Jake Spurlock dcab984b1b Prevent stored XSS through wp_targeted_link_rel(). ...

Props: vortfu, whyisjake, peterwilsoncc, xknown,  SergeyBiryukov, flaviozavan.



git-svn-id: https://develop.svn.wordpress.org/trunk@46894 602fd350-edb4-49c9-b593-d223f7449a82

2019-12-12 17:51:35 +00:00

..

Autop.php

Build/Test Tools: Ignore EOL differences in tests using multiline string assertions.

2019-10-29 14:26:41 +00:00

balanceTags.php

Formatting: Improve accuracy of force_balance_tags() and add support for custom element tags.

2019-09-02 10:24:18 +00:00

BlogInfo.php

…

CapitalPDangit.php

…

CleanPre.php

…

ConvertInvalidEntries.php

…

date.php

Date/Time: Rewrite and simplify get_gmt_from_date(), get_date_from_gmt(), and iso8601_to_datetime() using wp_timezone().

2019-08-23 11:02:51 +00:00

Emoji.php

Emoji: Update Twemoji to version 12.0.0.

2019-04-08 05:21:49 +00:00

ent2ncr.php

…

EscAttr.php

…

EscHtml.php

…

EscTextarea.php

…

EscUrl.php

Build/Test Tools: Ignore EOL differences in tests using multiline string assertions.

2019-10-29 14:26:41 +00:00

ExcerptRemoveBlocks.php

Fix parsing of inner blocks when auto-generating an excerpt. Helps to prevent cases where dynamic inner blocks may cause an infinite loop if trying to auto-generate an excerpt.

2019-04-24 21:38:21 +00:00

GetUrlInContent.php

…

HtmlExcerpt.php

…

HumanTimeDiff.php

Formatting: Add support for seconds to human_time_diff().

2019-06-28 06:43:27 +00:00

IsEmail.php

…

isoDescrambler.php

…

JSEscape.php

…

LikeEscape.php

…

LinksAddTarget.php

…

MakeClickable.php

Comments: Add rel="nofollow ugc" attribute when converting plain URLs to <a> tags in comments via make_clickable().

2019-10-21 20:39:16 +00:00

MapDeep.php

Coding Standards: Upgrade WPCS to 1.0.0

2018-08-17 01:50:26 +00:00

NormalizeWhitespace.php

…

redirect.php

Build/Test Tools: Adjust the test for wp_redirect() status codes added in [46641] per the documentation and coding standards.

2019-11-04 12:57:17 +00:00

RemoveAccents.php

…

SanitizeFileName.php

…

SanitizeMimeType.php

…

SanitizeOrderby.php

…

SanitizePost.php

…

SanitizeTextField.php

Build/Test Tools: Ignore EOL differences in tests using multiline string assertions.

2019-10-29 14:26:41 +00:00

SanitizeTitle.php

…

SanitizeTitleWithDashes.php

…

SanitizeTrackbackUrls.php

…

SanitizeUser.php

…

SeemsUtf8.php

…

Slashit.php

…

Smilies.php

Formatting: Don't convert smilies in ignored tags that have attributes.

2019-06-27 02:04:17 +00:00

StripSlashesDeep.php

…

UrlencodeDeep.php

…

URLShorten.php

…

Utf8UriEncode.php

…

WPBasename.php

…

WpHtmlEditPre.php

…

WpHtmlSplit.php

…

WPMakeLinkRelative.php

…

WPRelNoFollow.php

Coding Standards: Fix WPCS issue in [45990].

2019-09-04 18:40:13 +00:00

WPRelUgc.php

Comments: Add rel="nofollow ugc" attribute to links in comments.

2019-09-30 01:29:10 +00:00

WpReplaceInHtmlTags.php

…

WpRichEditPre.php

…

WPSpecialchars.php

Coding Standards: Fix the remaining issues in /tests.

2019-07-08 00:55:20 +00:00

WPStripAllTags.php

…

WPTargetedLinkRel.php

Prevent stored XSS through wp_targeted_link_rel().

2019-12-12 17:51:35 +00:00

WPTexturize.php

Coding Standards: Fix the remaining issues in /tests.

2019-07-08 00:55:20 +00:00

WpTrimExcerpt.php

…

WPTrimWords.php

Posts, Post Types: In wp_trim_words() make sure the $num_words parameter is always an integer, as documented, to avoid a PHP warning.

2019-08-14 17:17:51 +00:00

Zeroise.php

…