HostForge-Systems/wordpress
Template
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
fe6a992df032de6aed941c14e2754f17053824ae
wordpress/wp-includes
History
jonsurrell fe6a992df0 Use the HTML API to generate style tags. 
The HTML API escapes `<style>` tag contents to ensure the correct HTML structure. Common HTML escaping is unsuitable for `<style>` tags because they contain "raw text." The additional safety allows other restrictions, such as rejecting content with `<>`, to be relaxed or removed because the resulting tag will be well-formed.

Developed in https://github.com/WordPress/wordpress-develop/pull/10656.

Props jonsurrell, westonruter, dmsnell, ramonopoly, soyebsalar01, drw158, sabernhardt.
See #64418.

Built from https://develop.svn.wordpress.org/trunk@61418


git-svn-id: http://core.svn.wordpress.org/trunk@60730 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2025-12-30 13:03:34 +00:00
..
abilities-api
Abilities API: Enhance WP_Ability validation for execute_callback and permission_callback.
2025-12-17 15:29:38 +00:00
assets
Sync packages for WP 6.9 RC 2.
2025-11-18 12:38:41 +00:00
block-bindings
Block Bindings: Migrate term-data from key args to field.
2025-10-17 17:39:30 +00:00
block-patterns
…
block-supports
Editor: Rename block visibility support key to visibility.
2025-11-24 08:07:33 +00:00
blocks
Sync packages for WP 6.9 RC 1.
2025-11-11 13:32:43 +00:00
certificates
Security: Update composer/ca-bundle to version 1.5.9.
2025-11-06 19:33:31 +00:00
css
Media: Fix 'remove' icon in Edit Gallery mode.
2025-11-28 17:24:36 +00:00
customize
Docs: Add missing descriptions for WP_Customize_Header_Image_Control methods.
2025-11-19 17:26:28 +00:00
fonts
Use the HTML API to generate style tags.
2025-12-30 13:03:34 +00:00
html-api
HTML API: Ensure correct encoding of modified class names.
2025-12-03 17:27:31 +00:00
ID3
External Libraries: Update getID3 to version 1.9.24.
2025-11-17 22:22:33 +00:00
images
…
interactivity-api
Interactivity API: Fatal error processing incorrect closed tags.
2025-11-10 22:24:34 +00:00
IXR
Code Modernization: Address no-op function deprecations in PHP 8.5.
2025-09-03 12:18:31 +00:00
js
Heartbeat: Handle race condition in wp-auth-check where heartbeat-tick may fire before DOMContentLoaded.
2025-12-14 22:30:33 +00:00
l10n
I18N: Correct strict comparison in WP_Translations::translate_plural().
2025-07-18 12:59:31 +00:00
php-compat
…
PHPMailer
External Libraries: Upgrade PHPMailer to version 7.0.0.
2025-11-15 23:55:33 +00:00
pomo
…
Requests
…
rest-api
Options, Meta APIs: Revert additional request validity handling that was added to the /wp/v2/settings REST API route. This change needs more work to account for URL query parameters used in place of body data.
2025-11-30 11:26:30 +00:00
SimplePie
External Libraries: Backport upstream PHP 8.5 fixes for SimplePie.
2025-10-16 19:45:36 +00:00
sitemaps
…
sodium_compat
Upgrade/Install: Update sodium_compat to v1.23.0.
2025-10-06 15:48:40 +00:00
style-engine
Editor: introduce border.radiusSizes support in theme.json.
2025-10-02 23:55:33 +00:00
Text
External Libraries: Adopt standard get_temp_dir() in Text_Diff::_getTempDir().
2025-09-17 14:44:24 +00:00
theme-compat
Scripts: Remove default type attribute from tags.
2025-12-26 13:16:34 +00:00
widgets
Scripts: Remove default type attribute from tags.
2025-12-26 13:16:34 +00:00
abilities-api.php
Abilities API: Use stricter doing_action check when registering.
2025-11-04 16:34:38 +00:00
abilities.php
Fix: Core abilities invalid schemas (has examples and returns empty array intested of object).
2025-11-13 22:27:29 +00:00
admin-bar.php
Toolbar: Improve conciseness of wp_admin_bar_my_account_item().
2025-10-02 18:15:30 +00:00
atomlib.php
Code Modernization: Address no-op function deprecations in PHP 8.5.
2025-09-03 12:18:31 +00:00
author-template.php
Posts, Post Types: Update get_the_modified_author() to handle missing global $post and add (missing) $post arg.
2025-10-24 04:04:26 +00:00
block-bindings.php
Block Bindings: Add support for Nav Link and Submenu's url attr.
2025-10-20 08:52:24 +00:00
block-editor.php
Block Bindings: Communicate supported block attributes from server.
2025-09-29 08:59:31 +00:00
block-i18n.json
…
block-patterns.php
Block Editor: Move Block Patterns API functions to block-patterns.php.
2025-12-03 19:47:33 +00:00
block-template-utils.php
Revert template activation.
2025-11-07 12:42:34 +00:00
block-template.php
Revert template activation.
2025-11-07 12:42:34 +00:00
blocks.php
Interactivity API: Support for loadOnClientNavigation.
2025-10-21 11:32:35 +00:00
bookmark-template.php
…
bookmark.php
…
cache-compat.php
Caching API: Use consistent cache keys for query groups.
2025-08-31 21:43:30 +00:00
cache.php
…
canonical.php
Canonical: prevent "Undefined array key" PHP warnings when host is not set.
2025-11-04 18:31:29 +00:00
capabilities.php
Docs: Update @since x.y.z with actual version number.
2025-12-05 18:32:34 +00:00
category-template.php
General: Various fixes to the correctness of code and documentation reported by PHPStan.
2025-06-03 16:51:33 +00:00
category.php
…
class-avif-info.php
…
class-feed.php
…
class-http.php
…
class-IXR.php
…
class-json.php
Code Modernization: Replace non-canonical scalar type casts with canonical versions.
2025-08-25 13:10:29 +00:00
class-oembed.php
…
class-phpass.php
…
class-phpmailer.php
…
class-pop3.php
…
class-requests.php
…
class-simplepie.php
…
class-smtp.php
…
class-snoopy.php
…
class-walker-category-dropdown.php
…
class-walker-category.php
…
class-walker-comment.php
…
class-walker-nav-menu.php
…
class-walker-page-dropdown.php
…
class-walker-page.php
…
class-wp-admin-bar.php
…
class-wp-ajax-response.php
…
class-wp-application-passwords.php
…
class-wp-block-bindings-registry.php
Code Modernization: Fix instances of using null as an array offset.
2025-10-06 11:31:33 +00:00
class-wp-block-bindings-source.php
Code Modernization: Revert [60796]. This change needs some more work before it's fully ready.
2025-09-28 21:56:27 +00:00
class-wp-block-editor-context.php
…
class-wp-block-list.php
Docs: Correct return and parameter types for WP_Block_List methods.
2025-08-07 14:47:34 +00:00
class-wp-block-metadata-registry.php
…
class-wp-block-parser-block.php
Editor: update packages.
2025-10-21 07:14:02 +00:00
class-wp-block-parser-frame.php
…
class-wp-block-parser.php
Editor: update packages.
2025-10-21 07:14:02 +00:00
class-wp-block-pattern-categories-registry.php
Block Editor: Move Block Patterns API functions to block-patterns.php.
2025-12-03 19:47:33 +00:00
class-wp-block-patterns-registry.php
Block Editor: Move Block Patterns API functions to block-patterns.php.
2025-12-03 19:47:33 +00:00
class-wp-block-processor.php
Block Processor: Rename extract_block() method for clearer documentation.
2025-11-24 21:54:34 +00:00
class-wp-block-styles-registry.php
Code Modernization: Fix instances of using null as an array offset.
2025-10-06 11:31:33 +00:00
class-wp-block-supports.php
…
class-wp-block-template.php
…
class-wp-block-templates-registry.php
Editor: Correct error message in WP_Block_Templates_Registry::unregister().
2025-10-30 16:03:31 +00:00
class-wp-block-type-registry.php
Code Modernization: Fix instances of using null as an array offset.
2025-09-29 16:29:35 +00:00
class-wp-block-type.php
…
class-wp-block.php
Block Bindings: Polish rich-text attribute replacement code.
2025-10-20 09:20:28 +00:00
class-wp-classic-to-block-menu-converter.php
Docs: Remove redundant @access tags from DocBlocks in various files.
2025-06-18 20:39:52 +00:00
class-wp-comment-query.php
Code Modernization: Replace some isset() ternary checks with null coalescing.
2025-12-22 23:14:38 +00:00
class-wp-comment.php
…
class-wp-customize-control.php
Customizer: Accessible errors when adding new pages.
2025-09-07 02:47:36 +00:00
class-wp-customize-manager.php
Code Modernization: Replace some isset() ternary checks with null coalescing.
2025-12-22 23:14:38 +00:00
class-wp-customize-nav-menus.php
Script Loader: Add sourceURL comments to inline SCRIPT tags manually constructed in wp-includes.
2025-10-07 01:24:36 +00:00
class-wp-customize-panel.php
…
class-wp-customize-section.php
…
class-wp-customize-setting.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
class-wp-customize-widgets.php
Script Loader: Add sourceURL comments to inline SCRIPT tags manually constructed in wp-includes.
2025-10-07 01:24:36 +00:00
class-wp-date-query.php
Code Modernization: Fix instances of using null as an array offset.
2025-11-10 20:28:32 +00:00
class-wp-dependencies.php
Docs: Improve accuracy for types in phpdoc for WP_Dependencies, _WP_Dependency, WP_Scripts, and WP_Styles.
2025-12-07 04:16:33 +00:00
class-wp-dependency.php
Docs: Improve accuracy for types in phpdoc for WP_Dependencies, _WP_Dependency, WP_Scripts, and WP_Styles.
2025-12-07 04:16:33 +00:00
class-wp-duotone.php
Docs: Update various class @var tags to indicate nullability.
2025-11-25 02:00:36 +00:00
class-wp-editor.php
…
class-wp-embed.php
…
class-wp-error.php
…
class-wp-exception.php
…
class-wp-fatal-error-handler.php
…
class-wp-feed-cache-transient.php
Feeds: Cache RSS feeds in global transients.
2025-07-30 23:03:30 +00:00
class-wp-feed-cache.php
…
class-wp-hook.php
Plugins: Add missing $priority parameter to has_filter() and has_action().
2025-11-03 23:47:33 +00:00
class-wp-http-cookie.php
…
class-wp-http-curl.php
Code Modernization: Address no-op function deprecations in PHP 8.5.
2025-09-03 12:18:31 +00:00
class-wp-http-encoding.php
…
class-wp-http-ixr-client.php
…
class-wp-http-proxy.php
…
class-wp-http-requests-hooks.php
…
class-wp-http-requests-response.php
Code Modernization: Replace some isset() ternary checks with null coalescing.
2025-12-22 23:14:38 +00:00
class-wp-http-response.php
…
class-wp-http-streams.php
…
class-wp-http.php
HTTP API: Various improvements to the docblocks for HTTP functions.
2025-08-20 12:55:28 +00:00
class-wp-image-editor-gd.php
Code Modernization: Address no-op function deprecations in PHP 8.5.
2025-09-03 12:18:31 +00:00
class-wp-image-editor-imagick.php
Media: improve doc blocks for PNG handling in Imagick.
2025-08-26 21:05:30 +00:00
class-wp-image-editor.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
class-wp-list-util.php
…
class-wp-locale-switcher.php
…
class-wp-locale.php
…
class-wp-matchesmapregex.php
…
class-wp-meta-query.php
…
class-wp-metadata-lazyloader.php
Users: Revert Lazy-load user meta.
2025-10-21 15:59:33 +00:00
class-wp-navigation-fallback.php
Docs: Remove redundant @access tags from DocBlocks in various files.
2025-06-18 20:39:52 +00:00
class-wp-network-query.php
Code Modernization: Replace some isset() ternary checks with null coalescing.
2025-12-22 23:14:38 +00:00
class-wp-network.php
…
class-wp-object-cache.php
…
class-wp-oembed-controller.php
…
class-wp-oembed.php
Embeds: Remove screencast.com from oEmbed allow list.
2025-06-24 23:40:33 +00:00
class-wp-paused-extensions-storage.php
…
class-wp-phpmailer.php
External Libraries: Upgrade PHPMailer to version 6.11.1.
2025-10-01 13:23:28 +00:00
class-wp-plugin-dependencies.php
Upgrade/Install: Revert relocation of Hello Dolly plugin.
2025-10-21 04:33:29 +00:00
class-wp-post-type.php
…
class-wp-post.php
Posts, Post Types: Avoid an extra database query in WP_Post for a negative post ID.
2025-08-20 15:01:31 +00:00
class-wp-query.php
Code Modernization: Replace some isset() ternary checks with null coalescing.
2025-12-22 23:14:38 +00:00
class-wp-recovery-mode-cookie-service.php
…
class-wp-recovery-mode-email-service.php
…
class-wp-recovery-mode-key-service.php
…
class-wp-recovery-mode-link-service.php
…
class-wp-recovery-mode.php
…
class-wp-rewrite.php
Docs: Update various class @var tags to indicate nullability.
2025-11-25 02:00:36 +00:00
class-wp-role.php
…
class-wp-roles.php
Code Modernization: Replace isset() with null coalescing in WP_Roles::get_role().
2025-12-23 21:20:31 +00:00
class-wp-script-modules.php
Script Loader: Fix script module fetchpriority calculation when dependent with higher priority is not enqueued.
2025-12-22 20:20:33 +00:00
class-wp-scripts.php
Script Loader: Fix script module fetchpriority calculation when dependent with higher priority is not enqueued.
2025-12-22 20:20:33 +00:00
class-wp-session-tokens.php
…
class-wp-simplepie-file.php
External Libraries: Update the SimplePie library to version 1.9.0.
2025-09-16 22:47:31 +00:00
class-wp-simplepie-sanitize-kses.php
…
class-wp-site-query.php
Code Modernization: Replace some isset() ternary checks with null coalescing.
2025-12-22 23:14:38 +00:00
class-wp-site.php
Networks and Sites: Correct and improve terminology relating to deactivated, deleted, and archived sites on a Multisite installation.
2025-06-27 15:09:32 +00:00
class-wp-speculation-rules.php
Docs: Fix phpdoc types for WP_Speculation_Rules members.
2025-11-23 05:08:29 +00:00
class-wp-styles.php
Use the HTML API to generate style tags.
2025-12-30 13:03:34 +00:00
class-wp-tax-query.php
Docs: Correct property type for WP_Tax_Query::$no_results.
2025-06-16 17:08:31 +00:00
class-wp-taxonomy.php
…
class-wp-term-query.php
Code Modernization: Replace some isset() ternary checks with null coalescing.
2025-12-22 23:14:38 +00:00
class-wp-term.php
…
class-wp-text-diff-renderer-inline.php
…
class-wp-text-diff-renderer-table.php
…
class-wp-textdomain-registry.php
…
class-wp-theme-json-data.php
…
class-wp-theme-json-resolver.php
Theme_JSON_Resolver: check for WP_Post in query.
2025-12-22 15:57:37 +00:00
class-wp-theme-json-schema.php
…
class-wp-theme-json.php
Editor: Fix handling of default presets at block level in theme.json
2025-11-10 06:43:38 +00:00
class-wp-theme.php
Docs: Update various class @var tags to indicate nullability.
2025-11-25 02:00:36 +00:00
class-wp-token-map.php
…
class-wp-url-pattern-prefixer.php
…
class-wp-user-meta-session-tokens.php
Docs: Add a few missing @since tags.
2025-07-06 11:57:35 +00:00
class-wp-user-query.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
class-wp-user-request.php
…
class-wp-user.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
class-wp-walker.php
…
class-wp-widget-factory.php
…
class-wp-widget.php
…
class-wp-xmlrpc-server.php
XML-RPC: Update specUrl links in IXR_Server and IXR_IntrospectionServer.
2025-08-21 15:00:40 +00:00
class-wp.php
General: Rename wp_send_late_headers action to wp_finalized_template_enhancement_output_buffer.
2025-11-01 04:46:31 +00:00
class-wpdb.php
Database: Further correct MariaDB version check in wpdb::has_cap().
2025-12-03 20:54:33 +00:00
class.wp-dependencies.php
…
class.wp-scripts.php
…
class.wp-styles.php
…
comment-template.php
Comments: Ensure custom comment form fields appear for logged-in users
2025-10-21 14:00:27 +00:00
comment.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
compat-utf8.php
Coding Standards: Fix blank spaces.
2025-10-21 14:03:27 +00:00
compat.php
Media: Adjustments for official HEIF/HEIC support in added in PHP 8.5.
2025-12-01 00:36:32 +00:00
cron.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
date.php
…
default-constants.php
…
default-filters.php
Notes: refine post author notifications.
2025-11-10 22:51:35 +00:00
default-widgets.php
…
deprecated.php
Scripts: Remove default type attribute from tags.
2025-12-26 13:16:34 +00:00
embed-template.php
…
embed.php
Embeds: Add wp_oembed_add_discovery_links() to run earlier at wp_head priority 4.
2025-11-04 00:47:33 +00:00
error-protection.php
…
feed-atom-comments.php
…
feed-atom.php
…
feed-rdf.php
…
feed-rss2-comments.php
…
feed-rss2.php
…
feed-rss.php
…
feed.php
External Libraries: Update the SimplePie library to version 1.9.0.
2025-09-16 22:47:31 +00:00
fonts.php
Editor: Update Google Fonts API endpoint for WordPress 6.9.
2025-10-09 22:05:40 +00:00
formatting.php
Docs: Detail 6.9.0 changes for esc_url_raw() and sanitize_url().
2025-11-20 00:44:30 +00:00
functions.php
Scripts: Remove default type attribute from tags.
2025-12-26 13:16:34 +00:00
functions.wp-scripts.php
Docs: Improve specificity of PHP types in functions.wp-scripts.php and functions.wp-styles.php.
2025-12-22 20:45:31 +00:00
functions.wp-styles.php
Docs: Improve specificity of PHP types in functions.wp-scripts.php and functions.wp-styles.php.
2025-12-22 20:45:31 +00:00
general-template.php
Scripts: Remove default type attribute from tags.
2025-12-26 13:16:34 +00:00
global-styles-and-settings.php
Coding Standards: Remove extra check in wp_get_theme_data_template_parts().
2025-07-15 12:27:32 +00:00
http.php
HTTP API: Various improvements to the docblocks for HTTP functions.
2025-08-20 12:55:28 +00:00
https-detection.php
…
https-migration.php
…
kses.php
Editor: Allow name attribute on the details element in KSES.
2025-10-22 21:02:35 +00:00
l10n.php
I18N: Use Domain Path for script translations if available.
2025-09-11 10:13:27 +00:00
link-template.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
load.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
locale.php
…
media-template.php
A11y: Ensure icons are not spoken by screen readers.
2025-09-28 23:40:35 +00:00
media.php
Scripts: Remove default type attribute from tags.
2025-12-26 13:16:34 +00:00
meta.php
Docs: Improvements and corrections to documentation relating to metadata.
2025-05-29 23:09:28 +00:00
ms-blogs.php
…
ms-default-constants.php
…
ms-default-filters.php
…
ms-deprecated.php
Scripts: Remove default type attribute from tags.
2025-12-26 13:16:34 +00:00
ms-files.php
Networks and Sites: check if the BLOGUPLOADDIR constant is defined before using it.
2025-10-17 17:14:32 +00:00
ms-functions.php
Multisite: Improve wording when creating a user with a reserved email address.
2025-10-27 16:35:36 +00:00
ms-load.php
Docs: Switch some @internal tags to the inline format so the corresponding function or method is not treated by IDEs and static scanning tools as internal use only.
2025-05-26 11:20:35 +00:00
ms-network.php
…
ms-settings.php
Docs: Correct the order of @since and @global tags in some files.
2025-08-27 13:42:30 +00:00
ms-site.php
Networks and Sites: Correct and improve terminology relating to deactivated, deleted, and archived sites on a Multisite installation.
2025-06-27 15:09:32 +00:00
nav-menu-template.php
…
nav-menu.php
…
option.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
pluggable-deprecated.php
…
pluggable.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
plugin.php
Plugins: Add missing $priority parameter to has_filter() and has_action().
2025-11-03 23:47:33 +00:00
post-formats.php
…
post-template.php
Posts, Post Types: Ensure get_post_class() returns a list.
2025-11-19 06:03:30 +00:00
post-thumbnail-template.php
…
post.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
query.php
Caching API: Use consistent cache keys for query groups.
2025-08-31 21:43:30 +00:00
registration-functions.php
…
registration.php
…
rest-api.php
Revert template activation.
2025-11-07 12:42:34 +00:00
revision.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
rewrite.php
Coding Standards: Remove redundant checks in wp_resolve_numeric_slug_conflicts().
2025-07-11 13:16:28 +00:00
robots-template.php
…
rss-functions.php
…
rss.php
Code Modernization: Address no-op function deprecations in PHP 8.5.
2025-09-03 12:18:31 +00:00
script-loader.php
Use the HTML API to generate style tags.
2025-12-30 13:03:34 +00:00
script-modules.php
Docs: Improve specificity of types in WP_Script_Modules and script-modules.php functions.
2025-12-09 06:54:39 +00:00
session.php
…
shortcodes.php
Docs: Add some missing full stops in various DocBlocks.
2025-11-04 19:51:35 +00:00
sitemaps.php
…
speculative-loading.php
Scripts: Use appropriate JSON encoding flags for script tags.
2025-08-27 10:34:28 +00:00
spl-autoload-compat.php
…
style-engine.php
…
taxonomy.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
template-canvas.php
…
template-loader.php
General: Introduce output buffering for template enhancements.
2025-10-15 17:14:39 +00:00
template.php
Docs: Add some missing full stops in various DocBlocks.
2025-11-04 19:51:35 +00:00
theme-i18n.json
I18N: add border.radiusSizes key to theme-i18n.json
2025-12-09 06:34:29 +00:00
theme-previews.php
Scripts: Use appropriate JSON encoding flags for script tags.
2025-08-27 10:34:28 +00:00
theme-templates.php
Revert template activation.
2025-11-07 12:42:34 +00:00
theme.json
Global styles: inherit all typography styles.
2025-10-21 12:22:33 +00:00
theme.php
Use the HTML API to generate style tags.
2025-12-30 13:03:34 +00:00
update.php
Upgrade/Install: Indicate use of MyISAM storage engine in upgrade check.
2025-10-21 02:50:27 +00:00
user.php
Docs: Miscellaneous improvements and corrections to inline documentation.
2025-12-16 20:21:37 +00:00
utf8.php
Charset: wp_has_noncharacters() for more-specific Unicode handling.
2025-10-21 02:35:31 +00:00
vars.php
…
version.php
Use the HTML API to generate style tags.
2025-12-30 13:03:34 +00:00
widgets.php
Widgets: Prevent fatal errors in PHP 8 when retrieve_widgets() and wp_map_sidebars_widgets() attempt to merge non-array values.
2025-09-12 18:05:36 +00:00
wp-db.php
…
wp-diff.php
…