Commits

Breadcrumbs

History for

on4.0

User selector

All users

All time

Commit History

Commits on Jun 10, 2020

• General: Backport several commits for release.

  Show description for 6e08e2f
  whyisjake

  committed
  6e08e2f

  Copy full SHA for 6e08e2f

Commits on Oct 14, 2019

• Backporting several bug fixes.

  Show description for 4ea34ab
  whyisjake

  committed
  4ea34ab

  Copy full SHA for 4ea34ab

Commits on Sep 4, 2019

• Improve URL validation in `wp_validate_redirect()`.

  Show description for 2cc58c5
  SergeyBiryukov

  committed
  2cc58c5

  Copy full SHA for 2cc58c5

Commits on Mar 6, 2017

• Strip control characters before validating redirect.

  Show description for 0bdfa4d
  aaroncampbell

  committed
  0bdfa4d

  Copy full SHA for 0bdfa4d

Commits on Jun 21, 2016

• Admin: Allow for the consistent filtering of `auth_redirect_scheme`

  Show description for e6989d0
  jeremyfelt

  committed
  e6989d0

  Copy full SHA for e6989d0

Commits on Feb 2, 2016

• Better validation of the URL used in HTTP redirects.

  Show description for 26d5310
  ocean90

  committed
  26d5310

  Copy full SHA for 26d5310

Commits on Nov 20, 2014

• Use hash_equals() for old md5 hashes.

  Show description for 2d4a78a
  nacin

  committed
  2d4a78a

  Copy full SHA for 2d4a78a

Commits on Sep 23, 2014

• Add safeguards for when ext/hash is not compiled with PHP.

  Show description for df6d18c
  nacin

  committed
  df6d18c

  Copy full SHA for df6d18c

Commits on Aug 27, 2014

• Rename the public methods in the session tokens API.

  Show description for e334539
  nacin

  committed
  e334539

  Copy full SHA for e334539

Commits on Aug 26, 2014

• Require a non-empty $nonce value in wp_verify_nonce().

  Show description for bf0272c
  nacin

  committed
  bf0272c

  Copy full SHA for bf0272c

Commits on Aug 10, 2014

• s/does/does not in `wp_set_password()` docblock.

  Show description for e8adfff
  DrewAPicture

  committed
  e8adfff

  Copy full SHA for e8adfff

• Improve the `wp_set_password()` PHPDoc with a note to guard against executing the function on every page load, such as through a theme's functions.php file.

  Show description for 5aef1c5
  DrewAPicture

  committed
  5aef1c5

  Copy full SHA for 5aef1c5

Commits on Aug 6, 2014

• Escape late in get_avatar().

  Show description for 4984b04
  nacin

  committed
  4984b04

  Copy full SHA for 4984b04

• Constant time for wp_verify_nonce().

  Show description for b2d8983
  nacin

  committed
  b2d8983

  Copy full SHA for b2d8983

Commits on Jul 18, 2014

• Tie cookies and nonces to user sessions so they may be invalidated upon logout.

  Show description for 97fcbef
  nacin

  committed
  97fcbef

  Copy full SHA for 97fcbef

Commits on Jul 1, 2014

• Asterisk is an allowed character in a URI and should not be stripped out by wp_sanitize_redirect().

  Show description for 92a7523
  SergeyBiryukov

  committed
  92a7523

  Copy full SHA for 92a7523

Commits on Jun 29, 2014

• Use the `WPINC` constant when loading `class-phpass.php`

  Show description for dcd7ff8
  staylor

  committed
  dcd7ff8

  Copy full SHA for dcd7ff8

Commits on Jun 20, 2014

• Fix documentation for wp_create_nonce() which wrongly suggests these tokens are actually numbers used once.

  Show description for 18d0697
  nacin

  committed
  18d0697

  Copy full SHA for 18d0697

Commits on Jun 11, 2014

• Don't use variable variables in `wp_salt()`.

  Show description for 0675902
  staylor

  committed
  0675902

  Copy full SHA for 0675902

Commits on May 30, 2014

• Update the `$secure_logged_in_cookie` variable in the 'secure_logged_in_cookie' hook docs following [28627].

  Show description for 1da8a18
  DrewAPicture

  committed
  1da8a18

  Copy full SHA for 1da8a18

• Use a secure logged_in_cookie when the home URL is forced HTTPS (see #27954).

  Show description for 8d980de
  nacin

  committed
  8d980de

  Copy full SHA for 8d980de

Commits on May 15, 2014

• Eliminate the use of `extract()` in `wp_mail()`. Check the filtered array for each value before re-setting variables.

  Show description for 6dd4495
  staylor

  committed
  6dd4495

  Copy full SHA for 6dd4495

• Eliminate the use of `extract()` in `wp_validate_auth_cookie()`.

  Show description for 3c418d4
  staylor

  committed
  3c418d4

  Copy full SHA for 3c418d4

Commits on Apr 8, 2014

• Harden HMAC verification. props duck_.

  Show description for 3234ade
  nacin

  committed
  3234ade

  Copy full SHA for 3234ade

Commits on Apr 7, 2014

• Inline documentation fixes related to the `determine_current_user` filter

  Show description for c765ed8
  DrewAPicture

  committed
  c765ed8

  Copy full SHA for c765ed8

Commits on Mar 28, 2014

• Inline documentation for hooks in wp-includes/pluggable.php.

  Show description for 57f3e4c
  DrewAPicture

  committed
  57f3e4c

  Copy full SHA for 57f3e4c

• Always decode special characters for email subjects.

  Show description for 98ac075
  nacin

  committed
  98ac075

  Copy full SHA for 98ac075

Commits on Mar 17, 2014

• Avoid notices in wp_notify_postauthor() when a post has no author.

  Show description for 2e9869e
  nacin

  committed
  2e9869e

  Copy full SHA for 2e9869e

• Use get_comment_link() in wp_notify_postauthor().

  Show description for 7fa7c13
  nacin

  committed
  7fa7c13

  Copy full SHA for 7fa7c13

Commits on Mar 9, 2014

• Allow for custom authentication handlers for all requests.

  Show description for 517de7e
  nacin

  committed
  517de7e

  Copy full SHA for 517de7e

Commits on Feb 9, 2014

• Improve inline documentation for `wp_new_user_notification()`.

  Show description for d670819
  DrewAPicture

  committed
  d670819

  Copy full SHA for d670819

Commits on Feb 7, 2014

• Fix typo in wp_set_auth_cookie() description.

  Show description for ab112fe
  SergeyBiryukov

  committed
  ab112fe

  Copy full SHA for ab112fe

Commits on Dec 24, 2013

• First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin.

  Show description for bd39e26
  DrewAPicture

  committed
  bd39e26

  Copy full SHA for bd39e26

Commits on Nov 26, 2013

• Inline documentation for the following filter hooks in wp-includes/pluggable.php:

  Show description for a736126
  DrewAPicture

  committed
  a736126

  Copy full SHA for a736126

Commits on Nov 25, 2013

• Fix `comment_notification_recipients` filter behavior so that it is still respected even on comments left by the post author

  Show description for 9cbffc9
  markjaquith

  committed
  9cbffc9

  Copy full SHA for 9cbffc9