Make WordPress Core


Ignore:
Timestamp:
08/06/2026 07:38:52 PM (2 months ago)
Author:
desrosj
Message:

Security: Backport the WordPress 7.0.3 security fixes to the 5.9 branch.

  • Users: Ensure a proper email address is used before sending email confirmations.
  • Formatting: Prevent stack overflow in safecss_filter_attr.
  • Multisite: Enforce the active signup policy for existing users.
  • HTTP API: Improve compliance with IPv4 Special-Purpose Address Space.
  • Users: Prevent Usernames from mangling HTML
  • Canonical: Only redirect for publicly viewable post types.
  • Administration: When wp_is_large_user_count(), ensure that the post author is always added to author dropdown.
  • Editor: Fix output for post date.

Merges [63060],[63061],[63062],[63063],[63064],[63065],[63067] to the 5.9 branch.

Props xknown, westonruter, jeremyfelt, peterwilsoncc, paulkevan, lucasbustamante, jorbin, desrosj, vortfu, dmsnell, johnbillion, ehtis, batmoo, lancewillett, jonsurrell, isabel_brison, bernhard-reiter, tyxla, aduth.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/6.0/package.json

    r62216 r63100  
    8484                "@wordpress/block-directory": "3.4.19",
    8585                "@wordpress/block-editor": "8.5.11",
    86                 "@wordpress/block-library": "7.3.19",
     86                "@wordpress/block-library": "7.3.20",
    8787                "@wordpress/block-serialization-default-parser": "4.6.1",
    8888                "@wordpress/blocks": "11.5.4",
Note: See TracChangeset for help on using the changeset viewer.