Context Navigation

media.php

Timestamp:

03/12/2026 02:11:14 AM (4 months ago)

Author:

peterwilsoncc

Message:

Grouped backports for the 5.6 branch.

XML-RPC: Switch to wp_safe_remote() when fetching a pingback URL.
HTML API: Prevent WP_HTML_Tag_Processor instances being unserialized and add some extra logic for validating pattern and template file paths.
KSES: Optimize PCRE pattern detecting numeric character references.
Customize: Improve escaping approach used for nav menu attributes.
Media: Ensure the attachment parent is accessible to the user before showing a link to it in the media manager.
Administration: Ensure client-side templates are only detected when they're correctly associated with a script tag.
Filesystem API: Don't attempt to extract invalid files from a zip when using the PclZip library.

Props johnbillion, xknown, dmsnell, jorbin, peterwilson, desrosj, westonruter, jonsurrell, aurdasjb.

Location:

branches/5.6

Files:

branches/5.6
- Property svn:mergeinfo changed
  /trunk merged: 61879-61885,61887,61890,61913

r56882	r61954
3895	3895	if ( $attachment->post_parent ) {
3896	3896	$post_parent = get_post( $attachment->post_parent );
3897		if ( $post_parent ) {
	3897	if ( $post_parent && current_user_can( 'read_post', $attachment->post_parent ) ) {
3898	3898	$response['uploadedToTitle'] = $post_parent->post_title ? $post_parent->post_title : __( '(no title)' );
3899	3899	$response['uploadedToLink'] = get_edit_post_link( $attachment->post_parent, 'raw' );

Note: See TracChangeset for help on using the changeset viewer.