress.org/trunk@16409 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-16 22:18:48 +00:00
Peter Westwood
9b80ab8ce5 Fix regression in wptexturize with single quotes when used for contraction. See #15241 props norbertm.
git-svn-id: https://develop.svn.wordpress.org/trunk@16378 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-15 08:52:36 +00:00
Andrew Nacin
200eefec46 Use square brackets instead of braces for string access. props hakre, fixes #13900.
git-svn-id: https://develop.svn.wordpress.org/trunk@16340 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-13 09:53:55 +00:00
Andrew Nacin
d8c91db1f4 Remove more create_function calls. props huichen, see #14424.
git-svn-id: https://develop.svn.wordpress.org/trunk@16313 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-11 22:50:36 +00:00
Peter Westwood
4a03447530 Improved RegEx for quote matching in wptexturize. Fixes #4539 and #15241 props norbertm.
git-svn-id: https://develop.svn.wordpress.org/trunk@16280 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-10 19:23:57 +00:00
Peter Westwood
06c7e6ed40 Don't capture the pesky trailing punctuation. Fixes #14993 props filosofo
git-svn-id: https://develop.svn.wordpress.org/trunk@16279 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-10 17:47:46 +00:00
Ryan Boren
b7ed18e2ec Don't anchor regex. Props ozh. fixes #14628
git-svn-id: https://develop.svn.wordpress.org/trunk@16207 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-05 15:29:50 +00:00
scribu
58aedde597 Introduce wp_basename() and use it for media handling. See #11887
git-svn-id: https://develop.svn.wordpress.org/trunk@16154 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-02 17:19:55 +00:00
Peter Westwood
ba0b9ce455 Revert 16150 - breaks things more than it fixes things. See #14993
git-svn-id: https://develop.svn.wordpress.org/trunk@16151 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-02 11:42:30 +00:00
Peter Westwood
3454487449 Don't capture RFC3986 sub-delims when making urls clickable except for ). Fixes #14993 props filosofo.
git-svn-id: https://develop.svn.wordpress.org/trunk@16150 602fd350-edb4-49c9-b593-d223f7449a82
2010-11-02 09:45:09 +00:00
Peter Westwood
4d8416318e Always capture ! as part of a url. See #14993 props filosofo.
git-svn-id: https://develop.svn.wordpress.org/trunk@16111 602fd350-edb4-49c9-b593-d223f7449a82
2010-10-31 09:09:29 +00:00
Peter Westwood
27b777b4a6 Purger more create_function usage during autop and iso descrambling. See #14424 props ScottMac.
git-svn-id: https://develop.svn.wordpress.org/trunk@16035 602fd350-edb4-49c9-b593-d223f7449a82
2010-10-28 07:38:00 +00:00
Ryan Boren
8df8490fde Idempotence for sanitize_user(). Make sanitize_key() match its phpdoc. Props duck_ fixes #15198
git-svn-id: https://develop.svn.wordpress.org/trunk@15948 602fd350-edb4-49c9-b593-d223f7449a82
2010-10-24 20:33:54 +00:00
scribu
f61e045d4d Also convert uppercase letters in Latin Extended-B. See #9591
git-svn-id: https://develop.svn.wordpress.org/trunk@15931 602fd350-edb4-49c9-b593-d223f7449a82
2010-10-23 15:36:16 +00:00
scribu
e05be05ad8 remove_accents(): Nordic characters fixes. Props einare. Fixes #4739. See #9591
git-svn-id: https://develop.svn.wordpress.org/trunk@15930 602fd350-edb4-49c9-b593-d223f7449a82
2010-10-23 13:00:21 +00:00
scribu
ed9a39abab Introduce sanitize_title_for_query(). See #9591
git-svn-id: https://develop.svn.wordpress.org/trunk@15929 602fd350-edb4-49c9-b593-d223f7449a82
2010-10-23 12:55:55 +00:00
Ryan Boren
d66fa94a75 Improve regex performance in wptexturize(). Props mdawaffe. fixes #15093
git-svn-id: https://develop.svn.wordpress.org/trunk@15816 602fd350-edb4-49c9-b593-d223f7449a82
2010-10-15 14:34:38 +00:00
Ryan Boren
df6d5550db Simplify sanitize_key() and use it in more places. see #14910
git-svn-id: https://develop.svn.wordpress.org/trunk@15635 602fd350-edb4-49c9-b593-d223f7449a82
2010-09-20 15:28:58 +00:00
Andrew Nacin
9494e4ce7e Phpdoc argument/@param cleanups. props duck_, see #14783.
git-svn-id: https://develop.svn.wordpress.org/trunk@15590 602fd350-edb4-49c9-b593-d223f7449a82
2010-09-07 11:21:11 +00:00
Ryan Boren
a17a25fcef Make smilies links SSL aware. Props tech163. fixes #14360
git-svn-id: https://develop.svn.wordpress.org/trunk@15554 602fd350-edb4-49c9-b593-d223f7449a82
2010-08-31 18:26:18 +00:00
Mark Jaquith
ae2f607f53 Leonard Lin was kind enough to relicense his balanceTags() function as "GPL (any version)" instead of "GPL v2.0." http://github.com/lhl/balanceTags/blob/master/README
git-svn-id: https://develop.svn.wordpress.org/trunk@15536 602fd350-edb4-49c9-b593-d223f7449a82
2010-08-26 15:43:32 +00:00
Mark Jaquith
15b414837c More judicious Wordpress-to-WordPress correction, to avoid bungling reasonable URLs. fixes #13971
git-svn-id: https://develop.svn.wordpress.org/trunk@15377 602fd350-edb4-49c9-b593-d223f7449a82
2010-07-08 19:35:29 +00:00
Dion Hulse
7efc4efdaa Alot more tabs. Props jacobsantos & Viper007bond. See #14147
git-svn-id: https://develop.svn.wordpress.org/trunk@15355 602fd350-edb4-49c9-b593-d223f7449a82
2010-06-30 00:05:18 +00:00
Andrew Nacin
e45ec0a52c Fix warnings related to static pages. props zeo for initial patch. fixes #13830.
git-svn-id: https://develop.svn.wordpress.org/trunk@15227 602fd350-edb4-49c9-b593-d223f7449a82
2010-06-11 17:04:06 +00:00
Andrew Nacin
592434afb5 Forever eliminate 'Wordpress' from the planet (or at least the little bit we can influence). props matt.
git-svn-id: https://develop.svn.wordpress.org/trunk@14996 602fd350-edb4-49c9-b593-d223f7449a82
2010-05-27 16:11:27 +00:00
Peter Westwood
82a44c5a3b Attempt to make stripslashes_deep object safe. See #12860
git-svn-id: https://develop.svn.wordpress.org/trunk@14766 602fd350-edb4-49c9-b593-d223f7449a82
2010-05-20 21:16:44 +00:00
Peter Westwood
dacd1c5623 Improve cross DST future post publishing behaviour to try and publish at the correct time if we have PHP5 timezone support available to help. Fixes #9285 props technosailor.
git-svn-id: https://develop.svn.wordpress.org/trunk@14487 602fd350-edb4-49c9-b593-d223f7449a82
2010-05-06 20:40:29 +00:00
Ryan Boren
56e95f24c5 Fix user validation feedback. Props sivel. fixes #13162
git-svn-id: https://develop.svn.wordpress.org/trunk@14428 602fd350-edb4-49c9-b593-d223f7449a82
2010-05-03 23:46:42 +00:00
Mark Jaquith
fb6501cae0 Add some new protocols for KSES. Make the list of protocols filterable. Start esc_url() with the same list. fixes #10914. props technosailor
git-svn-id: https://develop.svn.wordpress.org/trunk@14412 602fd350-edb4-49c9-b593-d223f7449a82
2010-05-03 21:20:20 +00:00
Ryan Boren
d783952469 Strip trailing whites.
git-svn-id: https://develop.svn.wordpress.org/trunk@14404 602fd350-edb4-49c9-b593-d223f7449a82
2010-05-03 20:26:11 +00:00