HostForge-Systems/wordpress
Template
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
d96b7af89009a0cf4b264cda7a1432f872e30f21
wordpress/wp-admin/includes
History
John Blackbourn 2f3e91028a Filesystem API: Add more specificity to the rules for valid files in validate_file(). 
This now treats files containing `./` as valid, and also treats files containing a trailing `../` as valid due to widespread use of this pattern in theme and plugin zip files.

Adds tests.

Props Ipstenu, borgesbruno, DavidAnderson, philipjohn, birgire
Fixes #42016, #36170

Built from https://develop.svn.wordpress.org/trunk@42011


git-svn-id: http://core.svn.wordpress.org/trunk@41845 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-10-24 23:15:49 +00:00
..
admin-filters.php
Security: Add a referrer policy header to the admin and login screens.
2017-10-04 18:25:46 +00:00
admin.php
…
ajax-actions.php
Embeds: Improve consistency of update and refresh logic for oEmbed caching between oembed_cache and post meta.
2017-10-24 23:10:48 +00:00
bookmark.php
…
class-automatic-upgrader-skin.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-bulk-plugin-upgrader-skin.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-bulk-theme-upgrader-skin.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-bulk-upgrader-skin.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-core-upgrader.php
I18N: Remove <code> tags from translatable strings in Core_Upgrader, Language_Pack_Upgrader, Plugin_Upgrader, Theme_Upgrader.
2017-10-18 17:15:47 +00:00
class-file-upload-upgrader.php
General: Improve terminology used when referring to installations of WordPress and its extensions.
2017-08-22 11:52:48 +00:00
class-ftp-pure.php
…
class-ftp-sockets.php
…
class-ftp.php
…
class-language-pack-upgrader-skin.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-language-pack-upgrader.php
I18N: Remove <code> tags from translatable strings in Core_Upgrader, Language_Pack_Upgrader, Plugin_Upgrader, Theme_Upgrader.
2017-10-18 17:15:47 +00:00
class-pclzip.php
…
class-plugin-installer-skin.php
Retire Press This and extract it to a plugin. First run.
2017-09-24 14:22:54 +00:00
class-plugin-upgrader-skin.php
Plugins: Introduce singular capabilities for activating and deactivating individual plugins.
2017-08-22 14:02:44 +00:00
class-plugin-upgrader.php
I18N: Remove <code> tags from translatable strings in Core_Upgrader, Language_Pack_Upgrader, Plugin_Upgrader, Theme_Upgrader.
2017-10-18 17:15:47 +00:00
class-theme-installer-skin.php
Customize: Eliminate use of customize-loader in core so Customizer is opened consistently in top window.
2017-10-09 16:04:48 +00:00
class-theme-upgrader-skin.php
Customize: Eliminate use of customize-loader in core so Customizer is opened consistently in top window.
2017-10-09 16:04:48 +00:00
class-theme-upgrader.php
I18N: Remove <strong> tag from a translatable string in Theme_Upgrader::install_strings().
2017-10-18 17:20:48 +00:00
class-walker-category-checklist.php
Docs: Standardise the format used for documenting parameters passed by reference.
2017-10-02 22:14:46 +00:00
class-walker-nav-menu-checklist.php
Docs: Standardise the format used for documenting parameters passed by reference.
2017-10-02 22:14:46 +00:00
class-walker-nav-menu-edit.php
Docs: Standardise the format used for documenting parameters passed by reference.
2017-10-02 22:14:46 +00:00
class-wp-ajax-upgrader-skin.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-wp-automatic-updater.php
Docs: Add @since entry for WP_Automatic_Updater::after_core_update(), introduced in [25841].
2017-10-18 17:48:49 +00:00
class-wp-comments-list-table.php
Accessibility: List Tables: use aria-current for the views current link.
2017-10-02 19:44:47 +00:00
class-wp-community-events.php
Standardise on performing api.WordPress.org requests over SSL when possible, falling back to non-SSL when appropriate.
2017-09-27 08:00:49 +00:00
class-wp-filesystem-base.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-wp-filesystem-direct.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-wp-filesystem-ftpext.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-wp-filesystem-ftpsockets.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-wp-filesystem-ssh2.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-wp-importer.php
Database: Don't quote placeholders in queries going through $wpdb->prepare()
2017-09-28 04:32:46 +00:00
class-wp-internal-pointers.php
…
class-wp-links-list-table.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-wp-list-table-compat.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-wp-list-table.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-wp-media-list-table.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-wp-ms-sites-list-table.php
General: Improve terminology used when referring to installations of WordPress and its extensions.
2017-08-22 11:52:48 +00:00
class-wp-ms-themes-list-table.php
Accessibility: List Tables: use aria-current for the views current link.
2017-10-02 19:44:47 +00:00
class-wp-ms-users-list-table.php
Accessibility: List Tables: use aria-current for the views current link.
2017-10-02 19:44:47 +00:00
class-wp-plugin-install-list-table.php
Plugins: Revert unintended change from [41915].
2017-10-18 18:01:49 +00:00
class-wp-plugins-list-table.php
Plugins: Tweak the plugin icons added in [41695].
2017-10-04 23:43:46 +00:00
class-wp-post-comments-list-table.php
…
class-wp-posts-list-table.php
Administration: Add .protected-post-excerpt class to password-protected post excerpts in the posts list.
2017-10-05 02:50:46 +00:00
class-wp-screen.php
Dashboard: Remove "Try Gutenberg" callout.
2017-10-23 20:48:47 +00:00
class-wp-site-icon.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-wp-terms-list-table.php
Quick/Bulk Edit: Improve the inline error messages styling.
2017-10-02 21:52:52 +00:00
class-wp-theme-install-list-table.php
Accessibility: List Tables: use aria-current for the views current link.
2017-10-02 19:44:47 +00:00
class-wp-themes-list-table.php
General: Fix various instances of incorrect filter docs and incorrect filter and action parameters.
2017-08-03 15:43:43 +00:00
class-wp-upgrader-skin.php
Docs: Remove @access notations from method DocBlocks in wp-admin/* classes.
2017-07-27 00:40:43 +00:00
class-wp-upgrader-skins.php
Load: Re-add class-wp-upgrader-skins.php.
2016-12-03 03:40:41 +00:00
class-wp-upgrader.php
Upgrades: Remove the usage of each() from WP_Upgrader for PHP 7.2 compatibility.
2017-10-11 04:24:50 +00:00
class-wp-users-list-table.php
Users: Revert [41613], [41614], and [41623] as this feature needs some more work.
2017-10-04 22:17:46 +00:00
comment.php
…
continents-cities.php
…
credits.php
Docs: Standardise the format used for documenting parameters passed by reference.
2017-10-02 22:14:46 +00:00
dashboard.php
Dashboard: Remove "Try Gutenberg" callout.
2017-10-23 20:48:47 +00:00
deprecated.php
Permalinks: Change structure tag button state more reliably.
2017-09-26 08:24:46 +00:00
edit-tag-messages.php
…
export.php
Docs: Add missing backtick character in export_wp() DocBlock.
2017-06-27 00:58:41 +00:00
file.php
Filesystem API: Add more specificity to the rules for valid files in validate_file().
2017-10-24 23:15:49 +00:00
image-edit.php
Media: Rename several attachment related parameters from $post_id to $attachment_id for clarity, and improve related
2017-08-22 11:12:44 +00:00
image.php
Docs: Fix various filter documentation.
2017-08-03 14:34:44 +00:00
import.php
Standardise on performing api.WordPress.org requests over SSL when possible, falling back to non-SSL when appropriate.
2017-09-27 08:00:49 +00:00
list-table.php
…
media.php
Media: Don't backdate media uploaded to pages.
2017-10-21 13:27:48 +00:00
menu.php
…
meta-boxes.php
I18N: Use a consistent pattern for translator comments for placeholders in some more Customizer strings.
2017-10-24 22:47:46 +00:00
misc.php
Rewrite Rules: Remove redundant if condition in extract_from_markers().
2017-10-18 21:28:46 +00:00
ms-admin-filters.php
Options, Meta APIs: Require a confirmation link in an email to be clicked when a user attempts to change the network
2017-09-27 14:17:45 +00:00
ms-deprecated.php
Docs: Standardize and add missing deprecation notations in DocBlocks for the following functions:
2017-06-22 17:48:45 +00:00
ms.php
General: Improve terminology used when referring to installations of WordPress and its extensions.
2017-08-22 11:52:48 +00:00
nav-menu.php
Taxonomy: After [40984], add the most_used label for non-hierarchical taxonomies too, and use it on the Menus screen.
2017-10-24 11:23:24 +00:00
network.php
Network Admin: After [41923], move the second <p> tag to a new line for better readability.
2017-10-18 20:51:48 +00:00
noop.php
Docs: Add missing file header to wp-admin/includes/noop.php, introduced in [34037].
2017-01-25 23:10:43 +00:00
options.php
Permalinks: Change structure tag button state more reliably.
2017-09-26 08:24:46 +00:00
plugin-install.php
Standardise on performing api.WordPress.org requests over SSL when possible, falling back to non-SSL when appropriate.
2017-09-27 08:00:49 +00:00
plugin.php
Plugin Editor: Revert superseded changes to activate_plugin() and plugin_sandbox_scrape().
2017-10-11 00:03:48 +00:00
post.php
Posts, Post Types: Simplify the wording in post locking notice.
2017-10-03 15:11:48 +00:00
revision.php
Revisions: correct a timezone display issue.
2017-09-21 23:33:44 +00:00
schema.php
Transients: Clear expired transients from the database in a daily cron task.
2017-10-21 13:22:49 +00:00
screen.php
…
taxonomy.php
…
template.php
I18N: Replace hardcoded file name in a translatable string in convert_to_screen() with a placeholder.
2017-10-18 15:46:52 +00:00
theme-install.php
General: Improve terminology used when referring to installations of WordPress and its extensions.
2017-08-22 11:52:48 +00:00
theme.php
I18N: Use a consistent pattern for translator comments for placeholders in some more Customizer strings.
2017-10-24 22:47:46 +00:00
translation-install.php
General: Improve terminology used when referring to installations of WordPress and its extensions.
2017-08-22 11:52:48 +00:00
update-core.php
Retire Press This and extract it to a plugin. First run.
2017-09-24 14:22:54 +00:00
update.php
General: Improve terminology used when referring to installations of WordPress and its extensions.
2017-08-22 11:52:48 +00:00
upgrade.php
Transients: Clear expired transients from the database in a daily cron task.
2017-10-21 13:22:49 +00:00
user.php
Docs: Remove & prefixes from parameter documentation to avoid doc parsing errors.
2017-10-02 22:03:33 +00:00
widgets.php
Accessibility: Improve the sidebar toggles in the Widgets screen.
2017-09-27 16:29:44 +00:00