WordPress.org
Get WordPress

Make WordPress Core

Changeset 58483


Ignore:
Timestamp:
06/24/2024 03:23:25 PM (5 months ago)
Author:
audrasjb
Message:

Grouped Backports to the 5.9 branch.

  • Editor: Fix Path Traversal issue on Windows in Template-Part Block.
  • Editor: Sanitize Template Part HTML tag on save.

Merges [58470], [58471], [58472] and [58473] to the 5.9 branch.
Props xknown, peterwilsoncc, jorbin, bernhard-reiter, azaozz.

Location:
branches/5.9
Files:
6 edited

Legend:

Unmodified
Added
Removed

  • branches/5.9/package-lock.json

    r57447 r58483  
    29602960            "version": "0.0.29",
    29612961            "resolved": "https://registry.npmjs.org/@types/json5/-/json5-0.0.29.tgz",
    2962             "integrity": "sha1-7ihweulOEdK4J7y+UnC86n8+ce4=",
     2962            "integrity": "sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==",
    29632963            "dev": true
    29642964        },
    … …  
    37243724        },
    37253725        "@wordpress/block-directory": {
    3726             "version": "3.0.30",
    3727             "resolved": "https://registry.npmjs.org/@wordpress/block-directory/-/block-directory-3.0.30.tgz",
    3728             "integrity": "sha512-SYSR7LHYZq1sTSKQh2xv6Z6g7DEAMzfNqjpUPnm5s2UkA59RKR7+J3cVTYcSAs/7WNl/QH91B345YUORe/Y7DQ==",
     3726            "version": "3.0.32",
     3727            "resolved": "https://registry.npmjs.org/@wordpress/block-directory/-/block-directory-3.0.32.tgz",
     3728            "integrity": "sha512-T5rNgTfzWRknbh3ENAwXYKImrhnuwys8vI1QEaMgkYlkTVsYbKX/+lX3Vypq3NGVhKKDbhATLQGTbxQRc/IdGg==",
    37293729            "requires": {
    37303730                "@babel/runtime": "^7.16.0",
    … …  
    37373737                "@wordpress/core-data": "^4.0.11",
    37383738                "@wordpress/data": "^6.1.5",
    3739                 "@wordpress/edit-post": "^5.0.30",
     3739                "@wordpress/edit-post": "^5.0.32",
    37403740                "@wordpress/editor": "^12.0.22",
    37413741                "@wordpress/element": "^4.0.4",
    … …  
    37983798        },
    37993799        "@wordpress/block-library": {
    3800             "version": "6.0.30",
    3801             "resolved": "https://registry.npmjs.org/@wordpress/block-library/-/block-library-6.0.30.tgz",
    3802             "integrity": "sha512-mXG4a5kH9mHQ9JtkbSyOABdK0KfbNCs+s2HzlAQ82DqSNnwKuYqQKYjpBgdD3cyLk7CIZTjz02wxMAc+p/qqNw==",
     3800            "version": "6.0.31",
     3801            "resolved": "https://registry.npmjs.org/@wordpress/block-library/-/block-library-6.0.31.tgz",
     3802            "integrity": "sha512-gA1Um2sfAN1lV+dZ7w0QkK0/L3RxBQe+wUJw82Mrryswou4k3izXqhgZaOaOOjPivuvgmxu9K3RyTAqf62FZtg==",
    38033803            "requires": {
    38043804                "@babel/runtime": "^7.16.0",
    … …  
    39793979        },
    39803980        "@wordpress/customize-widgets": {
    3981             "version": "2.0.31",
    3982             "resolved": "https://registry.npmjs.org/@wordpress/customize-widgets/-/customize-widgets-2.0.31.tgz",
    3983             "integrity": "sha512-VkJww51L5NI3qjrw7p+pcUWKWie3Z7sNfyGMBUUuCDZxMHJMl8fb5k5IFJxFgV0nyesG8EVEexpiI7xqIlQ/lw==",
     3981            "version": "2.0.32",
     3982            "resolved": "https://registry.npmjs.org/@wordpress/customize-widgets/-/customize-widgets-2.0.32.tgz",
     3983            "integrity": "sha512-CRjEiai7ryBs7E3IEciFk/N5Xz/B+hON68TYzzFzyjFfltIh6M8eNCevgFIG0itp63yfaV5qmM1ifVhkrkkBcA==",
    39843984            "requires": {
    39853985                "@babel/runtime": "^7.16.0",
    39863986                "@wordpress/a11y": "^3.2.4",
    39873987                "@wordpress/block-editor": "^8.0.18",
    3988                 "@wordpress/block-library": "^6.0.30",
     3988                "@wordpress/block-library": "^6.0.31",
    39893989                "@wordpress/blocks": "^11.1.5",
    39903990                "@wordpress/components": "^19.2.3",
    … …  
    41314131        },
    41324132        "@wordpress/edit-post": {
    4133             "version": "5.0.31",
    4134             "resolved": "https://registry.npmjs.org/@wordpress/edit-post/-/edit-post-5.0.31.tgz",
    4135             "integrity": "sha512-/FJ8OytoFoQBvIciLjL6SH31dE/nV5ir3FFrlaDu/+SMV8nKBH2gGS0BD7bTjqyhRXz9wQ0M+ivNPgVBsj2HGw==",
     4133            "version": "5.0.32",
     4134            "resolved": "https://registry.npmjs.org/@wordpress/edit-post/-/edit-post-5.0.32.tgz",
     4135            "integrity": "sha512-qQ6/yOHqz/NwjkwYy6AD9IhM416LoU7FZ+Nf+Elooy/kl+QUZajcngMz5FXXVJgEZ94+5tAcTQdMc9u+dExMQA==",
    41364136            "requires": {
    41374137                "@babel/runtime": "^7.16.0",
    … …  
    41394139                "@wordpress/api-fetch": "^5.2.7",
    41404140                "@wordpress/block-editor": "^8.0.18",
    4141                 "@wordpress/block-library": "^6.0.30",
     4141                "@wordpress/block-library": "^6.0.31",
    41424142                "@wordpress/blocks": "^11.1.5",
    41434143                "@wordpress/components": "^19.2.3",
    … …  
    41764176        },
    41774177        "@wordpress/edit-site": {
    4178             "version": "3.0.31",
    4179             "resolved": "https://registry.npmjs.org/@wordpress/edit-site/-/edit-site-3.0.31.tgz",
    4180             "integrity": "sha512-BQw1vlrvhlfn4quTu3F208U8a4rWjW/+TqrRe41N31TmrCrQZgqgPJRBKvE3ypYncTd9zL6zKunmXy7XC5Yzdw==",
     4178            "version": "3.0.32",
     4179            "resolved": "https://registry.npmjs.org/@wordpress/edit-site/-/edit-site-3.0.32.tgz",
     4180            "integrity": "sha512-dpDgJeWxqCGO6Un7UrhnF7geBDGtyXQ1TIA4aehRIQobvrnaCUyOyRc+R5i6uJQ+1P+YO7zgmCJtW5SCxPl01Q==",
    41814181            "requires": {
    41824182                "@babel/runtime": "^7.16.0",
    … …  
    41844184                "@wordpress/api-fetch": "^5.2.7",
    41854185                "@wordpress/block-editor": "^8.0.18",
    4186                 "@wordpress/block-library": "^6.0.30",
     4186                "@wordpress/block-library": "^6.0.31",
    41874187                "@wordpress/blocks": "^11.1.5",
    41884188                "@wordpress/components": "^19.2.3",
    … …  
    42174217        },
    42184218        "@wordpress/edit-widgets": {
    4219             "version": "3.1.26",
    4220             "resolved": "https://registry.npmjs.org/@wordpress/edit-widgets/-/edit-widgets-3.1.26.tgz",
    4221             "integrity": "sha512-rdYG1kprYZqxlSle2Wd8FE/+XxqQWm1PfLYGAuXTHG2ywtb6yU9D+T+VdDJPiOGc51moogFD+vbCLnHpXrLYUw==",
     4219            "version": "3.1.27",
     4220            "resolved": "https://registry.npmjs.org/@wordpress/edit-widgets/-/edit-widgets-3.1.27.tgz",
     4221            "integrity": "sha512-qkbrvmuVw+SRAoQkosufvcg/JNCKrWXXds2V4U2Z9neQ0eshpFETawdqsrAVvyK4sTvy2nzcgB9NpWl/GoX8Bw==",
    42224222            "requires": {
    42234223                "@babel/runtime": "^7.16.0",
    … …  
    42254225                "@wordpress/api-fetch": "^5.2.7",
    42264226                "@wordpress/block-editor": "^8.0.18",
    4227                 "@wordpress/block-library": "^6.0.30",
     4227                "@wordpress/block-library": "^6.0.31",
    42284228                "@wordpress/blocks": "^11.1.5",
    42294229                "@wordpress/components": "^19.2.3",
    … …  
    86538653            "version": "0.2.4",
    86548654            "resolved": "https://registry.npmjs.org/clone-deep/-/clone-deep-0.2.4.tgz",
    8655             "integrity": "sha1-TnPdCen7lxzDhnDF3O2cGJZIHMY=",
     8655            "integrity": "sha512-we+NuQo2DHhSl+DP6jlUiAhyAjBQrYnpOk15rN6c6JSPScjiCLh8IbSU+VTcph6YS3o7mASE8a0+gbZ7ChLpgg==",
    86568656            "dev": true,
    86578657            "requires": {
    … …  
    86858685            "version": "4.6.0",
    86868686            "resolved": "https://registry.npmjs.org/co/-/co-4.6.0.tgz",
    8687             "integrity": "sha1-bqa989hTrlTMuOR7+gvz+QMfsYQ=",
     8687            "integrity": "sha512-QVb0dM5HvG+uaxitm8wONl7jltx8dqhfU33DcqtOZcLSVIKSDDLDi7+0LbAKiyI8hD9u42m2YxXSkMGWThaecQ==",
    86888688            "dev": true
    86898689        },
    … …  
    88778877            "version": "0.1.4",
    88788878            "resolved": "https://registry.npmjs.org/computed-style/-/computed-style-0.1.4.tgz",
    8879             "integrity": "sha1-fzRP2FhLLkJb7cpKGvwOMAuwXXQ="
     8879            "integrity": "sha512-WpAmaKbMNmS3OProfHIdJiNleNJdgUrJfbKArXua28QF7+0CoZjlLn0lp6vlc+dl5r2/X9GQiQRQQU4BzSa69w=="
    88808880        },
    88818881        "concat-map": {
    … …  
    96549654            "version": "0.10.0",
    96559655            "resolved": "https://registry.npmjs.org/cwd/-/cwd-0.10.0.tgz",
    9656             "integrity": "sha1-FyQAaUBXwioTsM8WFix+S3p/5Wc=",
     9656            "integrity": "sha512-YGZxdTTL9lmLkCUTpg4j0zQ7IhRB5ZmqNBbGCl3Tg6MP/d5/6sY7L5mmTjzbc6JKgVZYiqTQTNhPFsbXNGlRaA==",
    96579657            "dev": true,
    96589658            "requires": {
    … …  
    1190011900            "version": "1.2.2",
    1190111901            "resolved": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-1.2.2.tgz",
    11902             "integrity": "sha1-C4HrqJflo9MdHD0QL48BRB5VlEk=",
     11902            "integrity": "sha512-rtmc+cjLZqnu9dSYosX9EWmSJhTwpACgJQTfj4hgg2JjOD/6SIQalZrt4a3aQeh++oNxkazcaxrhPUj6+g5G/Q==",
    1190311903            "dev": true,
    1190411904            "requires": {
    … …  
    1227812278            "version": "2.0.6",
    1227912279            "resolved": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz",
    12280             "integrity": "sha1-PYpcZog6FqMMqGQ+hR8Zuqd5eRc=",
     12280            "integrity": "sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==",
    1228112281            "dev": true
    1228212282        },
    … …  
    1248112481            "version": "0.1.3",
    1248212482            "resolved": "https://registry.npmjs.org/find-file-up/-/find-file-up-0.1.3.tgz",
    12483             "integrity": "sha1-z2gJG8+fMApA2kEbN9pczlovvqA=",
     12483            "integrity": "sha512-mBxmNbVyjg1LQIIpgO8hN+ybWBgDQK8qjht+EbrTCGmmPV/sc7RF1i9stPTD6bpvXZywBdrwRYxhSdJv867L6A==",
    1248412484            "dev": true,
    1248512485            "requires": {
    … …  
    1249712497            "version": "0.1.2",
    1249812498            "resolved": "https://registry.npmjs.org/find-pkg/-/find-pkg-0.1.2.tgz",
    12499             "integrity": "sha1-G9wiwG42NlUy4qJIBGhUuXiNpVc=",
     12499            "integrity": "sha512-0rnQWcFwZr7eO0513HahrWafsc3CTFioEB7DRiEYCUM/70QXSY8f3mCST17HXLcPvEhzH/Ty/Bxd72ZZsr/yvw==",
    1250012500            "dev": true,
    1250112501            "requires": {
    … …  
    1263412634            "version": "0.1.5",
    1263512635            "resolved": "https://registry.npmjs.org/for-own/-/for-own-0.1.5.tgz",
    12636             "integrity": "sha1-UmXGgaTylNq78XyVCbZ2OqhFEM4=",
     12636            "integrity": "sha512-SKmowqGTJoPzLO1T0BBJpkfp3EMacCMOuH40hOUbrbzElVktk4DioXVM99QkLCyKoiuOmyjgcWMpVz2xjE7LZw==",
    1263712637            "dev": true,
    1263812638            "requires": {
    … …  
    1275712757            "version": "0.1.0",
    1275812758            "resolved": "https://registry.npmjs.org/fs-exists-sync/-/fs-exists-sync-0.1.0.tgz",
    12759             "integrity": "sha1-mC1ok6+RjnLQjeyehnP/K1qNat0=",
     12759            "integrity": "sha512-cR/vflFyPZtrN6b38ZyWxpWdhlXrzZEBawlpBQMq7033xVY7/kg0GDMBK5jg8lDYQckdJ5x/YC88lM3C7VMsLg==",
    1276012760            "dev": true
    1276112761        },
    … …  
    1310013100            "version": "0.2.3",
    1310113101            "resolved": "https://registry.npmjs.org/global-modules/-/global-modules-0.2.3.tgz",
    13102             "integrity": "sha1-6lo77ULG1s6ZWk+KEmm12uIjgo0=",
     13102            "integrity": "sha512-JeXuCbvYzYXcwE6acL9V2bAOeSIGl4dD+iwLY9iUx2VBJJ80R18HCn+JCwHM9Oegdfya3lEkGCdaRkSyc10hDA==",
    1310313103            "dev": true,
    1310413104            "requires": {
    … …  
    1311013110                    "version": "0.2.0",
    1311113111                    "resolved": "https://registry.npmjs.org/is-windows/-/is-windows-0.2.0.tgz",
    13112                     "integrity": "sha1-3hqm1j6indJIc3tp8f+LgALSEIw=",
     13112                    "integrity": "sha512-n67eJYmXbniZB7RF4I/FTjK1s6RPOCTxhYrVYLRaCt3lF0mpWZPKr3T2LSZAqyjQsxR2qMmGYXXzK0YWwcPM1Q==",
    1311313113                    "dev": true
    1311413114                }
    … …  
    1311813118            "version": "0.1.5",
    1311913119            "resolved": "https://registry.npmjs.org/global-prefix/-/global-prefix-0.1.5.tgz",
    13120             "integrity": "sha1-jTvGuNo8qBEqFg2NSW/wRiv+948=",
     13120            "integrity": "sha512-gOPiyxcD9dJGCEArAhF4Hd0BAqvAe/JzERP7tYumE4yIkmIedPUVXcJFWbV3/p/ovIIvKjkrTk+f1UVkq7vvbw==",
    1312113121            "dev": true,
    1312213122            "requires": {
    … …  
    1313013130                    "version": "0.2.0",
    1313113131                    "resolved": "https://registry.npmjs.org/is-windows/-/is-windows-0.2.0.tgz",
    13132                     "integrity": "sha1-3hqm1j6indJIc3tp8f+LgALSEIw=",
     13132                    "integrity": "sha512-n67eJYmXbniZB7RF4I/FTjK1s6RPOCTxhYrVYLRaCt3lF0mpWZPKr3T2LSZAqyjQsxR2qMmGYXXzK0YWwcPM1Q==",
    1313313133                    "dev": true
    1313413134                },
    … …  
    1318013180            "version": "0.1.4",
    1318113181            "resolved": "https://registry.npmjs.org/globjoin/-/globjoin-0.1.4.tgz",
    13182             "integrity": "sha1-L0SUrIkZ43Z8XLtpHp9GMyQoXUM=",
     13182            "integrity": "sha512-xYfnw62CKG8nLkZBfWbhWwDw02CHty86jfPcc2cr3ZfeuK9ysoVPPEUxf21bAD/rWAgk52SuBrLJlefNy8mvFg==",
    1318313183            "dev": true
    1318413184        },
    … …  
    1326313263            "version": "0.1.5",
    1326413264            "resolved": "https://registry.npmjs.org/gradient-parser/-/gradient-parser-0.1.5.tgz",
    13265             "integrity": "sha1-DH4heVWeXOfY1x9EI6+TcQCyJIw="
     13265            "integrity": "sha512-+uPlcVbjrKOnTzvz0MjTj7BfACj8OmxIa1moIjJV7btvhUMSJk0D47RfDCgDrZE3dYMz9Cf5xKJwnrKLjUq0KQ=="
    1326613266        },
    1326713267        "growly": {
    … …  
    1718717187            "version": "1.0.1",
    1718817188            "resolved": "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz",
    17189             "integrity": "sha1-nbe1lJatPzz+8wp1FC0tkwrXJlE=",
     17189            "integrity": "sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==",
    1719017190            "dev": true
    1719117191        },
    … …  
    1769017690            "version": "0.3.1",
    1769117691            "resolved": "https://registry.npmjs.org/line-height/-/line-height-0.3.1.tgz",
    17692             "integrity": "sha1-SxIF7d4YKHKl76PI9iCzGHqcVMk=",
     17692            "integrity": "sha512-YExecgqPwnp5gplD2+Y8e8A5+jKpr25+DzMbFdI1/1UAr0FJrTFv4VkHLf8/6B590i1wUPJWMKKldkd/bdQ//w==",
    1769317693            "requires": {
    1769417694                "computed-style": "~0.1.3"
    … …  
    1778817788            "version": "4.0.8",
    1778917789            "resolved": "https://registry.npmjs.org/lodash.debounce/-/lodash.debounce-4.0.8.tgz",
    17790             "integrity": "sha1-gteb/zCmfEAF/9XiUVMArZyk168=",
     17790            "integrity": "sha512-FT1yDzDYEoYWhnSGnpE/4Kj1fLZkDFyqRb7fNt6FdYOSxlUWAtp42Eh6Wb0rGIv/m9Bgo7x4GhQbm5Ys4SG5ow==",
    1779117791            "dev": true
    1779217792        },
    … …  
    1784817848            "version": "4.4.2",
    1784917849            "resolved": "https://registry.npmjs.org/lodash.truncate/-/lodash.truncate-4.4.2.tgz",
    17850             "integrity": "sha1-WjUNoLERO4N+z//VgSy+WNbq4ZM=",
     17850            "integrity": "sha512-jttmRe7bRse52OsWIMDLaXxWqRAmtIUccAQ3garviCqJjafXOfNMO0yMfNpdD6zbGaTU0P5Nz7e7gAT6cKmJRw==",
    1785117851            "dev": true
    1785217852        },
    … …  
    1871218712            "version": "2.0.1",
    1871318713            "resolved": "https://registry.npmjs.org/mixin-object/-/mixin-object-2.0.1.tgz",
    18714             "integrity": "sha1-T7lJRB2rGCVA8f4DW6YOGUel5X4=",
     18714            "integrity": "sha512-ALGF1Jt9ouehcaXaHhn6t1yGWRqGaHkPFndtFVHfZXOvkIZ/yoGaSi0AHVTafb3ZBGg4dr/bDwnaEKqCXzchMA==",
    1871518715            "dev": true,
    1871618716            "requires": {
    … …  
    1872218722                    "version": "0.1.8",
    1872318723                    "resolved": "https://registry.npmjs.org/for-in/-/for-in-0.1.8.tgz",
    18724                     "integrity": "sha1-2Hc5COMSVhCZUrH9ubP6hn0ndeE=",
     18724                    "integrity": "sha512-F0to7vbBSHP8E3l6dCjxNOLuSFAACIxFy3UehTUlG7svlXi37HHsDkyVcHo0Pq8QwrE+pXvWSVX3ZT1T9wAZ9g==",
    1872518725                    "dev": true
    1872618726                }
    … …  
    1886918869            "version": "1.4.0",
    1887018870            "resolved": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz",
    18871             "integrity": "sha1-Sr6/7tdUHywnrPspvbvRXI1bpPc=",
     18871            "integrity": "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==",
    1887218872            "dev": true
    1887318873        },
    … …  
    1896918969            "version": "0.4.0",
    1897018970            "resolved": "https://registry.npmjs.org/node-int64/-/node-int64-0.4.0.tgz",
    18971             "integrity": "sha1-h6kGXNs1XTGC2PlM4RGIuCXGijs=",
     18971            "integrity": "sha512-O5lz91xSOeoXP6DulyHfllpq+Eg00MWitZIbtPfoSEvqIHdl5gfcY6hYzDWnj0qD5tz52PI08u9qUvSVeUBeHw==",
    1897218972            "dev": true
    1897318973        },
    … …  
    1911619116            "version": "1.0.1",
    1911719117            "resolved": "https://registry.npmjs.org/normalize-wheel/-/normalize-wheel-1.0.1.tgz",
    19118             "integrity": "sha1-rsiGr/2wRQcNhWRH32Ls+GFG7EU="
     19118            "integrity": "sha512-1OnlAPZ3zgrk8B91HyRj+eVv+kS5u+Z0SCsak6Xil/kmgEia50ga7zfkumayonZrImffAxPU/5WcyGhzetHNPA=="
    1911919119        },
    1912019120        "npm-conf": {
    … …  
    2079220792            "version": "0.2.3",
    2079320793            "resolved": "https://registry.npmjs.org/postcss-media-query-parser/-/postcss-media-query-parser-0.2.3.tgz",
    20794             "integrity": "sha1-J7Ocb02U+Bsac7j3Y1HGCeXO8kQ=",
     20794            "integrity": "sha512-3sOlxmbKcSHMjlUXQZKQ06jOswE7oVkXPxmZdoB1r5l0q6gTFTQSHxNxOrCccElbW7dxNytifNEo8qidX2Vsig==",
    2079520795            "dev": true
    2079620796        },
    … …  
    2108321083            "version": "0.1.1",
    2108421084            "resolved": "https://registry.npmjs.org/postcss-resolve-nested-selector/-/postcss-resolve-nested-selector-0.1.1.tgz",
    21085             "integrity": "sha1-Kcy8fDfe36wwTp//C/FZaz9qDk4=",
     21085            "integrity": "sha512-HvExULSwLqHLgUy1rl3ANIqCsvMS0WHss2UOsXhXnQaZ9VCc2oBvIpXrl00IUFT5ZDITME0o6oiXeiHr2SAIfw==",
    2108621086            "dev": true
    2108721087        },
    … …  
    2254522545            "version": "0.1.1",
    2254622546            "resolved": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-0.1.1.tgz",
    22547             "integrity": "sha1-shklmlYC+sXFxJatiUpujMQwJh4=",
     22547            "integrity": "sha512-QxMPqI6le2u0dCLyiGzgy92kjkkL6zO0XyvHzjdTNH3zM6e5Hz3BwG6+aEyNgiQ5Xz6PwTwgQEj3U50dByPKIA==",
    2254822548            "dev": true,
    2254922549            "requires": {
    … …  
    2275122751            "version": "0.3.2",
    2275222752            "resolved": "https://registry.npmjs.org/rungen/-/rungen-0.3.2.tgz",
    22753             "integrity": "sha1-QAwJ6+kU57F+C27zJjQA/Cq8fLM="
     22753            "integrity": "sha512-zWl10xu2D7zoR8zSC2U6bg5bYF6T/Wk7rxwp8IPaJH7f0Ge21G03kNHVgHR7tyVkSSfAOG0Rqf/Cl38JftSmtw=="
    2275422754        },
    2275522755        "rxjs": {
    … …  
    2322123221            "version": "0.1.2",
    2322223222            "resolved": "https://registry.npmjs.org/shallow-clone/-/shallow-clone-0.1.2.tgz",
    23223             "integrity": "sha1-WQnodLp3EG1zrEFM/sH/yofZcGA=",
     23223            "integrity": "sha512-J1zdXCky5GmNnuauESROVu31MQSnLoYvlyEn6j2Ztk6Q5EHFIhxkMhYcv6vuDzl2XEzoRr856QwzMgWM/TmZgw==",
    2322423224            "dev": true,
    2322523225            "requires": {
    … …  
    2323323233                    "version": "2.0.1",
    2323423234                    "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-2.0.1.tgz",
    23235                     "integrity": "sha1-AY7HpM5+OobLkUG+UZ0kyPqpgbU=",
     23235                    "integrity": "sha512-0u8i1NZ/mg0b+W3MGGw5I7+6Eib2nx72S/QvXa0hYjEkjTknYmEYQJwGu3mLC0BrhtJjtQafTkyRUQ75Kx0LVg==",
    2323623236                    "dev": true,
    2323723237                    "requires": {
    … …  
    2324223242                    "version": "0.2.7",
    2324323243                    "resolved": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-0.2.7.tgz",
    23244                     "integrity": "sha1-f+3fLctu23fRHvHRF6tf/fCrG2U=",
     23244                    "integrity": "sha512-gkX52wvU/R8DVMMt78ATVPFMJqfW8FPz1GZ1sVHBVQHmu/WvhIWE4cE1GBzhJNFicDeYhnwp6Rl35BcAIM3YOQ==",
    2324523245                    "dev": true
    2324623246                }
    … …  
    2447324473            "version": "3.0.0",
    2447424474            "resolved": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz",
    24475             "integrity": "sha1-IzTBjpx1n3vdVv3vfprj1YjmjtM=",
     24475            "integrity": "sha512-vavAMRXOgBVNF6nyEEmL3DBK19iRpDcoIwW+swQ+CbGiu7lju6t+JklA1MHweoWtadgt4ISVUsXLyDq34ddcwA==",
    2447624476            "dev": true
    2447724477        },
    … …  
    2454224542            "version": "0.1.0",
    2454324543            "resolved": "https://registry.npmjs.org/style-search/-/style-search-0.1.0.tgz",
    24544             "integrity": "sha1-eVjHk+R+MuB9K1yv5cC/jhLneQI=",
     24544            "integrity": "sha512-Dj1Okke1C3uKKwQcetra4jSuk0DqbzbYtXipzFlFMZtowbF1x7BKJwB9AayVMyFARvU8EDrZdcax4At/452cAg==",
    2454524545            "dev": true
    2454624546        },
    … …  
    2511125111            "version": "1.0.0",
    2511225112            "resolved": "https://registry.npmjs.org/svg-tags/-/svg-tags-1.0.0.tgz",
    25113             "integrity": "sha1-WPcc7jvVGbWdSyqEO2x95krAR2Q=",
     25113            "integrity": "sha512-ovssysQTa+luh7A5Weu3Rta6FJlFBBbInjOh722LIt6klpU2/HtdUbszju/G4devcvk8PGt7FCLv5wftu3THUA==",
    2511425114            "dev": true
    2511525115        },
    … …  
    2537825378            "version": "0.2.0",
    2537925379            "resolved": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz",
    25380             "integrity": "sha1-f17oI66AUgfACvLfSoTsP8+lcLQ=",
     25380            "integrity": "sha512-N+8UisAXDGk8PFXP4HAzVR9nbfmVJ3zYLAWiTIoqC5v5isinhr+r5uaO8+7r3BMfuNIufIsA7RdpVgacC2cSpw==",
    2538125381            "dev": true
    2538225382        },
    … …  
    2550225502            "version": "2.0.0",
    2550325503            "resolved": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-2.0.0.tgz",
    25504             "integrity": "sha1-3F5pjL0HkmW8c+A3doGk5Og/YW4="
     25504            "integrity": "sha512-/OaKK0xYrs3DmxRYqL/yDc+FxFUVYhDlXMhRmv3z915w2HF1tnN1omB354j8VUGO/hbRzyD6Y3sA7v7GS/ceog=="
    2550525505        },
    2550625506        "to-object-path": {

  • branches/5.9/package.json

    r57447 r58483  
    8383        "@wordpress/autop": "3.2.3",
    8484        "@wordpress/blob": "3.2.2",
    85         "@wordpress/block-directory": "3.0.30",
     85        "@wordpress/block-directory": "3.0.32",
    8686        "@wordpress/block-editor": "8.0.18",
    87         "@wordpress/block-library": "6.0.30",
     87        "@wordpress/block-library": "6.0.31",
    8888        "@wordpress/block-serialization-default-parser": "4.2.3",
    8989        "@wordpress/blocks": "11.1.5",
    … …  
    9191        "@wordpress/compose": "5.0.7",
    9292        "@wordpress/core-data": "4.0.11",
    93         "@wordpress/customize-widgets": "2.0.31",
     93        "@wordpress/customize-widgets": "2.0.32",
    9494        "@wordpress/data": "6.1.5",
    9595        "@wordpress/data-controls": "2.2.9",
    … …  
    9898        "@wordpress/dom": "3.2.7",
    9999        "@wordpress/dom-ready": "3.2.3",
    100         "@wordpress/edit-post": "5.0.31",
    101         "@wordpress/edit-site": "3.0.31",
    102         "@wordpress/edit-widgets": "3.1.26",
     100        "@wordpress/edit-post": "5.0.32",
     101        "@wordpress/edit-site": "3.0.32",
     102        "@wordpress/edit-widgets": "3.1.27",
    103103        "@wordpress/editor": "12.0.22",
    104104        "@wordpress/element": "4.0.4",

  • branches/5.9/src/wp-includes/blocks.php

    r55774 r58483  
    669669 */
    670670function filter_block_kses( $block, $allowed_html, $allowed_protocols = array() ) {
    671     $block['attrs'] = filter_block_kses_value( $block['attrs'], $allowed_html, $allowed_protocols );
     671    $block['attrs'] = filter_block_kses_value( $block['attrs'], $allowed_html, $allowed_protocols, $block );
    672672
    673673    if ( is_array( $block['innerBlocks'] ) ) {
    … …  
    685685 *
    686686 * @since 5.3.1
     687 * @since 6.5.5 Added the `$block_context` parameter.
    687688 *
    688689 * @param string[]|string $value             The attribute value to filter.
    … …  
    691692 *                                           such as 'post'.
    692693 * @param string[]        $allowed_protocols Array of allowed URL protocols.
     694 * @param array           $block_context     Optional. The block the attribute belongs to, in parsed block array format.
    693695 * @return string[]|string The filtered and sanitized result.
    694696 */
    695 function filter_block_kses_value( $value, $allowed_html, $allowed_protocols = array() ) {
     697function filter_block_kses_value( $value, $allowed_html, $allowed_protocols = array(), $block_context = null ) {
    696698    if ( is_array( $value ) ) {
    697699        foreach ( $value as $key => $inner_value ) {
    698             $filtered_key   = filter_block_kses_value( $key, $allowed_html, $allowed_protocols );
    699             $filtered_value = filter_block_kses_value( $inner_value, $allowed_html, $allowed_protocols );
     700            $filtered_key   = filter_block_kses_value( $key, $allowed_html, $allowed_protocols, $block_context );
     701            $filtered_value = filter_block_kses_value( $inner_value, $allowed_html, $allowed_protocols, $block_context );
     702
     703            if ( isset( $block_context['blockName'] ) && 'core/template-part' === $block_context['blockName'] ) {
     704                $filtered_value = filter_block_core_template_part_attributes( $filtered_value, $filtered_key, $allowed_html );
     705            }
    700706
    701707            if ( $filtered_key !== $key ) {
    … …  
    710716
    711717    return $value;
     718}
     719
     720/**
     721 * Sanitizes the value of the Template Part block's `tagName` attribute.
     722 *
     723 * @since 6.5.5
     724 *
     725 * @param string          $attribute_value   The attribute value to filter.
     726 * @param string          $attribute_name    The attribute name.
     727 * @param array[]|string  $allowed_html      An array of allowed HTML elements and attributes,
     728 *                                           or a context name such as 'post'. See wp_kses_allowed_html()
     729 *                                           for the list of accepted context names.
     730 * @return string The sanitized attribute value.
     731 */
     732function filter_block_core_template_part_attributes( $attribute_value, $attribute_name, $allowed_html ) {
     733    if ( empty( $attribute_value ) || 'tagName' !== $attribute_name ) {
     734        return $attribute_value;
     735    }
     736    if ( ! is_array( $allowed_html ) ) {
     737        $allowed_html = wp_kses_allowed_html( $allowed_html );
     738    }
     739    return isset( $allowed_html[ $attribute_value ] ) ? $attribute_value : '';
    712740}
    713741

  • branches/5.9/src/wp-includes/blocks/template-part.php

    r55832 r58483  
    142142    $content = $wp_embed->autoembed( $content );
    143143
    144     if ( empty( $attributes['tagName'] ) ) {
     144    if ( empty( $attributes['tagName'] ) || tag_escape( $attributes['tagName'] ) !== $attributes['tagName'] ) {
    145145        $defined_areas = get_allowed_block_template_part_areas();
    146146        $area_tag      = 'div';

  • branches/5.9/src/wp-includes/formatting.php

    r55774 r58483  
    46854685 *
    46864686 * @since 2.5.0
     4687 * @since 6.5.5 Allow hyphens in tag names (i.e. custom elements).
    46874688 *
    46884689 * @param string $tag_name
    … …  
    46904691 */
    46914692function tag_escape( $tag_name ) {
    4692     $safe_tag = strtolower( preg_replace( '/[^a-zA-Z0-9_:]/', '', $tag_name ) );
     4693    $safe_tag = strtolower( preg_replace( '/[^a-zA-Z0-9-_:]/', '', $tag_name ) );
    46934694    /**
    46944695     * Filters a string cleaned and escaped for output as an HTML tag.

  • branches/5.9/src/wp-includes/functions.php

    r54545 r58483  
    59055905    }
    59065906
     5907    // Normalize path for Windows servers
     5908    $file = wp_normalize_path( $file );
     5909
    59075910    // `../` on its own is not allowed:
    59085911    if ( '../' === $file ) {
Note: See TracChangeset for help on using the changeset viewer.