WordPress.org
Get WordPress

Make WordPress Core

{1} All Tickets (8373 matches)

​Create a new ticket
  • All active tickets
  • Sort by component, type, summary
  • Accepted tickets have an '*' appended to their owner's name

Results (6701 - 6800 of 8373)

← 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 →

Script Loader (23 matches)

Ticket Summary Owner Workflow Priority Severity Milestone Type Modified Comments
#48880 Using JSON.parse instead of an actual object literal when localizing scripts has-patch normal normal Awaiting Review enhancement 12/06/2019 5
#36448 When concatenating scripts in script-loader dependencies may not be honoured. normal normal defect (bug) 06/04/2019 1
#36449 When concatenating styles in script-loader dependencies may not be honoured. normal normal defect (bug) 06/04/2019 1
#54956 [5.9] wp_block_type args - "style" and "script" are always loaded on Frontend needs-unit-tests normal normal Awaiting Review defect (bug) 07/19/2022 8
#38800 add WP_ADMIN_URL and WP_INCLUDES_URL constants normal normal Awaiting Review enhancement 09/29/2017 3
#43781 adding apply_filters on $handle in localize normal normal Awaiting Review enhancement 04/16/2018 1
#20558 allow wp_localize_script data to be added to existing objects dev-feedback normal normal enhancement 06/04/2019 6
#38054 class.wp-scripts.php - add_action when init is already doing reporter-feedback normal normal Awaiting Review enhancement 04/09/2019 1
#55618 combine/concatenate enqueued relative js/css normal normal Awaiting Review feature request 04/25/2022
#40276 enhancement: add a $type parameter to wp_add_inline_script() normal normal Awaiting Review enhancement 11/08/2021 3
#55695 error on script_loader.php reporter-feedback normal normal Awaiting Review defect (bug) 05/07/2022 1
#39991 jQuery UI Datepicker Localization Error with PHP date 'S' has-patch normal normal Future Release defect (bug) 10/25/2018 6
#54777 passing empty object to wp_localize_script will convert it to empty array instead of empty object normal normal Awaiting Review defect (bug) 01/10/2022 1
#47322 scenario based-bug in the file load-style.php normal normal Awaiting Review defect (bug) 05/20/2019
#53741 wp-admin/css/common.min.css is loading on the front-end needs-docs normal normal Future Release defect (bug) 11/02/2021 14
#41990 wp_add_inline_script() does not print if the handler has already processed dev-feedback normal normal Future Release defect (bug) 04/12/2023 2
#55030 wp_enqueue_script( 'jquery-ui-autocomplete' ) - is enqueueing a bunch of extra scripts I don't need normal normal Awaiting Review defect (bug) 02/18/2022 2
#58075 wp_enqueue_scripts action not firing at the right time with block themes normal major Awaiting Review defect (bug) 05/26/2023 3
#56425 wp_localize_script assign to const and freeze instead of var to avoid reassignments dev-feedback normal normal Awaiting Review enhancement 11/08/2022 6
#46334 wp_localize_script did not output anything in wp_print_footer_scripts hook although document suggested that it should be working normal major Awaiting Review defect (bug) 02/24/2019
#37185 wp_print_styles() doesn't call "wp_print_styles" action when "$handles" argument passed needs-unit-tests normal normal defect (bug) 06/04/2019 5
#59539 wp_register_style and wp_register_script adds ver incorrectly normal major Awaiting Review defect (bug) 10/04/2023
#37162 wp_style_add_data and wp_script_add_data should accept SRI information normal normal Awaiting Review enhancement 11/14/2018 2

Security (77 matches)

Ticket Summary Owner Workflow Priority Severity Milestone Type Modified Comments
#37604 'Password Lost/Changed' emails should give indication of the strength of the new password dev-feedback normal normal Future Release feature request 04/09/2018 5
#55514 2FA by default for WordPress normal normal Awaiting Review feature request 03/06/2023 3
#38260 A FORCE_SSL_CANONICAL constant normal normal Awaiting Review enhancement 06/04/2019 1
#38259 A FORCE_SSL_CONTENT constant normal normal Awaiting Review enhancement 06/04/2019 1
#38261 A FORCE_SSL_SCRIPTS constant normal normal Awaiting Review enhancement 06/04/2019 2
#61942 Add "no-store" to Cache-Control header to prevent unexpected cache behavior normal normal Awaiting Review defect (bug) 08/30/2024 2
#57304 Add SensitiveParameter attribute to DB connection and login variables has-patch normal normal 6.7 enhancement 07/02/2024 10
#37757 Add `allowed_classes` to `maybe_unserialize` When WordPress is running on PHP 7+ has-patch normal normal Awaiting Review enhancement 09/13/2017 7
#60824 Add filters to to wp_verify_nonce() has-patch normal normal Awaiting Review enhancement 03/22/2024 1
#50437 Add leniency to the overdue check for plugin and theme auto updates normal normal Future Release task (blessed) 07/14/2020 7
#57875 Add password strength meter for password protected content normal normal Future Release enhancement 06/01/2023 1
#23165 Admin validation errors on form nonce element IDs (_wpnonce) has-patch normal normal Awaiting Review enhancement 02/08/2021 17
#43215 Allow wp_kses to pass allowed CSS properties normal normal Awaiting Review feature request 07/12/2024
#15394 Ancient "Are you sure you want to do this" now confusing dev-feedback normal minor Future Release defect (bug) 05/17/2019 17
#20140 Ask old password to change user password dev-feedback normal major Future Release feature request 07/28/2024 22
#58636 Automatic Sanitization of Nonces in wp_verify_nonce normal normal Awaiting Review enhancement 06/26/2023
#56785 Automatically catch potential security issues before release normal normal Awaiting Review enhancement 10/11/2022
#53902 Automating the creation of inline javascript and inline stylesheet nonces or hashes normal normal Awaiting Review feature request 07/03/2024 4
#39656 Create a submenu item under About admin bar for security normal normal Awaiting Review enhancement 01/23/2017 2
#30465 Dashboard alert if a plugin/theme was removed from WordPress repo dev-feedback normal normal Future Release feature request 06/19/2024 40
#53296 Do trim $hook_name within add_action() and add_filter() function has-patch normal normal Awaiting Review enhancement 05/29/2021
#60090 Double login with cloned wordpress instance normal major Awaiting Review defect (bug) 12/22/2023 6
#40237 Educate users about modern password best-practices normal normal Awaiting Review enhancement 06/06/2022 9
#56141 Enhance installer security dev-feedback high major Future Release enhancement 12/31/2023 14
#62005 Enhance wp_hash function to support custom hashing algorithms has-patch normal normal Awaiting Review enhancement 09/13/2024 3
#24907 Escape admin_url() when used for ajax_url in admin header has-patch normal normal Awaiting Review defect (bug) 06/04/2019 5
#51611 Escape echoing Core functions normal normal Awaiting Review enhancement 10/24/2020 1
#44637 Escape strings in wp-admin/themes.php reporter-feedback normal normal Awaiting Review defect (bug) 06/07/2021 2
#58900 Escaping: Output String did not run through a proper escaping function close normal normal Awaiting Review defect (bug) 12/08/2023 2
#55950 FIDO passwordless authentication? normal minor Awaiting Review feature request 06/08/2022 1
#28521 FORCE_SSL constant for really forcing SSL adamsilverstein normal normal Future Release enhancement 06/08/2023 22
#60994 Github bot detected some high risk security issue in npm packages. normal normal Awaiting Review defect (bug) 04/11/2024 1
#61322 HTTPOnly attribute for WP Test Cookies has-patch normal major Awaiting Review feature request 08/29/2024 2
#43320 Harden API requests against man-in-the-middle attacks low minor Awaiting Review enhancement 02/18/2018 2
#38536 Hook/Function to Set Content-Security-Policy normal normal Awaiting Review feature request 06/04/2019 2
#50510 Improve security of wp_nonce implementation dev-feedback normal normal Awaiting Review enhancement 07/11/2023 5
#44058 Include security sniffs in PHPCS ruleset normal normal Future Release enhancement 05/16/2018 3
#61640 Issues in edit_link Function: Inconsistent Return Values, Insufficient Permission Error Handling, and Data Sanitization has-patch normal major Awaiting Review defect (bug) 07/31/2024 4
#52333 Lack of the : entity on the list of allowed entity names in kses.php has-patch normal minor Awaiting Review defect (bug) 01/20/2021
#51159 Let's expand our context specific escaping methods for wp_json_encode(). normal normal Awaiting Review enhancement 05/09/2024 2
#41391 Links to media in password protected pages normal normal Awaiting Review defect (bug) 07/24/2017 1
#36087 Migration plan from insecure RNG fallback normal normal Future Release enhancement 09/30/2020 3
#53618 Nonce use for AJAX calls interferes with page caching normal normal Awaiting Review defect (bug) 07/07/2021 1
#59824 PHP Warning raised in pluggable.php when passing NULL instead of a string normal normal Awaiting Review defect (bug) 11/07/2023
#37559 Password protected pages require the password only once normal normal Awaiting Review defect (bug) 06/04/2019 2
#61711 Password-protected pages lacking appropriate 'Cache-Control' request header normal normal Awaiting Review defect (bug) 09/03/2024 2
#37264 Please do not chmod 666 the wp-config.php file on installation. has-patch normal normal Awaiting Review defect (bug) 03/22/2019 9
#53869 Post type / Taxonomy Label Hardening: Prevent Raw HTML tags in output / Media Library eval of HTML entities in label has-patch normal normal Awaiting Review defect (bug) 08/04/2021 3
#55228 Provide Option to Remove Password Visibility Button and Dashicons from WordPress' Login Form close normal normal Awaiting Review feature request 02/25/2022 2
#53994 REST API requests with session cookies but an invalid/missing nonce are considered authenticated for most of the request normal normal Awaiting Review defect (bug) 08/24/2021
#51407 Remove inline event handlers and JavaScript URIs for Strict CSP-compatibility adamsilverstein dev-feedback normal normal Future Release enhancement 12/26/2023 15
#32067 Remove inline javascript from WP-Core to allow CSP protection normal normal Future Release feature request 06/18/2024 20
#52544 Removing database tables allows anyone to take over all website files normal major Awaiting Review enhancement 07/05/2022 15
#50027 Retire Phpass and use PHP native password hashing needs-unit-tests normal normal Awaiting Review defect (bug) 10/13/2023 18
#43936 Settings: Warn when open registration and new user default is privileged audrasjb* has-patch normal normal 6.7 feature request 08/27/2024 56
#56860 Sodium Compat library is improperly loaded normal normal Awaiting Review defect (bug) 10/20/2022
#58771 Someone logged onto my WordPress Admin Site, changed the password, and created a User Registration normal normal Awaiting Review defect (bug) 07/10/2023
#57424 Specific hook for Content Security Policy normal normal Awaiting Review enhancement 01/05/2023
#54512 Suggestion for file protection normal normal Awaiting Review enhancement 11/25/2021
#61706 Support for storing and getting encrypted options normal normal Awaiting Review enhancement 07/19/2024
#37000 Support for the SameSite cookie attribute dev-feedback normal normal Future Release enhancement 06/06/2024 45
#29429 Support frame-ancestors directive over X-Frame-Options dev-feedback normal normal Future Release enhancement 07/29/2019 3
#38262 Task: Opt in SSL Improvements normal normal Awaiting Review enhancement 02/05/2020 3
#53019 The _sanitize_text_fields function removing the octets that incorrectly work with Arabic RTL languages. normal normal Awaiting Review defect (bug) 03/14/2023 3
#34041 Tying nonces to sessions breaks when users are switched normal major Future Release defect (bug) 06/04/2019 5
#59355 TypeError: Cannot read properties of undefined (reading 'hasClass') in wp-auth-check.min.js normal normal Awaiting Review defect (bug) 09/15/2023 1
#60864 URL sanitizing strips valid characters instead of encoding, documented use is invalid has-patch normal normal Awaiting Review defect (bug) 04/03/2024 4
#50828 Update ca-bundle.crt and remove expired certificates SergeyBiryukov has-patch normal normal Future Release defect (bug) 11/10/2021 25
#51438 Use CSP directive upgrade-insecure-requests when using HTTPS needs-unit-tests normal normal Future Release enhancement 11/09/2021 4
#52388 Use HTTPS URL already during installation if supported needs-unit-tests normal normal Future Release enhancement 01/28/2021
#60470 Use `filter_input` instead of superglobals where possible normal normal Awaiting Review enhancement 02/09/2024 3
#21022 Use bcrypt for password hashing; updating old hashes dev-feedback normal major Future Release enhancement 09/11/2024 131
#57882 User that has capability to create user can make only administrator. reporter-feedback normal normal Awaiting Review defect (bug) 03/07/2023 1
#16483 Visibility: password-protected exposes multiple pages dev-feedback normal normal Future Release defect (bug) 01/30/2022 33
#48955 WP 5.3.1 changes cause potential backwards compatibility breakage with kses normal normal Future Release defect (bug) 08/12/2020 28
#53973 WordPress <= 5.8 - Authenticated Persistent XSS (User role name) has-patch normal normal Future Release defect (bug) 06/15/2024 12
#58916 Wrong User Password Reset normal normal Awaiting Review defect (bug) 07/29/2023 3
← 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 →
Note: See TracReports for help on using and creating reports.