Wordpress/wp-includes
Andrew Nacin 66f1a19089 Add a sane, inclusive HTML element/attribute schema to TinyMCE.
TinyMCE 3.4.x (shipped with WordPress 3.4.x) had an HTML4-based schema definition, with HTML5 elements added to it. TinyMCE 3.5.x (shipping, again coincidentally, with WordPress 3.5) allows for HTML5 schema support, which also provides for full HTML5 attribute support. The problem is its HTML5 schema excludes all HTML4 elements and attributes that were dropped in the HTML5 spec, which is unacceptable behavior.

This "duck punch" of TinyMCE's Schema.js file creates a new, sane schema. It is TinyMCE's HTML4 and HTML5 schema definitions recursively merged.

Objects are not whitelisted in either schema to allow for embed elements as child nodes, so object, param, and embed remain separately whitelisted in the WordPress TinyMCE plugin. Our attempts to add other attributes in said plugin is now superceded.

props koopersmith, azaozz.
fixes #22790.



git-svn-id: https://develop.svn.wordpress.org/trunk@23120 602fd350-edb4-49c9-b593-d223f7449a82
2012-12-07 11:26:25 +00:00
..
css Ensure iframes in the media modal on the frontend have no borders. props nacin. fixes #22804. 2012-12-07 10:27:07 +00:00
images Copy wpspin_light to wp-includes as wpspin.gif. Use it in media views. see #22728. 2012-12-04 16:18:53 +00:00
js Add a sane, inclusive HTML element/attribute schema to TinyMCE. 2012-12-07 11:26:25 +00:00
pomo Fix typos in comments. Props SergeyBiryukov, see #22337 2012-10-31 23:56:23 +00:00
SimplePie SimplePie: Return nothing and throw an error in SimplePie_Sanitize when DOMDocument is disabled. 2012-12-02 16:43:12 +00:00
Text
theme-compat Don't return encoded ampersands from get_post_comments_feed_link() to avoid canonical redirect issues. Apply esc_url() when appropriate. 2012-11-07 19:56:10 +00:00
admin-bar.php Use the create_posts post type cap in more places. Remove the janky create_posts meta cap. see #16714. 2012-11-28 22:28:20 +00:00
atomlib.php
author-template.php Use get_post() instead of global $post. 2012-09-04 16:29:28 +00:00
bookmark-template.php In wp_list_bookmarks(), don't stomp the categorize argument. Fixes categorized display in the links widget. 2012-11-28 23:19:03 +00:00
bookmark.php Don't cache a non-existent link in get_bookmark(). props wonderboymusic, fixes #21159. 2012-09-13 16:41:43 +00:00
cache.php Pinking shears 2012-11-17 15:11:29 +00:00
canonical.php Use network_site_url() for wp-signup.php. props markjaquith. see #19796. 2012-09-11 12:27:25 +00:00
capabilities.php Make current_user_can_for_blog() safe to run single site. 2012-12-07 09:53:27 +00:00
category-template.php Don't bail from get_the_terms() if the post type is not registed for the taxonomy. This can break back compat when add_post_type_support( 'page', 'post-formats' ) is called but register_taxonomy_for_object_type( 'postr_-format', 'page' ) is not. 2012-11-20 18:31:06 +00:00
category.php Pinking shears 2012-11-17 15:11:29 +00:00
class-feed.php Do SimplePie sanitization with wp_kses_post() rather than DOMDocument, which cannot be guaranteed to be available. 2012-11-22 07:23:43 +00:00
class-http.php Objects no longer need to be explicitly passed by ref to call_user_func*() to be callable. Props wonderboymusic. fixes #21865 2012-10-04 20:00:16 +00:00
class-IXR.php Specify the encoding in IXR_Server::output(). Props solarissmoke, sergey.s.betke@novgaro.ru, SergeyBiryukov. fixes #4794 2012-08-15 20:12:00 +00:00
class-json.php
class-oembed.php Add Instagram oEmbed support. Props bananastalktome. Fixes #21704. 2012-10-31 22:45:23 +00:00
class-phpass.php
class-phpmailer.php Do not pass mail() a fourth argument when safe_mode is in effect. 2012-06-26 03:54:17 +00:00
class-pop3.php
class-simplepie.php Update SimplePie to 1.3.1. Props rmccue, ocean90. fixes #22321 2012-11-05 14:25:25 +00:00
class-smtp.php
class-snoopy.php
class-wp-admin-bar.php Skip To links: visually hide by only setting top: -1000em; (this should make them work well in all screen readers), fixes #21312 2012-11-20 21:14:49 +00:00
class-wp-ajax-response.php Specify the charset in WP_Ajax_Response::send(). Props sergey.s.betke@novgaro.ru, SergeyBiryukov. fixes #19448 2012-08-15 18:17:21 +00:00
class-wp-customize-control.php Customizer uploader control: Pass arrays of extensions around instead. see #22149. 2012-11-10 04:59:46 +00:00
class-wp-customize-manager.php Pinking shears 2012-11-17 15:11:29 +00:00
class-wp-customize-section.php Keyboard accessibility for the theme customizer. props lessbloat, jorbin, JustinSainton. fixes #21283. 2012-11-06 14:47:25 +00:00
class-wp-customize-setting.php Pinking shears 2012-11-17 15:11:29 +00:00
class-wp-editor.php Add a sane, inclusive HTML element/attribute schema to TinyMCE. 2012-12-07 11:26:25 +00:00
class-wp-embed.php Invalidate oEmbed caches on pre_post_update instead of save_post so existing metadata caches may be used. fixes #22190. 2012-11-05 16:47:04 +00:00
class-wp-error.php Lose EOF ?>. Clean up EOF newlines. fixes #12307 2012-01-08 17:01:11 +00:00
class-wp-http-ixr-client.php
class-wp-image-editor-gd.php Image editors: After cropping, request new sizes from the image. If we rely on the values passed in, they may be floats. We must see what the image results in. 2012-12-06 07:56:04 +00:00
class-wp-image-editor-imagick.php Image editors: After cropping, request new sizes from the image. If we rely on the values passed in, they may be floats. We must see what the image results in. 2012-12-06 07:56:04 +00:00
class-wp-image-editor.php Image editors: After cropping, request new sizes from the image. If we rely on the values passed in, they may be floats. We must see what the image results in. 2012-12-06 07:56:04 +00:00
class-wp-theme.php Make current_user_can_for_blog() safe to run single site. 2012-12-07 09:53:27 +00:00
class-wp-walker.php Objects no longer need to be explicitly passed by ref to call_user_func*() to be callable. Props wonderboymusic. fixes #21865 2012-10-04 20:00:16 +00:00
class-wp-xmlrpc-server.php Remove XML-RPC's blogger::getTemplate and setTemplate. They are not supported and do nothing. 2012-11-29 02:35:39 +00:00
class-wp.php Avoid 'headers already sent' messages for header_remove() the same way we currently do with header(). props ryan. fixes #22258. 2012-10-25 20:38:55 +00:00
class.wp-dependencies.php Revert [21420] and [21481]. Accepting a string caused back compat problems including the possibility of revealing previously hidden circular dependencies resulting in infinite loops. 2012-10-23 20:32:12 +00:00
class.wp-scripts.php Allow protocol-relative URLs when registering/enqueueing scripts and styles. 2012-06-28 20:18:38 +00:00
class.wp-styles.php Allow protocol-relative URLs when registering/enqueueing scripts and styles. 2012-06-28 20:18:38 +00:00
comment-template.php Put required field indicators within labels. Update styling of bundled themes to accommodate. Props MikeHansenMe. fixes #21897 2012-10-05 16:34:32 +00:00
comment.php Duplicate comments should be allowed under a different comment parent. props andy. fixes #21609. 2012-10-14 17:06:37 +00:00
compat.php
cron.php Introduce constants to allow for easier expression of time periods in seconds. Adds MINUTE_IN_SECONDS, HOUR_IN_SECONDS, DAY_IN_SECONDS, WEEK_IN_SECONDS, YEAR_IN_SECONDS. props nbachiyski, SergeyBiryukov. fixes #20987. 2012-09-25 05:26:19 +00:00
default-constants.php Add comments to time intervals we cannot express with the constants. Fix a comment. props SergeyBiryukov. fixes #20987. 2012-11-10 18:13:09 +00:00
default-filters.php Fix option name. props ocean90, see #21719. 2012-09-27 19:19:18 +00:00
default-widgets.php Add context to the 'Random' string. It is now used in two places: gallery order and the links widget. props pavelevap, fixes #22724. 2012-12-04 14:49:44 +00:00
deprecated.php WP_Image_Editor: the last stand. 2012-11-22 09:52:16 +00:00
feed-atom-comments.php Don't return encoded ampersands from get_post_comments_feed_link() to avoid canonical redirect issues. Apply esc_url() when appropriate. 2012-11-07 19:56:10 +00:00
feed-atom.php Don't return encoded ampersands from get_post_comments_feed_link() to avoid canonical redirect issues. Apply esc_url() when appropriate. 2012-11-07 19:56:10 +00:00
feed-rdf.php Add the generator element in feeds through the {rss2|atom|rdf|rss|opml}_head hooks. Fixes #6947 props sivel. 2010-02-13 16:45:16 +00:00
feed-rss2-comments.php Use get_search_query() in feed-rss2-comments.php. Props SergeyBiryukov. fixes #21365 2012-07-25 18:04:17 +00:00
feed-rss2.php Use the_content_feed() when looking for zero-length post content for RSS2 feeds. Now you can have blank posts with content generated by the_content filters. props SergeyBiryukov. fixes #15604 2012-07-09 03:33:01 +00:00
feed-rss.php
feed.php Do SimplePie sanitization with wp_kses_post() rather than DOMDocument, which cannot be guaranteed to be available. 2012-11-22 07:23:43 +00:00
formatting.php Revert page on front changes. Reverts [22127] [22129] [22135] [22136]. see #16379. 2012-11-19 01:28:32 +00:00
functions.php Properly set the base URL for the main site when ms-files rewriting is enabled for MU-era installs. 2012-12-03 22:24:06 +00:00
functions.wp-scripts.php Have wp_script_is() and wp_style_is() accept 'enqueued', as it reads better than 'queue' and is consistent with 'registered'. fixes #21741. 2012-08-30 18:57:57 +00:00
functions.wp-styles.php Have wp_script_is() and wp_style_is() accept 'enqueued', as it reads better than 'queue' and is consistent with 'registered'. fixes #21741. 2012-08-30 18:57:57 +00:00
general-template.php Pinking shears 2012-11-17 15:11:29 +00:00
http.php Handle pre-flighted OPTIONS requests in send_origin_headers(). Props nacin. fixes #21024 2012-09-24 21:39:04 +00:00
kses.php Recommend the wp_kses_allowed_html filter over CUSTOM_TAGS. Soft deprecate CUSTOM_TAGS. see #17977, #20210. 2012-09-10 18:00:41 +00:00
l10n.php Theme Translations: Allow for theme pomo files to be loaded from WP_LANG_DIR/themes/{$domain}-{$locale}.(p|m)o. 2012-10-31 21:30:33 +00:00
link-template.php Pass the post ID from the_shortlink() to wp_get_shortlink() to avoid a change in filters. props SergeyBiryukov, fixes #21309. 2012-11-14 05:05:34 +00:00
load.php * Register blog-id-cache group as global 2012-10-01 18:03:23 +00:00
locale.php
media-template.php Break wp_print_media_templates() into wp-includes/media-template.php and lazy-load that file through wp_enqueue_media(). fixes #22778. 2012-12-06 07:10:20 +00:00
media.php A neditor is a curious multi-celled organism found deep in the Content Management System "WordPress". It generally subsides on good content. It has an obsession with retina-quality graphical elements, and also has a strong affinity for puns. Occasionally, ACCIDENTAL CAPS LOCK occurs. Some organisms carry British accents; these are prone to changing state but then reverting to their previous state soon after. One has shown superior sleuthing abilities, despite having hardly left its Uni laboratory. Organisms from Australia are usually found deeper in the Content Management System, most of its energy spent on locomotion. 2012-12-06 09:01:11 +00:00
meta.php Defer the meta_id-fetching query until after comparison of the previous value, so that redundant calls to update_metadata() can bail without making that query. props nacin. fixes #22191 2012-10-15 05:51:38 +00:00
ms-blogs.php Pinking shears 2012-11-17 15:11:29 +00:00
ms-default-constants.php Multisite in a subdirectory: For subdomain installs, use a root admin cookie path, not a wp-admin specific one. 2012-12-04 00:51:02 +00:00
ms-default-filters.php Remove ms-files.php rewriting from WordPress multisite. fixes #19235. 2012-09-11 22:22:20 +00:00
ms-deprecated.php Undeprecate *_blog_option() by popular demand. Put them back in ms-blogs.php since direct inclusion of ms-blogs.php/ms-functions.php is unforntunately common. 2012-08-08 17:11:15 +00:00
ms-files.php Lose EOF ?>. Clean up EOF newlines. fixes #12307 2012-01-08 17:01:11 +00:00
ms-functions.php Use $current_site->path instead of $base in wpmu_validate_blog_signup(), as $base is now dead. props MarkJaquith. fixes #22787. see #19796. 2012-12-06 09:43:52 +00:00
ms-load.php Merge two strings. props pavelevap, see #22306. 2012-11-07 22:03:23 +00:00
ms-settings.php Resurrect the switched global. Some are still using it. see #21459 2012-08-22 03:34:00 +00:00
nav-menu-template.php Confirm that the nav menu's underlying object is in the proper taxonomy before adding the current-menu-item class. props SergeyBiryukov. fixes #21369. 2012-10-25 20:32:01 +00:00
nav-menu.php Correctly associate new menu items with a menu when using wp_update_nav_menu_item() 2012-11-06 14:46:56 +00:00
option.php Trim the option name in get_option() before calling the pre_option_$option filter, not after. props evansolomon. fixes #22358. 2012-11-17 13:20:57 +00:00
pluggable-deprecated.php Remove AtomPub from core. 2012-09-11 20:11:39 +00:00
pluggable.php Pass 'blank' to Gravatar rather than sending blank.gif for Gravatar to proxy. props miqrogroove, fixes #22354. 2012-11-14 05:29:56 +00:00
plugin.php Revert [21287] until #21169 goes through. see #21321. 2012-07-21 20:24:21 +00:00
post-template.php Pinking shears 2012-11-17 15:11:29 +00:00
post-thumbnail-template.php Add $wp_query parameter to update_post_thumbnail_cache(). props scribu. see #19949, fixes that ticket for 3.4. 2012-04-30 15:55:57 +00:00
post.php Do not save an initial revision for a post created through the auto-draft mechanism. Prevents a bogus revision, often with the title 'Auto Draft'. Restores pre-auto-draft behavior made obvious by XML-RPC's implementation of both auto-drafts and the subsequent wp.getRevisions method. fixes #22687. see #22686. 2012-12-03 06:28:28 +00:00
query.php Account for taxonomies tied to specific kinds of attachments when setting up post types for a taxonomy query. 2012-11-20 17:33:21 +00:00
registration-functions.php
registration.php
rewrite.php Update the old wp-app.php rule to allow for a trailing slash followed by endpoint data. props wonderboymusic. fixes #22035. 2012-11-07 21:27:02 +00:00
rss-functions.php
rss.php Lose EOF ?>. Clean up EOF newlines. fixes #12307 2012-01-08 17:01:11 +00:00
script-loader.php Script loader: Chunk the script names as passed to load-scripts.php into 128-character pieces. Avoids hitting a limit for the length of a single variable, such as suhosin.get.max_value_length which defaults to 512. fixes #22757. 2012-12-05 18:57:56 +00:00
shortcodes.php Update shortcode regular expression commentary. See #17657. 2012-11-06 14:47:33 +00:00
taxonomy.php Clear the object term relationships cache in wp_set_object_terms() rather than wp_set_post_terms(). This should be done lower in the stack than wp_set_post_terms(). 2012-11-27 19:42:38 +00:00
template-loader.php Clean up [22347] a bit. see #14348 2012-10-31 23:01:13 +00:00
template.php Pinking shears 2012-11-17 15:11:29 +00:00
theme.php In get_custom_header(), support a default header that is registered using default-image but not register_default_headers(). fixes #22221. 2012-11-19 06:59:25 +00:00
update.php Introduce constants to allow for easier expression of time periods in seconds. Adds MINUTE_IN_SECONDS, HOUR_IN_SECONDS, DAY_IN_SECONDS, WEEK_IN_SECONDS, YEAR_IN_SECONDS. props nbachiyski, SergeyBiryukov. fixes #20987. 2012-09-25 05:26:19 +00:00
user.php Add a $public_only argument to count_many_users_posts() and get_posts_by_author_sql(). Defaults to false, and allows the counts to be returned for only public posts. props ryan, westi. fixes #21431. 2012-11-05 23:11:25 +00:00
vars.php TinyMCE: better exclusion of Opera mobile, fixes #21416 2012-07-30 19:40:52 +00:00
version.php Compress scripts/styles: 3.5-RC4-23115. 2012-12-07 01:15:44 +00:00
widgets.php Objects no longer need to be explicitly passed by ref to call_user_func*() to be callable. Props wonderboymusic. fixes #21865 2012-10-04 20:00:16 +00:00
wlwmanifest.xml Lose EOF ?>. Clean up EOF newlines. fixes #12307 2012-01-08 17:01:11 +00:00
wp-db.php Enforce a minimum of two arguments for wpdb::prepare(). The first argument is the query (or fragment thereof), which is required. Additional arguments are values to substitute into placeholders. 2012-11-07 19:30:59 +00:00
wp-diff.php Objects no longer need to be explicitly passed by ref to call_user_func*() to be callable. Props wonderboymusic. fixes #21865 2012-10-04 20:00:16 +00:00