Make WordPress Core


Ignore:
Timestamp:
05/16/2023 03:13:50 PM (9 months ago)
Author:
audrasjb
Message:

Grouped backports to the 6.1 branch.

  • Media: Prevent CSRF setting attachment thumbnails.
  • Embeds: Add protocol validation for WordPress Embed code.
  • I18N: Introduce sanitization function for locale.
  • Editor: Ensure block comments are of a valid form.
  • Editor: Remove shortcode support from block templates.

Merges [55760-55764] to the 6.1 branch.
Props dd32, isabel_brison, martinkrcho, matveb, ocean90, paulkevan, peterwilsoncc, timothyblynjacobs, xknown, youknowriad.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/6.1/src/wp-includes/media.php

    r54807 r55771  
    45174517        'captions'          => ! apply_filters( 'disable_captions', '' ),
    45184518        'nonce'             => array(
    4519             'sendToEditor' => wp_create_nonce( 'media-send-to-editor' ),
     4519            'sendToEditor'           => wp_create_nonce( 'media-send-to-editor' ),
     4520            'setAttachmentThumbnail' => wp_create_nonce( 'set-attachment-thumbnail' ),
    45204521        ),
    45214522        'post'              => array(
Note: See TracChangeset for help on using the changeset viewer.