Make WordPress Core


Ignore:
Timestamp:
09/30/2025 05:06:24 PM (3 months ago)
Author:
desrosj
Message:

Grouped backports for the 4.9 branch.

  • REST API: Increase the specificity of capability checks for collections when the edit context is in use.
  • Menus: Prevent HTML in menu item titles from being rendered unexpectedly.

Merges [60814], [60815], [60816] to the 4.9 branch.

Props andraganescu, desrosj, ehti, hurayraiit, iandunn, joehoyle, johnbillion, jorbin, mnelson4, noisysocks, peterwilsoncc, phillsav, rmccue, timothyblynjacobs, vortfu, westonruter , whyisjake, zieladam.

Location:
branches/4.9
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/4.9

  • branches/4.9/tests/phpunit/tests/customize/nav-menu-item-setting.php

    r41697 r60837  
    9090            'xfn' => '',
    9191            'status' => 'publish',
    92             'original_title' => '',
    9392            'nav_menu_term_id' => 0,
    9493            '_invalid' => false,
     
    544543            'xfn' => 'hello  inject',
    545544            'status' => 'draft',
    546             'original_title' => 'Hi',
     545            'original_title'   => 'Hi<script>unfilteredHtml()</script>',
    547546            'nav_menu_term_id' => 0,
    548547        );
     
    842841            'xfn'              => '',
    843842            'status'           => 'publish',
    844             'original_title'   => '',
    845843            'nav_menu_term_id' => 0,
    846844            '_invalid'         => false,
Note: See TracChangeset for help on using the changeset viewer.