wordpress

Template

Files

Scott Taylor 5d17d2bd28 The gallery shortcode used to accept a SQL chunk for the value of the orderby attribute. The reason? get_posts() used to be called in the shortcode handler with a query-string blob of arguments passed to it. To mitigate breakage, sanitize_sql_orderby() was created in [7592].

`sanitize_sql_orderby()` expects a comma to be present when multiple `orderby` values were passed. The correct syntax for multiple fields is space-delimited. Since [29027], comma-separated values would never be parsed correctly when passed to `WP_Query->parse_orderby()`.

`sanitize_sql_orderby()` is used nowhere else in core, save for the `playlist` shortcode - I only added it there because I was mimic'ing the `gallery` logic. The function call can be removed from both shortcode handlers.
 
See #6476.
Fixes #23873.

Built from https://develop.svn.wordpress.org/trunk@30068


git-svn-id: http://core.svn.wordpress.org/trunk@30068 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2014-10-28 20:43:22 +00:00

certificates

…

css

Editor: use <button> instead of <a> for the Visual/Text buttons, make them focusable. Props afercia, fixes #27553

2014-10-24 01:21:18 +00:00

fonts

Dashicons: Update to the latest dashicons files.

2014-08-17 15:01:16 +00:00

ID3

Update getID3 library to 1.9.8.

2014-09-11 19:07:17 +00:00

images

…

TinyMCE: update to 4.1.6+. Adds support for cache-busting when auto-loading JS and CSS. Change the tests to run in /build. Changelog: https://github.com/tinymce/tinymce/blob/master/changelog.txt .

2014-10-23 02:08:20 +00:00

pomo

Fix some documentation typos in various core files.

2014-08-13 03:56:17 +00:00

SimplePie

…

Text

…

theme-compat

…

admin-bar.php

Don't display Edit links for posts and terms in toolbar if they are empty.

2014-09-07 08:32:19 +00:00

atomlib.php

…

author-template.php

…

bookmark-template.php

…

bookmark.php

Allow bookmarks to be ordered by link_description in get_bookmarks().

2014-09-29 03:12:17 +00:00

cache.php

Fix some words that aren't words.

2014-08-09 19:30:17 +00:00

canonical.php

Support nested tax query syntax in redirect_canonical().

2014-10-15 15:43:19 +00:00

capabilities.php

Plugin/Theme Uploads: New capabilities; unify UIs; ensure compatibility with old filters.

2014-08-27 01:32:18 +00:00

category-template.php

Additional @return clarifications for get_the_terms(), get_the_tag_list(), and get_the_term_list().

2014-08-12 23:48:16 +00:00

category.php

…

class-feed.php

…

class-http.php

HTTP API: Support both the 'limit_response_size' and 'stream' parameters at the same time, allowing a partial file download.

2014-10-20 07:32:21 +00:00

class-IXR.php

Fix some documentation typos in various core files.

2014-08-13 03:56:17 +00:00

class-json.php

…

class-oembed.php

WP_oEmbed::_strip_newlines is called as a filter callback for oembed_dataparse, must be public. It was marked as private for fun in [14109] and then made private officially in [28507].

2014-09-12 22:54:16 +00:00

class-phpass.php

…

class-phpmailer.php

…

class-pop3.php

…

class-simplepie.php

Fix some documentation typos in various core files.

2014-08-13 03:56:17 +00:00

class-smtp.php

PHPMailer: Merge upstream commit (PR274).

2014-09-29 10:28:17 +00:00

class-snoopy.php

…

class-wp-admin-bar.php

…

class-wp-ajax-response.php

Fix some words that aren't words.

2014-08-09 19:30:17 +00:00

class-wp-customize-control.php

Add the ability for a customizer control to render its controls via a JavaScript template. Switches the default color picker control to a JavaScript template. See #29572 . Props celloexpressions

2014-10-24 16:32:18 +00:00

class-wp-customize-manager.php

Add wp_json_encode(), a wrapper for json_encode() that ensures everything is converted to UTF-8.

2014-10-28 18:35:19 +00:00

class-wp-customize-panel.php

Customizer: Extract content markup for panels to its own method, WP_Customize_Panel::render_content().

2014-10-17 21:25:19 +00:00

class-wp-customize-section.php

Customizer: Increase default priority for a section to 160.

2014-08-15 19:36:16 +00:00

class-wp-customize-setting.php

Customizer: Introduce customize_preview_$setting->type action to handle multiple settings of the same type.

2014-10-17 21:21:19 +00:00

class-wp-customize-widgets.php

Add wp_json_encode(), a wrapper for json_encode() that ensures everything is converted to UTF-8.

2014-10-28 18:35:19 +00:00

class-wp-editor.php

Add wp_json_encode(), a wrapper for json_encode() that ensures everything is converted to UTF-8.

2014-10-28 18:35:19 +00:00

class-wp-embed.php

Use HTTPS URLs for core.trac.wordpress.org

2014-09-29 13:28:16 +00:00

class-wp-error.php

New remove() method and some unit tests for the WP_Error class.

2014-10-08 07:12:18 +00:00

class-wp-http-ixr-client.php

…

class-wp-image-editor-gd.php

Fix setting default quality in WP_Image_Editor.

2014-10-04 13:12:15 +00:00

class-wp-image-editor-imagick.php

Fix setting default quality in WP_Image_Editor.

2014-10-04 13:12:15 +00:00

class-wp-image-editor.php

Fix setting default quality in WP_Image_Editor.

2014-10-04 13:12:15 +00:00

class-wp-theme.php

Set Twenty Fifteen as the new default theme. see #29799 .

2014-10-14 19:58:19 +00:00

class-wp-walker.php

Fix some documentation typos in various core files.

2014-08-13 03:56:17 +00:00

class-wp-xmlrpc-server.php

XML-RPC: Check if category support was added for pages before calling wp_get_post_categories() to avoid unnecessary query in wp.getPage.

2014-09-11 13:56:15 +00:00

class-wp.php

Fix some words that aren't words.

2014-08-09 19:30:17 +00:00

class.wp-dependencies.php

…

class.wp-scripts.php

Add wp_json_encode(), a wrapper for json_encode() that ensures everything is converted to UTF-8.

2014-10-28 18:35:19 +00:00

class.wp-styles.php

wp_add_inline_style():

2014-10-18 19:04:20 +00:00

comment-template.php

Add 'comment_reply_link_args' filter for get_comment_reply_link() arguments.

2014-10-27 11:45:18 +00:00

comment.php

Fix 'count' in WP_Comment_Query when using 'meta_query'.

2014-10-26 16:46:19 +00:00

compat.php

Constant time for wp_verify_nonce().

2014-08-06 05:26:16 +00:00

cron.php

wp_schedule_single_event() should not prevent scheduling a future duplicate event. It should only reject an event as a duplicate if there is already a similar event scheduled within 10 minutes of the given timestamp.

2014-10-17 19:17:18 +00:00

date.php

Add @since annotation for 'user_registered' support in 'date_query_valid_columns' documentation.

2014-10-17 03:51:20 +00:00

default-constants.php

Set Twenty Fifteen as the new default theme. see #29799 .

2014-10-14 19:58:19 +00:00

default-filters.php

Add a default filter to title_save_pre: trim, because extra whitespace.

2014-10-01 18:58:16 +00:00

default-widgets.php

Use proper functions for escaped translations.

2014-10-18 20:11:18 +00:00

deprecated.php

…

feed-atom-comments.php

…

feed-atom.php

…

feed-rdf.php

…

feed-rss2-comments.php

…

feed-rss2.php

…

feed-rss.php

…

feed.php

Correct references to post-template.php in the inline docs.

2014-08-12 01:09:17 +00:00

formatting.php

Fix whitespace issues in [29781]. Remove a redundant comment.

2014-10-11 02:33:18 +00:00

functions.php

Fix a PHPDoc typo for wp_json_encode().

2014-10-28 18:54:18 +00:00

functions.wp-scripts.php

Use HTTPS URLs for core.trac.wordpress.org

2014-09-29 13:28:16 +00:00

functions.wp-styles.php

Translate some previously untranslated _doing_it_wrong() messages.

2014-10-05 21:06:15 +00:00

general-template.php

Use HTTPS URLs for trac.wordpress.org (and use core.trac.wordpress.org)

2014-09-29 13:37:16 +00:00

http.php

Update the docs for wp_remote_retrieve_response_code(). See #28887 .

2014-10-21 21:13:18 +00:00

kses.php

Add audio, video, and track to $allowedposttags (KSES).

2014-10-28 19:36:23 +00:00

l10n.php

Avoid double path separators in load_theme_textdomain(). Fixes #29122 . Props bradyvercher

2014-10-21 17:58:18 +00:00

link-template.php

Introduce some new template functions for navigation:

2014-10-28 19:39:24 +00:00

load.php

Send nocache_headers() on installation screens and when redirecting to them.

2014-08-25 17:40:16 +00:00

locale.php

…

media-template.php

Add size to the UI for Gallery Settings in the media modal. Ensure that the TinyMCE view is refreshed when size changes.

2014-09-29 03:45:16 +00:00

media.php

The gallery shortcode used to accept a SQL chunk for the value of the orderby attribute. The reason? get_posts() used to be called in the shortcode handler with a query-string blob of arguments passed to it. To mitigate breakage, sanitize_sql_orderby() was created in [7592].

2014-10-28 20:43:22 +00:00

meta.php

Make orderby=meta_value compatible with meta_query when relation=OR.

2014-10-19 18:54:19 +00:00

ms-blogs.php

Simplify the code for calling refresh_blog_details() whenever 'blogname', 'siteurl', or 'post_count' option is updated.

2014-09-02 07:30:16 +00:00

ms-default-constants.php

…

ms-default-filters.php

Simplify the code for calling refresh_blog_details() whenever 'blogname', 'siteurl', or 'post_count' option is updated.

2014-09-02 07:30:16 +00:00

ms-deprecated.php

Deprecate admin_created_user_subject()

2014-10-24 04:49:20 +00:00

ms-files.php

…

ms-functions.php

In the wp_new_blog_notification() email template, include the login url.

2014-10-02 01:28:16 +00:00

ms-load.php

…

ms-settings.php

…

nav-menu-template.php

Cast class names to an array to avoid a potential warning.

2014-10-26 23:19:19 +00:00

nav-menu.php

Fix the $location parameter type in the unregister_nav_menu() DocBlock.

2014-10-25 13:43:18 +00:00

option.php

Fix the wp-settings-* cookies used in getUserSetting()/setUserSetting(). They should be set without COOKIE_DOMAIN to work properly for sub-domains. Fixes #29095 .

2014-08-13 02:47:16 +00:00

pluggable-deprecated.php

…

pluggable.php

Remove padding from the comment notification emails which is from a bygone fixed-width font era. Prevents alignment issues in email clients which use vairable width fonts for plain text emails. Fixes #16721 . Props DrewAPicture.

2014-10-24 17:08:18 +00:00

plugin.php

Use HTTPS URLs for trac.wordpress.org (and use core.trac.wordpress.org)

2014-09-29 13:37:16 +00:00

post-formats.php

…

post-template.php

Don't add 'sticky' class in get_post_class() if 'ignore_sticky_posts' query var is set.

2014-10-27 02:16:20 +00:00

post-thumbnail-template.php

…

post.php

When using 'show_in_menu' as a default value for 'show_in_admin_bar' in register_post_type(), cast to boolean instead of requiring a strict match.

2014-10-27 13:08:19 +00:00

query.php

Check that search value is scalar before parsing.

2014-10-16 03:32:20 +00:00

registration-functions.php

…

registration.php

…

revision.php

…

rewrite.php

Use HTTPS URLs for core.trac.wordpress.org

2014-09-29 13:28:16 +00:00

rss-functions.php

…

rss.php

Fix some documentation typos in various core files.

2014-08-13 03:56:17 +00:00

script-loader.php

Script-loader: remove 'heartbeat' dependency for post.js and inline-edit-post.js, fix dependencies for autosave.js. Fixes #30008

2014-10-22 03:41:18 +00:00

session.php

Add safeguards for when ext/hash is not compiled with PHP.

2014-09-20 17:28:18 +00:00

shortcodes.php

The joys of wptexturize():

2014-09-29 04:07:15 +00:00

taxonomy.php

Introduce orderby=include support for get_terms().

2014-10-28 18:13:19 +00:00

template-loader.php

…

template.php

…

theme.php

Add wp_json_encode(), a wrapper for json_encode() that ensures everything is converted to UTF-8.

2014-10-28 18:35:19 +00:00

update.php

Add wp_json_encode(), a wrapper for json_encode() that ensures everything is converted to UTF-8.

2014-10-28 18:35:19 +00:00

user.php

Rename _wp_password_hint() to _wp_get_password_hint() to bring it inline with core terminology. Fixes #21243 .

2014-10-26 23:30:18 +00:00

vars.php

…

version.php

2014-10-28 20:43:22 +00:00

widgets.php

Customizer: Change instances of "Theme Customizer" to just "Customizer", as the Customizer isn't necessarily theme-specific.

2014-10-15 17:21:19 +00:00

wlwmanifest.xml

…

wp-db.php

Translate some previously untranslated _doing_it_wrong() messages.

2014-10-05 21:06:15 +00:00

wp-diff.php

Fix some documentation typos in various core files.

2014-08-13 03:56:17 +00:00