Context Navigation

nav-menu.php

Timestamp:

03/13/2026 12:41:24 PM (4 months ago)

Author:

johnbillion

Message:

Grouped backports for the 5.0 branch.

XML-RPC: Switch to wp_safe_remote() when fetching a pingback URL.
HTML API: Prevent WP_HTML_Tag_Processor instances being unserialized and add some extra logic for validating pattern and template file paths.
KSES: Optimize PCRE pattern detecting numeric character references.
Customize: Improve escaping approach used for nav menu attributes.
Media: Ensure the attachment parent is accessible to the user before showing a link to it in the media manager.
Administration: Ensure client-side templates are only detected when they're correctly associated with a script tag.
Filesystem API: Don't attempt to extract invalid files from a zip when using the PclZip library.

Props johnbillion, xknown, dmsnell, jorbin, peterwilson, desrosj, westonruter, jonsurrell, aurdasjb.

Location:

branches/5.0

Files:

branches/5.0
- Property svn:mergeinfo changed
  /trunk merged: 61879-61884,61886-61887,61890,61913

-              r43899
+              r62003
+                }
                 if ( $args['menu-item-title'] == $original_title )
+                if ( wp_unslash( $args['menu-item-title'] ) === $original_title ) {
                         $args['menu-item-title'] = '';
+                }
                 // hack to get wp to create a post object when too many properties are empty

Note: See TracChangeset for help on using the changeset viewer.