|
#62709
|
Script modules integration with wp_resource_hints
|
|
has-patch
|
normal
|
minor
|
7.2
|
enhancement
|
5 weeks ago
|
|
#36791
|
Set load order when enqueuing scripts and styles
|
|
has-patch
|
normal
|
normal
|
|
enhancement
|
7 years ago
|
|
#57548
|
Stop concatenating scripts and stylesheets in wp-admin and retire load-scripts.php and load-styles.php
|
westonruter*
|
has-patch
|
normal
|
normal
|
7.2
|
enhancement
|
11 hours ago
|
|
#43825
|
Style/script loading infrastructure: Etag header as a hash of script/style handles and their corresponding versions
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
8 years ago
|
|
#38800
|
add WP_ADMIN_URL and WP_INCLUDES_URL constants
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
9 years ago
|
|
#43781
|
adding apply_filters on $handle in localize
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
8 years ago
|
|
#20558
|
allow wp_localize_script data to be added to existing objects
|
|
dev-feedback
|
normal
|
normal
|
|
enhancement
|
7 years ago
|
|
#40276
|
enhancement: add a $type parameter to wp_add_inline_script()
|
|
dev-feedback
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
3 months ago
|
|
#56425
|
wp_localize_script assign to const and freeze instead of var to avoid reassignments
|
|
dev-feedback
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
4 years ago
|
|
#37162
|
wp_style_add_data and wp_script_add_data should accept SRI information
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
8 years ago
|
|
#53848
|
'is_feed was called incorrectly' notice if `wp_styles()` is called before the query
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
5 years ago
|
|
#59780
|
Add functionality to dequeue a block style added via wp_enqueue_block_style
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
3 years ago
|
|
#43900
|
Add hint about blocked Javascript as possible error reason in script-loader.php
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
8 years ago
|
|
#51837
|
Adding `add_theme_support` for html5 for scripts, does not remove the type attribute from `wp-emoji-release.min.js`
|
SergeyBiryukov
|
has-patch
|
normal
|
normal
|
Future Release
|
defect (bug)
|
21 months ago
|
|
#65272
|
Blocks' opinionated styles are not loading on demand in classic themes
|
westonruter*
|
has-patch
|
normal
|
normal
|
7.2
|
defect (bug)
|
13 days ago
|
|
#55485
|
Clarify `wp_should_load_separate_core_block_assets()`, `block.json` script expectations
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
3 years ago
|
|
#59972
|
Clarify description of wp_script_add_data()
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
23 months ago
|
|
#24713
|
Compression in load_styles.php does not always work, causing inability to use the admin
|
|
|
normal
|
normal
|
|
defect (bug)
|
7 years ago
|
|
#65750
|
Compression test sends unauthorized AJAX requests for users without manage_options
|
|
has-patch
|
normal
|
minor
|
Future Release
|
defect (bug)
|
3 weeks ago
|
|
#63017
|
Compression via PHP documented and in URL but not used anymore
|
|
has-patch
|
normal
|
normal
|
Future Release
|
defect (bug)
|
3 months ago
|
|
#45106
|
Concerns related to moving mce_external_plugins filter to WP_Scripts::__construct
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
8 years ago
|
|
#26113
|
Create a WordPress-specific, dependable reference to the WP-bundled jQuery object.
|
|
|
normal
|
normal
|
|
defect (bug)
|
7 years ago
|
|
#55184
|
Custom style handle attached to a custom block style is never load even if the block is in the page.
|
|
needs-unit-tests
|
normal
|
normal
|
Future Release
|
defect (bug)
|
5 months ago
|
|
#63179
|
Dependencies should load in the footer if the script is loaded in the footer
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
17 months ago
|
|
#53638
|
Duplicate inline JS
|
|
|
normal
|
minor
|
|
defect (bug)
|
2 years ago
|
|
#52320
|
Empty entries in WP_Scripts 'extra' field
|
|
has-patch
|
low
|
trivial
|
7.2
|
defect (bug)
|
4 days ago
|
|
#17916
|
Enqueued styles are only printed on login_footer in wp-login.php
|
|
dev-feedback
|
normal
|
normal
|
Future Release
|
defect (bug)
|
8 years ago
|
|
#61828
|
Global Styles: Refactor wp_add_inline_style() to use HTML API
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
2 years ago
|
|
#45008
|
Inconsistent use of 'script_loader_src' and 'style_loader_src' filters when performing concatenation
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
8 years ago
|
|
#59114
|
Infinite loop after upgrading from WordPress 6.1.3 to 6.2
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
3 years ago
|
|
#54993
|
Inline output using wp_enqueue_block_style adds unnecessary paths
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
5 years ago
|
|
#60850
|
Localize script not working in WordPress 6.5-RC3-57856
|
|
close
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
2 years ago
|
|
#13078
|
Make wp_register_style and wp_enqueue_style consistent
|
|
has-patch
|
normal
|
normal
|
|
defect (bug)
|
7 years ago
|
|
#46089
|
Memory exhaustion when setting script translations on `wp-i18n`
|
|
needs-unit-tests
|
normal
|
normal
|
Future Release
|
defect (bug)
|
6 years ago
|
|
#36779
|
Move /wp-admin/load-scripts.php and /wp-admin/load-styles.php to /wp-includes
|
|
close
|
normal
|
normal
|
|
defect (bug)
|
12 months ago
|
|
#47789
|
NGINX: Request for media-view.js leads to "zero size buf in writer"
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
7 years ago
|
|
#49742
|
No longer able to enqueue multiple Google Fonts with wp_enqueue_style
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
5 years ago
|
|
#35963
|
Only remove item from WP_Dependencies::to_do if it was successfully processed
|
|
needs-unit-tests
|
normal
|
normal
|
|
defect (bug)
|
7 years ago
|
|
#21520
|
Prevent recursive script dependencies in wp_enqueue_script
|
|
|
normal
|
normal
|
|
defect (bug)
|
7 years ago
|
|
#61657
|
Script "in_footer" => false with "defer" will make all dependencies that are not deferred load in head
|
|
close
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
8 months ago
|
|
#15833
|
Script concatenation fails to take external dependencies into account.
|
|
has-patch
|
normal
|
normal
|
Future Release
|
defect (bug)
|
6 weeks ago
|
|
#49470
|
Script loader: simplify maintenance
|
|
|
normal
|
normal
|
Future Release
|
defect (bug)
|
6 years ago
|
|
#64812
|
Scripts: wp_enqueue_registered_block_scripts_and_styles() does not include modules
|
|
has-patch
|
normal
|
normal
|
Future Release
|
defect (bug)
|
5 months ago
|
|
#63908
|
Style concatenation may duplicate inline styles
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
12 months ago
|
|
#61435
|
Style dependencies are not inlined
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
2 years ago
|
|
#61625
|
Styles enqueued from block.json are not correctly configured for RTL
|
westonruter*
|
has-patch
|
normal
|
normal
|
Future Release
|
defect (bug)
|
2 weeks ago
|
|
#52879
|
The SCRIPT_DEBUG constant is ignored when concatenating scripts
|
|
|
normal
|
minor
|
Future Release
|
defect (bug)
|
4 years ago
|
|
#65515
|
ThickBox ReferenceError: imgLoader is not defined due to "use strict" contamination in load-scripts.php
|
wildworks
|
reporter-feedback
|
normal
|
normal
|
Future Release
|
defect (bug)
|
7 days ago
|
|
#42440
|
Uncaught TypeError: $(...).wpColorPicker is not a function
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
9 years ago
|
|
#61755
|
Use WPINC constant in script-loader.php
|
|
close
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
12 months ago
|
|
#36448
|
When concatenating scripts in script-loader dependencies may not be honoured.
|
|
|
normal
|
normal
|
|
defect (bug)
|
12 months ago
|
|
#36449
|
When concatenating styles in script-loader dependencies may not be honoured.
|
|
|
normal
|
normal
|
|
defect (bug)
|
12 months ago
|
|
#54956
|
[5.9] wp_block_type args - "style" and "script" are always loaded on Frontend
|
|
needs-unit-tests
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
4 years ago
|
|
#55695
|
error on script_loader.php
|
|
reporter-feedback
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
4 years ago
|
|
#39991
|
jQuery UI Datepicker Localization Error with PHP date 'S'
|
|
has-patch
|
normal
|
normal
|
Future Release
|
defect (bug)
|
8 years ago
|
|
#54777
|
passing empty object to wp_localize_script will convert it to empty array instead of empty object
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
5 years ago
|
|
#47322
|
scenario based-bug in the file load-style.php
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
12 months ago
|
|
#63043
|
script-loader 'colors' src true invalid argument
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
18 months ago
|
|
#62265
|
wp-admin honors style-sheet <=> 'SCRIPT_DEBUG' is true.
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
22 months ago
|
|
#41990
|
wp_add_inline_script() does not print if the handler has already processed
|
|
dev-feedback
|
normal
|
normal
|
Future Release
|
defect (bug)
|
3 years ago
|
|
#55030
|
wp_enqueue_script( 'jquery-ui-autocomplete' ) - is enqueueing a bunch of extra scripts I don't need
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
4 years ago
|
|
#58075
|
wp_enqueue_scripts action not firing at the right time with block themes
|
|
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
3 years ago
|
|
#59539
|
wp_register_style and wp_register_script adds ver incorrectly
|
|
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
3 years ago
|
|
#63693
|
wp_should_load_block_assets_on_demand doing it wrong too early
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
2 weeks ago
|
|
#64789
|
Security audit for API key storage on the Connectors screen
|
|
dev-feedback
|
normal
|
normal
|
Future Release
|
task (blessed)
|
10 days ago
|
|
#55514
|
2FA by default for WordPress
|
|
|
normal
|
normal
|
Awaiting Review
|
feature request
|
3 years ago
|
|
#43215
|
Allow wp_kses to pass allowed CSS properties
|
|
|
normal
|
normal
|
Awaiting Review
|
feature request
|
9 months ago
|
|
#20140
|
Ask old password to change user password
|
|
dev-feedback
|
normal
|
major
|
Future Release
|
feature request
|
4 weeks ago
|
|
#53902
|
Automating the creation of inline javascript and inline stylesheet nonces or hashes
|
|
|
normal
|
normal
|
Awaiting Review
|
feature request
|
2 years ago
|
|
#30465
|
Dashboard alert if a plugin/theme was removed from WordPress repo
|
|
dev-feedback
|
normal
|
normal
|
Future Release
|
feature request
|
6 months ago
|
|
#32067
|
Remove inline javascript from WP-Core to allow CSP protection
|
|
close
|
normal
|
normal
|
Future Release
|
feature request
|
4 months ago
|
|
#62202
|
allow plugin versions to be flagged as security updates
|
|
close
|
normal
|
normal
|
Awaiting Review
|
feature request
|
23 months ago
|
|
#62384
|
.htaccess lacks
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
21 months ago
|
|
#63727
|
A new function to sanitize an array
|
|
dev-feedback
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
13 months ago
|
|
#37757
|
Add `allowed_classes` to `maybe_unserialize` When WordPress is running on PHP 7+
|
|
dev-feedback
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
16 months ago
|
|
#23165
|
Admin validation errors on form nonce element IDs (_wpnonce)
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
6 years ago
|
|
#58636
|
Automatic Sanitization of Nonces in wp_verify_nonce
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
3 years ago
|
|
#40237
|
Educate users about modern password best-practices
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
4 years ago
|
|
#56141
|
Enhance installer security
|
|
dev-feedback
|
high
|
major
|
Future Release
|
enhancement
|
7 weeks ago
|
|
#51611
|
Escape echoing Core functions
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
6 years ago
|
|
#64481
|
Explore Sec-Fetch Headers as a Core-Supported CSRF Mitigation Mechanism
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
7 months ago
|
|
#28521
|
FORCE_SSL constant for really forcing SSL
|
adamsilverstein
|
has-patch
|
normal
|
normal
|
Future Release
|
enhancement
|
5 days ago
|
|
#43320
|
Harden API requests against man-in-the-middle attacks
|
|
|
low
|
minor
|
Awaiting Review
|
enhancement
|
8 years ago
|
|
#62949
|
HttpOnly flag for the post password cookie
|
|
dev-feedback
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
18 months ago
|
|
#44058
|
Include security sniffs in PHPCS ruleset
|
|
|
normal
|
normal
|
Future Release
|
enhancement
|
8 years ago
|
|
#51159
|
Let's expand our context specific escaping methods for wp_json_encode().
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
7 months ago
|
|
#36087
|
Migration plan from insecure RNG fallback
|
|
|
normal
|
normal
|
Future Release
|
enhancement
|
6 years ago
|
|
#51407
|
Remove inline event handlers and JavaScript URIs for Strict CSP-compatibility
|
adamsilverstein
|
dev-feedback
|
normal
|
normal
|
Future Release
|
enhancement
|
5 weeks ago
|
|
#57424
|
Specific hook for Content Security Policy
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
4 years ago
|
|
#61706
|
Support for storing and getting encrypted options
|
|
dev-feedback
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
18 months ago
|
|
#37000
|
Support for the SameSite cookie attribute
|
johnbillion*
|
has-patch
|
normal
|
normal
|
7.2
|
enhancement
|
5 weeks ago
|
|
#51438
|
Use CSP directive upgrade-insecure-requests when using HTTPS
|
|
needs-unit-tests
|
normal
|
normal
|
Future Release
|
enhancement
|
5 years ago
|
|
#60470
|
Use `filter_input` instead of superglobals where possible
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
3 years ago
|
|
#63329
|
Use check_ajax_referer() instead of check_admin_referer() for AJAX requests in media form handling.
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
16 months ago
|
|
#65448
|
Use the new Uri\Rfc3986\Uri::parse in wp_parse_url() if PHP 8.5 is available
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
8 weeks ago
|
|
#36177
|
default htaccess should include security measures
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
20 months ago
|
|
#38474
|
wp_signups.activation_key stores activation keys in plain text
|
SergeyBiryukov
|
dev-feedback
|
normal
|
normal
|
Future Release
|
enhancement
|
7 weeks ago
|
|
#65054
|
$_GET['pagenow'] and $_GET['widget'] unsanitized in dashboard AJAX handler
|
rajeshcp
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
4 weeks ago
|
|
#52333
|
Lack of the : entity on the list of allowed entity names in kses.php
|
|
has-patch
|
normal
|
minor
|
Awaiting Review
|
defect (bug)
|
6 years ago
|
|
#41391
|
Links to media in password protected pages
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
9 years ago
|