Make WordPress Core


Ignore:
Timestamp:
03/12/2026 02:06:43 AM (2 weeks ago)
Author:
peterwilsoncc
Message:

Grouped backports for the 5.7 branch.

  • XML-RPC: Switch to wp_safe_remote() when fetching a pingback URL.
  • HTML API: Prevent WP_HTML_Tag_Processor instances being unserialized and add some extra logic for validating pattern and template file paths.
  • KSES: Optimize PCRE pattern detecting numeric character references.
  • Customize: Improve escaping approach used for nav menu attributes.
  • Media: Ensure the attachment parent is accessible to the user before showing a link to it in the media manager.
  • Administration: Ensure client-side templates are only detected when they're correctly associated with a script tag.
  • Filesystem API: Don't attempt to extract invalid files from a zip when using the PclZip library.

Merges [61879-61885,61887,61890,61913] to the 5.7 branch.

Props johnbillion, xknown, dmsnell, jorbin, peterwilson, desrosj, westonruter, jonsurrell, aurdasjb.

Location:
branches/5.7
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/5.7

  • branches/5.7/tests/phpunit/tests/post/nav-menu.php

    r50284 r61953  
    974974        );
    975975
     976        $this->assertSame( 'Test Cat - "Pre-Slashed" Cat Name & >', $category->name );
     977
    976978        $category_item_id = wp_update_nav_menu_item(
    977979            $this->menu_id,
     
    982984                'menu-item-object-id' => $category->term_id,
    983985                'menu-item-status'    => 'publish',
    984                 /*
    985                  * Interestingly enough, if we use `$cat->name` for the menu item title,
    986                  * we won't be able to replicate the bug because it's in htmlentities form.
    987                  */
    988                 'menu-item-title'     => $category_name,
     986                'menu-item-title'     => $category->name,
    989987            )
    990988        );
Note: See TracChangeset for help on using the changeset viewer.