Make WordPress Core


Ignore:
Timestamp:
09/30/2025 05:05:42 PM (13 months ago)
Author:
desrosj
Message:

Grouped backports for the 5.0 branch.

  • REST API: Increase the specificity of capability checks for collections when the edit context is in use.
  • Menus: Prevent HTML in menu item titles from being rendered unexpectedly.

Merges [60814], [60815], [60816] to the 5.0 branch.

Props andraganescu, desrosj, ehti, hurayraiit, iandunn, joehoyle, johnbillion, jorbin, mnelson4, noisysocks, peterwilsoncc, phillsav, rmccue, timothyblynjacobs, vortfu, westonruter , whyisjake, zieladam.

Location:
branches/5.0
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/5.0

  • branches/5.0/tests/phpunit/tests/customize/nav-menu-item-setting.php

    r41697 r60836  
    9090                        'xfn' => '',
    9191                        'status' => 'publish',
    92                         'original_title' => '',
    9392                        'nav_menu_term_id' => 0,
    9493                        '_invalid' => false,
    … …  
    544543                        'xfn' => 'hello  inject',
    545544                        'status' => 'draft',
    546                         'original_title' => 'Hi',
     545                        'original_title'   => 'Hi<script>unfilteredHtml()</script>',
    547546                        'nav_menu_term_id' => 0,
    548547                );
    … …  
    842841                        'xfn'              => '',
    843842                        'status'           => 'publish',
    844                         'original_title'   => '',
    845843                        'nav_menu_term_id' => 0,
    846844                        '_invalid'         => false,
Note: See TracChangeset for help on using the changeset viewer.