Wordpress/wp-admin
Ryan Boren b4cb2c9cf0 clean_url only REQUEST_URI to avoid breaking the edit link. see #4001
git-svn-id: https://develop.svn.wordpress.org/trunk@5072 602fd350-edb4-49c9-b593-d223f7449a82
2007-03-21 06:23:22 +00:00
..
images
import Blogger importer updates. fixes #3971 2007-03-14 19:20:19 +00:00
admin-ajax.php
admin-db.php Quote values heading to DB. Cast some ints. 2007-03-12 16:09:44 +00:00
admin-footer.php
admin-functions.php clean_url only REQUEST_URI to avoid breaking the edit link. see #4001 2007-03-21 06:23:22 +00:00
admin-header.php escape pagenow. Props xknown. fixes #3988 for trunk 2007-03-18 23:04:22 +00:00
admin.php
bookmarklet.php use clean_url() instead of attribute_escape() when dealing with src/href to protect against XSS. props xknown. fixes #3986 for trunk. 2007-03-17 08:46:59 +00:00
cat.js
categories.js
categories.php Rephrase category delete AYS prompt. Props rob1n. fixes #3464 2007-03-13 23:54:45 +00:00
comment.php
custom-fields.js
custom-header.php Sanitize browser-bound add_query_arg() outputs. fixes #3937 2007-03-09 04:36:24 +00:00
dbx-admin-key.js
edit-category-form.php
edit-comments.js
edit-comments.php use clean_url() instead of attribute_escape() when dealing with src/href to protect against XSS. props xknown. fixes #3986 for trunk. 2007-03-17 08:46:59 +00:00
edit-form-advanced.php use clean_url() instead of attribute_escape() when dealing with src/href to protect against XSS. props xknown. fixes #3986 for trunk. 2007-03-17 08:46:59 +00:00
edit-form-comment.php
edit-form.php
edit-link-form.php Use strpos instead of strstr where ever possible, for speed. Props rob1n. fixes #3920 2007-03-07 05:29:15 +00:00
edit-page-form.php use clean_url() instead of attribute_escape() when dealing with src/href to protect against XSS. props xknown. fixes #3986 for trunk. 2007-03-17 08:46:59 +00:00
edit-pages.php
edit.php Remove excess whitespace. Props oneno and Nazgul. fixes #3778 2007-03-07 01:26:29 +00:00
export.php
import.php
index-extra.php
index.php Add missing filters. Props jhodgdon. fixes #3599 2007-03-10 05:25:33 +00:00
install-helper.php
install-rtl.css
install.css
install.php
link-add.php Remove old notice. Props johnbillion. fixes #2576 2007-03-07 17:07:33 +00:00
link-import.php Link filters from jhodgdon. fixes #3595 2007-03-10 01:13:49 +00:00
link-manager.php use clean_url() instead of attribute_escape() when dealing with src/href to protect against XSS. props xknown. fixes #3986 for trunk. 2007-03-17 08:46:59 +00:00
link-parse-opml.php
link.php
menu-header.php
menu.php Use strpos instead of strstr where ever possible, for speed. Props rob1n. fixes #3920 2007-03-07 05:29:15 +00:00
moderation.php gettext date formats. Props rob1n and yskin. fixes #3863 2007-03-07 01:25:17 +00:00
options-discussion.php
options-general.php
options-head.php Removing superfluous <br /> from Options-General. Props johnbillion. fixes #3929 for trunk. 2007-03-16 08:10:02 +00:00
options-misc.php s/bookmark/link/. Props JeremyVisser. fixes #3718 2007-03-07 01:35:39 +00:00
options-permalink.php
options-privacy.php
options-reading.php
options-writing.php s/bookmark/link/. Props MichaelH. fixes #3648 2007-03-07 01:30:53 +00:00
options.php Use strpos instead of strstr where ever possible, for speed. Props rob1n. fixes #3920 2007-03-07 05:29:15 +00:00
page-new.php
page.php use clean_url() instead of attribute_escape() when dealing with src/href to protect against XSS. props xknown. fixes #3986 for trunk. 2007-03-17 08:46:59 +00:00
plugin-editor.php
plugins.php
post-new.php
post.php use clean_url() instead of attribute_escape() when dealing with src/href to protect against XSS. props xknown. fixes #3986 for trunk. 2007-03-17 08:46:59 +00:00
profile-update.php
profile.php
rtl.css Admin RTL CSS fixes from Sewar. fixes #3947 2007-03-10 01:34:06 +00:00
setup-config.php People are confusing the part they should edit with the part they shouldn't, so let's make the example values a little more self-evident. 2007-03-08 18:31:46 +00:00
sidebar.php
templates.php Use strpos instead of strstr where ever possible, for speed. Props rob1n. fixes #3920 2007-03-07 05:29:15 +00:00
theme-editor.php
themes.php Standardize on 'url' for fetching the blog's url. Props rob1n. fixes #3623 2007-03-07 03:05:41 +00:00
update-links.php
upgrade-functions.php Use strpos instead of strstr where ever possible, for speed. Props rob1n. fixes #3920 2007-03-07 05:29:15 +00:00
upgrade-schema.php
upgrade.php use clean_url() instead of attribute_escape() when dealing with src/href to protect against XSS. props xknown. fixes #3986 for trunk. 2007-03-17 08:46:59 +00:00
upload-functions.php use clean_url() instead of attribute_escape() when dealing with src/href to protect against XSS. props xknown. fixes #3986 for trunk. 2007-03-17 08:46:59 +00:00
upload-rtl.css
upload.css
upload.js
upload.php use clean_url() instead of attribute_escape() when dealing with src/href to protect against XSS. props xknown. fixes #3986 for trunk. 2007-03-17 08:46:59 +00:00
user-edit.php use clean_url() instead of attribute_escape() when dealing with src/href to protect against XSS. props xknown. fixes #3986 for trunk. 2007-03-17 08:46:59 +00:00
users.js
users.php
wp-admin.css login accessibility patch from Viper007Bond. fixes #3620 2007-03-20 20:39:39 +00:00
xfn.js