Context Navigation

media.php

Timestamp:

10/29/2020 07:12:16 PM (6 years ago)

Author:

whyisjake

Message:

General: WordPress updates

XML-RPC: Improve error messages for unprivileged users.
External Libraries: Disable deserialization in Requests_Utility_FilteredIterator
Embeds: Disable embeds on deactivated Multisite sites.
Coding standards: Modify escaping functions to avoid potential false positives.
XML-RPC: Return error message if attachment ID is incorrect.
Upgrade/install: Improve logic check when determining installation status.
Meta: Sanitize meta key before checking protection status.
Themes: Ensure that only privileged users can set a background image when a theme is using the deprecated custom background page.

Brings the changes from [49380,49382-49388] to the 4.0 branch.

Props xknown, zieladam, peterwilsoncc, whyisjake, desrosj, dd32.

Location:

branches/4.0

Files:

branches/4.0
- Property svn:mergeinfo changed
  /branches/5.5 (added) merged: 49373-49379,49381
  /trunk merged: 49380,49382-49388

r47968	r49406
435	435	//<![CDATA[
436	436	addLoadEvent = function(func){if(typeof jQuery!="undefined")jQuery(document).ready(func);else if(typeof wpOnload!='function'){wpOnload=func;}else{var oldonload=wpOnload;wpOnload=function(){oldonload();func();}}};
437		var ajaxurl = '<?php echo ~~admin_url( 'admin-ajax.php', 'relative'~~ ); ?>', pagenow = 'media-upload-popup', adminpage = 'media-upload-popup',
	437	var ajaxurl = '<?php echo esc_js( admin_url( 'admin-ajax.php', 'relative' ) ); ?>', pagenow = 'media-upload-popup', adminpage = 'media-upload-popup',
438	438	isRtl = <?php echo (int) is_rtl(); ?>;
439	439	//]]>

Note: See TracChangeset for help on using the changeset viewer.

/branches/5.5 (added)	merged: 49373-49379,49381
/trunk	merged: 49380,49382-49388