diff --git a/browsehappy.com/public_html/index.php b/browsehappy.com/public_html/index.php index 36114b3ddd..4c8f2b9151 100644 --- a/browsehappy.com/public_html/index.php +++ b/browsehappy.com/public_html/index.php @@ -1,11 +1,17 @@ - + - - - - - class="no-js"> + class="no-js"> @@ -14,16 +20,11 @@ - - + + - - diff --git a/browsehappy.com/public_html/js/pngfix.min.js b/browsehappy.com/public_html/js/pngfix.min.js deleted file mode 100644 index 6062fb3c1c..0000000000 --- a/browsehappy.com/public_html/js/pngfix.min.js +++ /dev/null @@ -1,13 +0,0 @@ -/** -* DD_belatedPNG: Adds IE6 support: PNG images for CSS background-image and HTML . -* Author: Drew Diller -* Email: drew.diller@gmail.com -* URL: http://www.dillerdesign.com/experiment/DD_belatedPNG/ -* Version: 0.0.8a -* Licensed under the MIT License: http://dillerdesign.com/experiment/DD_belatedPNG/#license -* -* Example usage: -* DD_belatedPNG.fix('.png_bg'); // argument is a CSS selector -* DD_belatedPNG.fixPng( someNode ); // argument is an HTMLDomElement -**/ -var DD_belatedPNG={ns:"DD_belatedPNG",imgSize:{},delay:10,nodesFixed:0,createVmlNameSpace:function(){if(document.namespaces&&!document.namespaces[this.ns]){document.namespaces.add(this.ns,"urn:schemas-microsoft-com:vml")}},createVmlStyleSheet:function(){var b,a;b=document.createElement("style");b.setAttribute("media","screen");document.documentElement.firstChild.insertBefore(b,document.documentElement.firstChild.firstChild);if(b.styleSheet){b=b.styleSheet;b.addRule(this.ns+"\\:*","{behavior:url(#default#VML)}");b.addRule(this.ns+"\\:shape","position:absolute;");b.addRule("img."+this.ns+"_sizeFinder","behavior:none; border:none; position:absolute; z-index:-1; top:-10000px; visibility:hidden;");this.screenStyleSheet=b;a=document.createElement("style");a.setAttribute("media","print");document.documentElement.firstChild.insertBefore(a,document.documentElement.firstChild.firstChild);a=a.styleSheet;a.addRule(this.ns+"\\:*","{display: none !important;}");a.addRule("img."+this.ns+"_sizeFinder","{display: none !important;}")}},readPropertyChange:function(){var b,c,a;b=event.srcElement;if(!b.vmlInitiated){return}if(event.propertyName.search("background")!=-1||event.propertyName.search("border")!=-1){DD_belatedPNG.applyVML(b)}if(event.propertyName=="style.display"){c=(b.currentStyle.display=="none")?"none":"block";for(a in b.vml){if(b.vml.hasOwnProperty(a)){b.vml[a].shape.style.display=c}}}if(event.propertyName.search("filter")!=-1){DD_belatedPNG.vmlOpacity(b)}},vmlOpacity:function(b){if(b.currentStyle.filter.search("lpha")!=-1){var a=b.currentStyle.filter;a=parseInt(a.substring(a.lastIndexOf("=")+1,a.lastIndexOf(")")),10)/100;b.vml.color.shape.style.filter=b.currentStyle.filter;b.vml.image.fill.opacity=a}},handlePseudoHover:function(a){setTimeout(function(){DD_belatedPNG.applyVML(a)},1)},fix:function(a){if(this.screenStyleSheet){var c,b;c=a.split(",");for(b=0;bn.H){i.B=n.H}d.vml.image.shape.style.clip="rect("+i.T+"px "+(i.R+a)+"px "+i.B+"px "+(i.L+a)+"px)"}else{d.vml.image.shape.style.clip="rect("+f.T+"px "+f.R+"px "+f.B+"px "+f.L+"px)"}},figurePercentage:function(d,c,f,a){var b,e;e=true;b=(f=="X");switch(a){case"left":case"top":d[f]=0;break;case"center":d[f]=0.5;break;case"right":case"bottom":d[f]=1;break;default:if(a.search("%")!=-1){d[f]=parseInt(a,10)/100}else{e=false}}d[f]=Math.ceil(e?((c[b?"W":"H"]*d[f])-(c[b?"w":"h"]*d[f])):parseInt(a,10));if(d[f]%2===0){d[f]++}return d[f]},fixPng:function(c){c.style.behavior="none";var g,b,f,a,d;if(c.nodeName=="BODY"||c.nodeName=="TD"||c.nodeName=="TR"){return}c.isImg=false;if(c.nodeName=="IMG"){if(c.src.toLowerCase().search(/\.png$/)!=-1){c.isImg=true;c.style.visibility="hidden"}else{return}}else{if(c.currentStyle.backgroundImage.toLowerCase().search(".png")==-1){return}}g=DD_belatedPNG;c.vml={color:{},image:{}};b={shape:{},fill:{}};for(a in c.vml){if(c.vml.hasOwnProperty(a)){for(d in b){if(b.hasOwnProperty(d)){f=g.ns+":"+d;c.vml[a][d]=document.createElement(f)}}c.vml[a].shape.stroked=false;c.vml[a].shape.appendChild(c.vml[a].fill);c.parentNode.insertBefore(c.vml[a].shape,c)}}c.vml.image.shape.fillcolor="none";c.vml.image.fill.type="tile";c.vml.color.fill.on=false;g.attachHandlers(c);g.giveLayout(c);g.giveLayout(c.offsetParent);c.vmlInitiated=true;g.applyVML(c)}};try{document.execCommand("BackgroundImageCache",false,true)}catch(r){}DD_belatedPNG.createVmlNameSpace();DD_belatedPNG.createVmlStyleSheet(); \ No newline at end of file diff --git a/browsehappy.com/public_html/style.css b/browsehappy.com/public_html/style.css index e85bfa6ef0..8899fd9a58 100644 --- a/browsehappy.com/public_html/style.css +++ b/browsehappy.com/public_html/style.css @@ -355,14 +355,6 @@ html[dir="rtl"] #browserlist li { background: url(imgs/alphabg.png) repeat; } -.ie6 #browserlist h2 { - background: #E7DECD; /* 24-bit PNG not supported in IE6, replacing with flat color */ -} - -.ie6 #browserlist li a:hover h2 { - background: #EEE8DC; /* Lighter color on hover to simulate transparency */ -} - #browserlist p { padding: 0 5px; text-shadow: 0 1px 0 rgba(255,255,255,.8); @@ -372,10 +364,6 @@ html[dir="rtl"] #browserlist li { min-height: 150px; } -.ie6 #browserlist p.info { - height: 120px; /* Fix for min-height bug */ -} - #browserlist p.version { margin-bottom: 10px; text-align: center; @@ -396,10 +384,6 @@ html[dir="rtl"] #browserlist li { background: url(imgs/alphabg.png) repeat; } -.ie6 #browserlist p.website { - background: #E7DECD; /* 24-bit PNG not supported in IE6, replacing with flat color */ -} - #browserlist li a:link, #browserlist li a:visited { color: #324B4B; padding: 10px; @@ -422,10 +406,6 @@ html[dir="rtl"] #browserlist li { background: url(imgs/alphabg.png) repeat; } -.ie6 #browserlist li a:hover { - background: #E7DECD; /* 24-bit PNG not supported in IE6, replacing with flat color */ -} - #browserlist li a:hover .website { background: #4daaa7; color: #fff; @@ -515,10 +495,6 @@ footer h2 { margin-left: 15px; } -.ie6 #about { - display: inline; /* Fix for double margin float bug */ -} - #share { width: 30%; float: right; @@ -535,10 +511,6 @@ html[dir="rtl"] #share { float: left; } -.ie6 #share { - display: inline; /* Fix for double margin float bug */ -} - #share nav li { width: 32px; height: 32px; @@ -552,10 +524,6 @@ html[dir="rtl"] #share nav li { margin-left: 9px; } -.ie6 #share nav li { - display: inline; /* Fix for double margin float bug */ -} - #share nav li a { width: 32px; height: 32px; diff --git a/buddypress.org/public_html/wp-content/themes/bb-base/attachment.php b/buddypress.org/public_html/wp-content/themes/bb-base/attachment.php index f493343af2..81c9eaa834 100644 --- a/buddypress.org/public_html/wp-content/themes/bb-base/attachment.php +++ b/buddypress.org/public_html/wp-content/themes/bb-base/attachment.php @@ -13,7 +13,7 @@

-


guid); ?>

+


guid ) ); ?>

comment_status && 'open' == $post->ping_status ) : diff --git a/buddypress.org/public_html/wp-content/themes/bb-base/bbpress/loop-single-topic.php b/buddypress.org/public_html/wp-content/themes/bb-base/bbpress/loop-single-topic.php index 48ed04722e..b9efb64080 100644 --- a/buddypress.org/public_html/wp-content/themes/bb-base/bbpress/loop-single-topic.php +++ b/buddypress.org/public_html/wp-content/themes/bb-base/bbpress/loop-single-topic.php @@ -54,7 +54,16 @@ - %2$s', 'bbpress' ), bbp_get_forum_permalink( bbp_get_topic_forum_id() ), bbp_get_forum_title( bbp_get_topic_forum_id() ) ); ?> + + %2$s', 'bbpress' ) ), + esc_url( bbp_get_forum_permalink( bbp_get_topic_forum_id() ) ), + esc_html( bbp_get_forum_title( bbp_get_topic_forum_id() ) ) + ); + ?> + diff --git a/buddypress.org/public_html/wp-content/themes/bb-base/comments.php b/buddypress.org/public_html/wp-content/themes/bb-base/comments.php index a62ae0d2dc..ead4239dc2 100644 --- a/buddypress.org/public_html/wp-content/themes/bb-base/comments.php +++ b/buddypress.org/public_html/wp-content/themes/bb-base/comments.php @@ -35,7 +35,7 @@
-
+

diff --git a/buddypress.org/public_html/wp-content/themes/bb-base/header-nav.php b/buddypress.org/public_html/wp-content/themes/bb-base/header-nav.php index ca89989382..92808d88a3 100644 --- a/buddypress.org/public_html/wp-content/themes/bb-base/header-nav.php +++ b/buddypress.org/public_html/wp-content/themes/bb-base/header-nav.php @@ -2,12 +2,12 @@ -
    • -
    • +
    • +
    • diff --git a/buddypress.org/public_html/wp-content/themes/bb-base/image.php b/buddypress.org/public_html/wp-content/themes/bb-base/image.php index 6e0a49cb2b..3de976a793 100644 --- a/buddypress.org/public_html/wp-content/themes/bb-base/image.php +++ b/buddypress.org/public_html/wp-content/themes/bb-base/image.php @@ -5,8 +5,8 @@ while ( have_posts() ) : the_post(); ?> -

    post_parent); ?> »

    -

    ID, 'medium' ); ?>

    +

    post_parent ) ); ?> »

    +

    ID, 'medium' ); ?>

    post_excerpt) ) the_excerpt(); // this is the "caption" ?>

    diff --git a/buddypress.org/public_html/wp-content/themes/bb-base/sidebar.php b/buddypress.org/public_html/wp-content/themes/bb-base/sidebar.php index f0f38f58e2..dea45b14c9 100644 --- a/buddypress.org/public_html/wp-content/themes/bb-base/sidebar.php +++ b/buddypress.org/public_html/wp-content/themes/bb-base/sidebar.php @@ -95,15 +95,15 @@

    -

    +

    -

    +

    -

    +

    diff --git a/buddypress.org/public_html/wp-content/themes/bbpress-org/header-front.php b/buddypress.org/public_html/wp-content/themes/bbpress-org/header-front.php index 6cbef20a7d..4aacd7f63e 100644 --- a/buddypress.org/public_html/wp-content/themes/bbpress-org/header-front.php +++ b/buddypress.org/public_html/wp-content/themes/bbpress-org/header-front.php @@ -4,7 +4,7 @@

    - +
    @@ -13,28 +13,28 @@

    - <?php esc_attr_e( 'Simple Setup', 'bbporg' ); ?> + <?php esc_attr_e( 'Simple Setup', 'bbporg' ); ?> Easy to moderate.
    Fast, and clean.', 'bbporg' ); ?>

    - <?php esc_attr_e( 'Fully Integrated', 'bbporg' ); ?> + <?php esc_attr_e( 'Fully Integrated', 'bbporg' ); ?> One unified admin area.
    One click install.', 'bbporg' ); ?>

    - <?php esc_attr_e( 'Single Installation', 'bbporg' ); ?> + <?php esc_attr_e( 'Single Installation', 'bbporg' ); ?> installation walks you
    through your options.', 'bbporg' ); ?>

    - <?php esc_attr_e( 'Multisite Forums', 'bbporg' ); ?> + <?php esc_attr_e( 'Multisite Forums', 'bbporg' ); ?> into sections. Allow your
    users to create content.', 'bbporg' ); ?>

    diff --git a/buddypress.org/public_html/wp-content/themes/bbpress-org/page-plugins.php b/buddypress.org/public_html/wp-content/themes/bbpress-org/page-plugins.php index 140b34b9f1..b88df41b8e 100644 --- a/buddypress.org/public_html/wp-content/themes/bbpress-org/page-plugins.php +++ b/buddypress.org/public_html/wp-content/themes/bbpress-org/page-plugins.php @@ -37,7 +37,7 @@ 'mid_size' => 1 ) ); - echo $pag_links; + echo wp_kses_post( $pag_links ); ?> @@ -85,7 +85,7 @@
    - +
    diff --git a/buddypress.org/public_html/wp-content/themes/bbpress-org/sidebar.php b/buddypress.org/public_html/wp-content/themes/bbpress-org/sidebar.php index 0180466756..d929251953 100644 --- a/buddypress.org/public_html/wp-content/themes/bbpress-org/sidebar.php +++ b/buddypress.org/public_html/wp-content/themes/bbpress-org/sidebar.php @@ -108,7 +108,7 @@

    diff --git a/buddypress.org/public_html/wp-content/themes/bporg-developer/page-reference-landing.php b/buddypress.org/public_html/wp-content/themes/bporg-developer/page-reference-landing.php index ea135919b0..5d0c922e0c 100644 --- a/buddypress.org/public_html/wp-content/themes/bporg-developer/page-reference-landing.php +++ b/buddypress.org/public_html/wp-content/themes/bporg-developer/page-reference-landing.php @@ -27,10 +27,10 @@

    diff --git a/buddypress.org/public_html/wp-content/themes/buddypress-org/header-front.php b/buddypress.org/public_html/wp-content/themes/buddypress-org/header-front.php index fe6b9b5be0..af26937feb 100644 --- a/buddypress.org/public_html/wp-content/themes/buddypress-org/header-front.php +++ b/buddypress.org/public_html/wp-content/themes/buddypress-org/header-front.php @@ -5,7 +5,7 @@

    - +
    @@ -14,56 +14,56 @@

    - + Visibility levels.
    Common field types.', 'bporg' ); ?>

    - + Email notifications.
    Email and Password.', 'bporg' ); ?>

    - + Allow your users to
    create micro-communities.', 'bporg' ); ?>

    - + Sitewide directory
    and single threads.', 'bporg' ); ?>

    - + Smart read/unread.
    Fully integrated.', 'bporg' ); ?>

    - + It's always about
    who you know!", 'bporg' ); ?>

    - + with several members
    at one time.', 'bporg' ); ?>

    - + with hundreds of
    third party components.', 'bporg' ); ?>

    diff --git a/buddypress.org/public_html/wp-content/themes/codex-bbpress-org/header-subnav.php b/buddypress.org/public_html/wp-content/themes/codex-bbpress-org/header-subnav.php index ee6f16ba54..a8953c8f7c 100644 --- a/buddypress.org/public_html/wp-content/themes/codex-bbpress-org/header-subnav.php +++ b/buddypress.org/public_html/wp-content/themes/codex-bbpress-org/header-subnav.php @@ -9,8 +9,8 @@ diff --git a/buddypress.org/public_html/wp-content/themes/codex-bbpress-org/sidebar.php b/buddypress.org/public_html/wp-content/themes/codex-bbpress-org/sidebar.php index de2869f7de..ed117a6e67 100644 --- a/buddypress.org/public_html/wp-content/themes/codex-bbpress-org/sidebar.php +++ b/buddypress.org/public_html/wp-content/themes/codex-bbpress-org/sidebar.php @@ -61,8 +61,8 @@
    • -
  • Log In
    • -
  • Register
    • +
  • Log In
    • +
  • Register
    • diff --git a/buddypress.org/public_html/wp-content/themes/codex-buddypress-org/sidebar.php b/buddypress.org/public_html/wp-content/themes/codex-buddypress-org/sidebar.php index e0613d8732..9f49a99408 100644 --- a/buddypress.org/public_html/wp-content/themes/codex-buddypress-org/sidebar.php +++ b/buddypress.org/public_html/wp-content/themes/codex-buddypress-org/sidebar.php @@ -65,8 +65,8 @@
    • -
  • Log In
    • -
  • Register
    • +
  • Log In
    • +
  • Register
    • diff --git a/buddypress.org/public_html/wp-content/themes/codex-buddypress-org/widgets/login.php b/buddypress.org/public_html/wp-content/themes/codex-buddypress-org/widgets/login.php index 82a16bb6f5..5f3c39b6ff 100644 --- a/buddypress.org/public_html/wp-content/themes/codex-buddypress-org/widgets/login.php +++ b/buddypress.org/public_html/wp-content/themes/codex-buddypress-org/widgets/login.php @@ -23,7 +23,7 @@ function widget( $args, $instance ) {

    - + @@ -45,11 +45,14 @@ function widget( $args, $instance ) {

    - create an account.', 'buddypress' ), site_url( BP_REGISTER_SLUG . '/' ) ) ?> + create an account.', 'buddypress' ) ), esc_url( site_url( BP_REGISTER_SLUG . '/' ) ) ); + ?>

    - + diff --git a/common/includes/wporg-sso/wp-plugin.php b/common/includes/wporg-sso/wp-plugin.php index ab04274f86..b3af20dd4e 100644 --- a/common/includes/wporg-sso/wp-plugin.php +++ b/common/includes/wporg-sso/wp-plugin.php @@ -607,7 +607,7 @@ public function redirect_to_source_or_profile() { sprintf( "

    Logged in!

    You are currently logged in as %s.

    Would you like to logout?", wp_get_current_user()->user_login, - wp_logout_url() + esc_url( wp_logout_url() ) ) ); exit; diff --git a/global.wordpress.org/public_html/wp-content/mu-plugins/showcase/rosetta-showcase.php b/global.wordpress.org/public_html/wp-content/mu-plugins/showcase/rosetta-showcase.php index 6cf8294805..d4cb15d275 100644 --- a/global.wordpress.org/public_html/wp-content/mu-plugins/showcase/rosetta-showcase.php +++ b/global.wordpress.org/public_html/wp-content/mu-plugins/showcase/rosetta-showcase.php @@ -205,7 +205,7 @@ public function showcase_custom_column( $column, $post_id ) { $title = _draft_or_post_title(); printf( '%s', - get_edit_post_link( $post_id ), + esc_url( (string) get_edit_post_link( $post_id ) ), /* translators: %s: post title */ esc_attr( sprintf( __( '“%s” (Edit)', 'rosetta' ), $title ) ), $title diff --git a/global.wordpress.org/public_html/wp-content/themes/rosetta/front-page.php b/global.wordpress.org/public_html/wp-content/themes/rosetta/front-page.php index 5e274d2e91..dc52204818 100644 --- a/global.wordpress.org/public_html/wp-content/themes/rosetta/front-page.php +++ b/global.wordpress.org/public_html/wp-content/themes/rosetta/front-page.php @@ -109,7 +109,7 @@

    - You can add notable sites in your language and screenshot and description of random three of them will show here. + You can add notable sites in your language and screenshot and description of random three of them will show here.
    diff --git a/jobs.wordpress.net/public_html/wp-content/themes/jobswp/content-list.php b/jobs.wordpress.net/public_html/wp-content/themes/jobswp/content-list.php index 1a411c7a10..2f7df7620c 100644 --- a/jobs.wordpress.net/public_html/wp-content/themes/jobswp/content-list.php +++ b/jobs.wordpress.net/public_html/wp-content/themes/jobswp/content-list.php @@ -49,7 +49,7 @@ $link .= 'title="'. esc_attr( sprintf( __( 'View all jobs filed under %s', 'jobswp' ), $category->name ) ) . '"'; $link .= '>'; $link .= 'Show all '.apply_filters( 'list_terms', $category->name, $category ) . ' jobs »'; - echo $link; + echo wp_kses_post( $link ); echo '

    '; } else { jobswp_content_nav( 'all-job-categories' ); diff --git a/jobs.wordpress.net/public_html/wp-content/themes/jobswp/content-post-job.php b/jobs.wordpress.net/public_html/wp-content/themes/jobswp/content-post-job.php index eaec5f6794..6a9303e57d 100644 --- a/jobs.wordpress.net/public_html/wp-content/themes/jobswp/content-post-job.php +++ b/jobs.wordpress.net/public_html/wp-content/themes/jobswp/content-post-job.php @@ -128,7 +128,12 @@

    '; diff --git a/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/class-customizations.php b/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/class-customizations.php index 1d19689555..a012a36858 100644 --- a/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/class-customizations.php +++ b/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/class-customizations.php @@ -439,6 +439,7 @@ public function bulk_action_plugins() { */ public function show_permalink( $post ) { if ( 'plugin' === $post->post_type && 'publish' === $post->post_status ) { + // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Core assembles and escapes this markup itself. echo get_sample_permalink_html( $post ); } } diff --git a/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/metabox/class-author-card.php b/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/metabox/class-author-card.php index 16bf8936bc..e43524eee3 100644 --- a/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/metabox/class-author-card.php +++ b/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/metabox/class-author-card.php @@ -129,7 +129,7 @@ public static function display( $post_or_user_id = '' ) { esc_attr__( 'Click to search Help Scout for mentions of this author', 'wporg-plugins' ) ), ); - vprintf( '[ %s | %s ]', $author_links ); + vprintf( '[ %s | %s ]', array_map( 'wp_kses_post', $author_links ) ); ?> @@ -147,7 +147,7 @@ public static function display( $post_or_user_id = '' ) { esc_attr__( 'Click to search Help Scout for emails sent to/from this email address', 'wporg-plugins' ) ), ); - vprintf( '[ %s ]', $author_email_links ); + vprintf( '[ %s ]', array_map( 'wp_kses_post', $author_email_links ) ); ?>
    diff --git a/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/metabox/class-review-tools.php b/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/metabox/class-review-tools.php index 38e3b3e985..7c68f1a096 100644 --- a/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/metabox/class-review-tools.php +++ b/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/metabox/class-review-tools.php @@ -351,7 +351,7 @@ public static function display() {
  • API Endpoints:
    • Info
      • -
    • wp-json Info
      • +
    • wp-json Info
      • ' . __( 'Plugin Review Tools', 'wporg-plugins' ) . ''; echo ''; diff --git a/wordpress.org/public_html/wp-content/plugins/plugin-directory/shortcodes/class-release-confirmation.php b/wordpress.org/public_html/wp-content/plugins/plugin-directory/shortcodes/class-release-confirmation.php index 76cd7ef4b9..c3ce344d8e 100644 --- a/wordpress.org/public_html/wp-content/plugins/plugin-directory/shortcodes/class-release-confirmation.php +++ b/wordpress.org/public_html/wp-content/plugins/plugin-directory/shortcodes/class-release-confirmation.php @@ -77,7 +77,7 @@ class_exists( 'Two_Factor_Core' ) && '

      %s

      ', sprintf( __( 'Your account has elevated privileges and requires extra security before you can manage plugin releases. Please enable two-factor authentication now.', 'wporg-plugins' ), - get_2fa_onboarding_url() + esc_url( get_2fa_onboarding_url() ) ) ); } @@ -92,7 +92,7 @@ class_exists( 'Two_Factor_Core' ) && printf( '

      %s

      ', esc_attr( $plugin->post_name ), - get_permalink( $plugin ), + esc_url( get_permalink( $plugin ) ), get_the_title( $plugin ) ); @@ -571,7 +571,7 @@ static function frontend_unconfirmed_releases_notice( $post = null ) { '

      %s

      ', sprintf( __( 'This plugin has a pending release that requires confirmation.', 'wporg-plugins' ), - home_url( '/developers/releases/' ) // TODO: Hardcoded URL. + esc_url( home_url( '/developers/releases/' ) ) // TODO: Hardcoded URL. ) ); } diff --git a/wordpress.org/public_html/wp-content/plugins/plugin-directory/widgets/class-meta.php b/wordpress.org/public_html/wp-content/plugins/plugin-directory/widgets/class-meta.php index 244f251973..a89b660c8f 100644 --- a/wordpress.org/public_html/wp-content/plugins/plugin-directory/widgets/class-meta.php +++ b/wordpress.org/public_html/wp-content/plugins/plugin-directory/widgets/class-meta.php @@ -204,14 +204,14 @@ public function widget( $args, $instance ) { if ( is_wp_error( $link ) ) { return ''; } - return ''; + return ''; }, $terms ) ); echo '
    • '; printf( /* translators: %s: tag list */ _n( 'Tag %s', 'Tags %s', count( $term_links ), 'wporg-plugins' ), - '
      ' . implode( $term_links ) . '
      ' + '
      ' . wp_kses_post( implode( $term_links ) ) . '
      ' ); echo '
      • '; } diff --git a/wordpress.org/public_html/wp-content/plugins/support-forums/inc/class-hooks.php b/wordpress.org/public_html/wp-content/plugins/support-forums/inc/class-hooks.php index 61993dc459..4483d63db1 100644 --- a/wordpress.org/public_html/wp-content/plugins/support-forums/inc/class-hooks.php +++ b/wordpress.org/public_html/wp-content/plugins/support-forums/inc/class-hooks.php @@ -1034,7 +1034,8 @@ public function display_extra_topic_fields() { } else { printf( '

      %1$s %2$s

      ', __( 'The page I need help with:', 'wporg-forums' ), - sprintf( __( '[log in to see the link]', 'wporg-forums' ), wp_login_url() ) + /* translators: %s: URL of the log in page. */ + sprintf( wp_kses_post( __( '[log in to see the link]', 'wporg-forums' ) ), esc_url( wp_login_url() ) ) ); } } diff --git a/wordpress.org/public_html/wp-content/plugins/support-forums/inc/class-ratings-compat.php b/wordpress.org/public_html/wp-content/plugins/support-forums/inc/class-ratings-compat.php index 0272c1b7cf..b5ccd48ce3 100644 --- a/wordpress.org/public_html/wp-content/plugins/support-forums/inc/class-ratings-compat.php +++ b/wordpress.org/public_html/wp-content/plugins/support-forums/inc/class-ratings-compat.php @@ -152,7 +152,9 @@ public function add_edit_review_notice() { return; } - $notice = $object_link = $edit_link = ''; + $notice = ''; + $object_link = ''; + $edit_url = ''; switch( $this->compat ) { case 'plugin' : /* translators: 1: link to the plugin, 2: review edit URL */ @@ -170,7 +172,7 @@ public function add_edit_review_notice() { printf( '

      %s

      ', - sprintf( $notice, $object_link, $edit_url ) + wp_kses_post( sprintf( $notice, $object_link, esc_url( $edit_url ) ) ) ); } } diff --git a/wordpress.org/public_html/wp-content/plugins/theme-directory/admin-edit.php b/wordpress.org/public_html/wp-content/plugins/theme-directory/admin-edit.php index 2f4b1a2076..130de45124 100644 --- a/wordpress.org/public_html/wp-content/plugins/theme-directory/admin-edit.php +++ b/wordpress.org/public_html/wp-content/plugins/theme-directory/admin-edit.php @@ -203,7 +203,7 @@ function wporg_themes_post_submitbox_misc_actions() { } if ( ! empty( $links ) ) { - echo '
      ' . implode( ' | ', $links ) . '
      '; + echo '
      ' . wp_kses_post( implode( ' | ', $links ) ) . '
      '; } } add_action( 'post_submitbox_misc_actions', 'wporg_themes_post_submitbox_misc_actions' ); diff --git a/wordpress.org/public_html/wp-content/plugins/trac-notifications/trac-components.php b/wordpress.org/public_html/wp-content/plugins/trac-notifications/trac-components.php index a1bfe9a42a..cfc6754c22 100644 --- a/wordpress.org/public_html/wp-content/plugins/trac-notifications/trac-components.php +++ b/wordpress.org/public_html/wp-content/plugins/trac-notifications/trac-components.php @@ -382,10 +382,10 @@ function the_content( $content ) { echo "

      Recent posts on the make/{$this->trac} blog

      \n'; - echo 'View all posts tagged ' . $post->post_name . ".\n\n"; + echo 'View all posts tagged ' . esc_html( $post->post_name ) . ".\n\n"; wp_reset_postdata(); } @@ -400,10 +400,10 @@ function the_content( $content ) { echo "

      Recent posts on the make/test blog

      \n'; - echo 'View all posts tagged ' . $post->post_name . ".\n\n"; + echo 'View all posts tagged ' . esc_html( $post->post_name ) . ".\n\n"; wp_reset_postdata(); } restore_current_blog(); @@ -722,9 +722,9 @@ function component_table_row( $post ) { echo ''; if ( $post->post_parent ) { - echo '— ' . $post->post_title . ''; + echo '— ' . esc_html( $post->post_title ) . ''; } else { - echo '' . $post->post_title . ''; + echo '' . esc_html( $post->post_title ) . ''; } $open_tickets = 0; diff --git a/wordpress.org/public_html/wp-content/plugins/trac-notifications/trac-notifications.php b/wordpress.org/public_html/wp-content/plugins/trac-notifications/trac-notifications.php index ecf4dfd8cd..8e035cfbc0 100644 --- a/wordpress.org/public_html/wp-content/plugins/trac-notifications/trac-notifications.php +++ b/wordpress.org/public_html/wp-content/plugins/trac-notifications/trac-notifications.php @@ -342,7 +342,7 @@ function trac_notifications_box_render() {

      You are receiving notifications because . Block notifications

      You do not receive notifications because you have blocked this ticket. Unblock

      - Preferences + Preferences
    • - + @@ -208,7 +208,7 @@ function render_settings() { ?>

    Settings

    - +
    diff --git a/wordpress.org/public_html/wp-content/plugins/wporg-bbp-user-moderation/inc/class-plugin.php b/wordpress.org/public_html/wp-content/plugins/wporg-bbp-user-moderation/inc/class-plugin.php index 0a616f9cfa..db7f535f24 100644 --- a/wordpress.org/public_html/wp-content/plugins/wporg-bbp-user-moderation/inc/class-plugin.php +++ b/wordpress.org/public_html/wp-content/plugins/wporg-bbp-user-moderation/inc/class-plugin.php @@ -133,7 +133,7 @@ public function add_topic_author_action( $args = array() ) { 'post_id' => bbp_get_topic_id(), ) ); if ( false !== $link ) { - echo $link; + echo wp_kses_post( $link ); } } @@ -146,7 +146,7 @@ public function add_reply_author_action( $args = array() ) { 'post_id' => bbp_get_reply_id(), ) ); if ( false !== $link ) { - echo $link; + echo wp_kses_post( $link ); } } diff --git a/wordpress.org/public_html/wp-content/plugins/wporg-github-invite/admin.php b/wordpress.org/public_html/wp-content/plugins/wporg-github-invite/admin.php index bb5aab3047..73226a2bab 100644 --- a/wordpress.org/public_html/wp-content/plugins/wporg-github-invite/admin.php +++ b/wordpress.org/public_html/wp-content/plugins/wporg-github-invite/admin.php @@ -74,7 +74,7 @@ function render() { ?>

    Invite GitHub Member

    - +
    @@ -136,7 +136,7 @@ function render() { ?>

    Settings

    - +
    diff --git a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-plugins-contributors.php b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-plugins-contributors.php index 7ff3c631f3..b7f1c5bc40 100644 --- a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-plugins-contributors.php +++ b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-plugins-contributors.php @@ -23,7 +23,7 @@ diff --git a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-plugins-language-packs.php b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-plugins-language-packs.php index e31a05f452..1ae5369902 100644 --- a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-plugins-language-packs.php +++ b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-plugins-language-packs.php @@ -22,7 +22,7 @@ diff --git a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-plugins.php b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-plugins.php index 7452cc7b92..9bac0f4ac3 100644 --- a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-plugins.php +++ b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-plugins.php @@ -28,7 +28,7 @@ diff --git a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-themes-contributors.php b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-themes-contributors.php index f30b8c83cb..82f659203e 100644 --- a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-themes-contributors.php +++ b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-themes-contributors.php @@ -23,7 +23,7 @@ diff --git a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-themes-language-packs.php b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-themes-language-packs.php index 3e1780e8e4..adf315834c 100644 --- a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-themes-language-packs.php +++ b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-themes-language-packs.php @@ -22,7 +22,7 @@ diff --git a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-themes.php b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-themes.php index 0abe0da7f6..28bf66edf0 100644 --- a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-themes.php +++ b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/projects-wp-themes.php @@ -25,7 +25,7 @@ diff --git a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/stats-plugin-themes-overview.php b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/stats-plugin-themes-overview.php index a7867e8e4a..f0c65a273f 100644 --- a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/stats-plugin-themes-overview.php +++ b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/stats-plugin-themes-overview.php @@ -49,7 +49,7 @@ esc_attr( sprintf( __( "%s+ Active Installations" ), number_format_i18n( $details->installs ) ) ), esc_attr( $main_column_title ), $details->installs, - $project_overview_link, + esc_url( $project_overview_link ), $details->project->name ); @@ -74,7 +74,7 @@ $percent_class, $title, $sort_value, - $link, + esc_url( $link ), $cell_text ); } diff --git a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/translation-row-editor.php b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/translation-row-editor.php index 46b88b8a57..35cb85fd62 100644 --- a/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/translation-row-editor.php +++ b/wordpress.org/public_html/wp-content/plugins/wporg-gp-customizations/templates/translation-row-editor.php @@ -86,7 +86,7 @@ diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-login/logout.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-login/logout.php index a7484ae1dd..c690703ef6 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-login/logout.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-login/logout.php @@ -22,7 +22,7 @@ printf( /* translators: %s: logout URL */ __( 'Do you really want to log out?', 'wporg' ), - wp_logout_url( $redirect_to ) + esc_url( wp_logout_url( $redirect_to ) ) ); ?> diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/front-page.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/front-page.php index 0ff1266530..a0a8119b35 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/front-page.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/front-page.php @@ -338,7 +338,7 @@ foreach ( array_rand( $user_links, 3 ) as $slug ) : printf( '
  • %2$s
    • ', - $user_links[ $slug ], + esc_url( $user_links[ $slug ] ), $slug ); endforeach; diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-contentmarketing.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-contentmarketing.php index 56634c145f..4caeccf547 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-contentmarketing.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-contentmarketing.php @@ -35,7 +35,7 @@
    - +

    WordPress for Brands & Content Marketers

    The mission statement of WordPress is to "democratize publishing". The result is the most popular content marketing platform on the Internet. It is easy to use for content authors, editors, and publishers: simple, but powerful, with a core set of APIs for integration into any content ingestion, syndication, editing, and distribution workflow.

    This has made WordPress a smart choice for brands using content to tell their story, shape their brand image, and attract customers. If you want your story (your offering, your services, your mission) to be part of the fabric of the conversation on the web, WordPress is the ideal platform.

    @@ -48,36 +48,36 @@

    Global CPG Brands

    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    -
    -
    -
    +
    +
    +

    Non-Profits

    -
    -
    -
    -
    -
    -
    -
    -
    -
    +
    +
    +
    +
    +
    +
    +
    +
    +
    @@ -124,17 +124,17 @@
    - +
    - +
    - +
    diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-ecommerce.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-ecommerce.php index 7bc1a32491..9448b72744 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-ecommerce.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-ecommerce.php @@ -34,7 +34,7 @@
    - +

    eCommerce

    Enterprise Ecommerce,
    Now on WordPress

    WordPress is ready to support your organization with ecommerce in the enterprise. More online stores use WordPress for ecommerce than any other platform. For the enterprise, WordPress has the integrations, technical approaches, and service ecosystem you need. It's also an open platform with no lock-in. The data in WordPress is yours with easy porting in and out. WordPress itself has no restrictive contracts or licensing and offers a lower total cost of ownership compared to other enterprise platforms.

    @@ -103,23 +103,23 @@

    WooCommerce

    Hundreds of extensions help to support your existing vendors and foundational systems. It's straightforward to build powerful, custom experiences without the need to create components from scratch.

    - - - + + +

    BigCommerce

    A SaaS backend integrated through the BigCommerce plugin brings enterprise-specific functionality and scale along with streamlined integrations.

    - - - + + +

    Other eCommerce Platforms

    Build seamless integrations with other popular ecommerce solutions like Shopify and Magento for a unified user experience..

    - - - + + +
    @@ -130,95 +130,95 @@
    - +

    ERP

    - - - + + +
    - +

    PIM Systems

    - +
    - +

    Email Marketing

    - - + +
    - +

    Personalization and multichanneling

    - - - - - - + + + + + +
    - +

    Shipping apps

    - - - - + + + +
    - +

    Analytics

    - - - + + +
    - +

    Accounting Systems (Bookkeeping)

    - - - + + +
    - +

    POS Integrations

    - - + +
    - +

    Multilingual Store

    - +
    @@ -231,19 +231,19 @@

    Security

    -
    +

    GDPR

    -
    +

    Multichannel Marketing

    -
    +

    Working with the REST API

    -
    +
    diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-education.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-education.php index 7547ce3dd2..46c746ac04 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-education.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-education.php @@ -34,7 +34,7 @@
    - +

    WordPress in Education

    As a result of its flexibility, ease of use (for authors and administrators), open source license, focus on backward compatibility, and large community of developers, designers, and consultants, WordPress is the content management system of choice for K12 and Higher Education across the globe.

    @@ -53,35 +53,35 @@

    Public Universities

    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    @@ -95,39 +95,39 @@

    Private Liberal Arts Colleges

    - - - - - - + + + + + +

    Private Research Universities

    - - - - - - + + + + + +

    Ivy League

    - - + +

    Professional &
    Medical Schools

    - - + +

    K-12 Education

    - - + +
    @@ -147,89 +147,89 @@
    - +

    Accessibility

    - - - - + + + +
    - +

    Single-Sign On/
    Federated Identity

    - - + +
    - +

    Search

    - - + +
    - +

    Calendar/Events

    - - - + + +
    - +

    News/Syndication

    - - + +
    - +

    WordPress Powered Learning Management Systems

    - - - - - + + + + +
    - +

    Learning Management Systems

    - - - - - + + + + +
    - +

    Student Information Systems

    - - - + + +
    @@ -246,10 +246,10 @@

    For More Information

    Groups

    - +

    Active community of WordPress practitioners working in higher education: "Our goal is to provide a wealth of knowledge for anyone who's interested in using WordPress and allow people to share and learn about WordPress in the world of higher education." Hosts an annual conference.

    - +

    "Low-Traffic list discussing WordPress in education"

    diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-integrations.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-integrations.php index 3113839c9e..b7dec6ab46 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-integrations.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-integrations.php @@ -34,7 +34,7 @@
    - +

    Integrations

    The most popular CMS; the most integrations

    WordPress is more than a “website builder” – it's a content platform ready to be configured for each enterprise's use case, integrations, and workflow. A streamlined and hardened core platform is designed with compatibility, modularity, and integrations in mind. Dominant market share and a developer-friendly architecture have spawned an unrivaled ecosystem of apps, integrations, and plugins that can be installed, managed, and updated with just a few secure, authorized clicks.more powerful.

    @@ -48,11 +48,11 @@

    Supported by the biggest enterprises

    First party integrations and official WordPress solutions from enterprises like:

    -
    -
    -
    -
    -
    +
    +
    +
    +
    +
    @@ -61,141 +61,141 @@
    - +

    Paywall & Monetization

    - - + +
    - +

    Video

    - - - + + +
    - +

    Digital Asset Management

    - - + +
    - +

    Analytics

    - - - - + + + +
    - +

    Marketing

    - - - - + + + +
    - +

    SEO & Audience

    - - - + + +
    - +

    Platform Channels

    - - - - + + + +
    - +

    Social

    - - - + + +
    - +

    eCommerce

    - - - + + +
    - +

    Content

    - - + +
    - +

    Advertising

    - +
    - +

    Security & Sign on

    - - - - + + + +
    - +

    Search & Indexing

    - - - + + +
    @@ -210,25 +210,25 @@

    Manage integrations your way

    - +

    From the dashboard

    Authorized Administrators can review, install, update, and manage integrations across a single site or collection of websites from WordPress's intuitive administrative interface.

    - +

    From the command line

    Enterprise IT managers who prefer the security and interface of a terminal, can securely connect to their server and manage updates using the WordPress command line interface.

    - +

    From a management console

    Third party software management solutions from companies like Automattic and GoDaddy offer consoles to manage and view the status of integrations across multiple WordPress sites, including update deployment.

    - +

    From version control

    WordPress can be set to lock out installation and update management from the dashboard, enabling third-party workflows and deployment management rules that prefer upgrades to be managed by engineering and version control systems.

    diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-media.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-media.php index 3a68a9b505..c378f45493 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-media.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise-media.php @@ -34,7 +34,7 @@
    - +

    Media and Publishing

    Global Media Delivers on WordPress

    @@ -57,61 +57,61 @@
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    @@ -127,34 +127,34 @@
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    @@ -162,23 +162,23 @@

    Broadcasters

    WordPress integrates with streaming video-on-demand applications (SVOD) via providers like Anvato, over-the-top (OTT) media services, and integrated audio and video players that support virtually any platform or device.

    - - - + + +

    Book Publishers

    A flexible information architecture, supported by fully customizable post types and taxonomies, helps book publishers manage complex data models for their titles and integrate with services like Onix and Bowker.

    - - - + + +

    Nonprofit

    Nonprofit organizations have complex publishing needs that rival any publisher in news media. WordPress helps them efficiently manage their sites with a small staff and powerful integrations with search platforms let them expose their wealth of evergreen content to the community.

    - - - + + +
    @@ -189,118 +189,118 @@
    - +

    Paywall & Monetization

    - - + +
    - +

    Video

    - - - + + +
    - +

    Digital Asset Management

    - - + +
    - +

    Analytics

    - - - - + + + +
    - +

    Marketing Automation & Personalization

    - - + +
    - +

    SEO & Audience

    - - - + + +
    - +

    Platform Channels

    - - - - + + + +
    - +

    Social

    - - - + + +
    - +

    Editorial Workflow

    - - - - - + + + + +
    - +

    Advertising

    - +
    - +

    Search & Indexing

    - - - + + +
    @@ -316,19 +316,19 @@

    Paywall and Monetization Whitepaper

    -
    +

    Editorial Newsroom Workflow Guide

    -
    +

    Decoupled WordPress Pros and Cons

    -
    +

    Security / Open Source

    -
    +
    diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise.php index e53704e73d..365933a355 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-main/page-enterprise.php @@ -28,7 +28,7 @@
    - +

    WordPress for Enterprise

    From its humble beginnings as a blogging platform, the WordPress content management system has grown to become a dominant market leader. Discover how today's biggest brands use WordPress, the features that make it so appealing and how you can make WordPress work for your enterprise.

    @@ -43,37 +43,37 @@
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    - +
    @@ -89,22 +89,22 @@

    Media & Publishing

    -
    +

    WordPress powers the sites people visit multiple times every day for news, information and entertainment.

    eCommerce

    -
    +

    Organizations around the world choose WordPress as the ecommerce solution of choice for their needs.

    Content Marketing

    -
    +

    WordPress will help you get your brand's story in front of your potential customers quickly and easily.

    Higher education

    -
    +

    Educational organisations use WordPress to power everything from a departmental blog through to an entire university system.

    @@ -122,17 +122,17 @@
    -
    +

    Extensibility

    Enterprise-level extensions for WordPress span a broad range of functionality, from enhanced search, to advanced on-page SEO, to AI-driven content augmentation, to developer power tools.

    -
    +

    Security

    WordPress' strict security standards make it a popular CMS for enterprise companies around the world, and whilst its popularity can make it a target, it has proven itself as a secure platform.

    -
    +

    Open Source

    WordPress is open source software. This means the source code is made freely available and may be distributed and modified subject to the GPL license.

    diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-openverse/functions.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-openverse/functions.php index a861d77e38..093206dc7f 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-openverse/functions.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-openverse/functions.php @@ -265,7 +265,7 @@ function get_target_url() { $target_url .= '/' . $locale; } - $path = $_SERVER['REQUEST_URI']; + $path = isset( $_SERVER['REQUEST_URI'] ) ? esc_url_raw( wp_unslash( $_SERVER['REQUEST_URI'] ) ) : ''; if ( $path ) { $count = 1; // Only replace the leading Openverse subpath. $target_url .= str_replace( OPENVERSE_SUBPATH, '', $path, $count ); diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-openverse/index.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-openverse/index.php index 0a7e323f96..b437cbd1a0 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-openverse/index.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-openverse/index.php @@ -27,7 +27,7 @@ wp_redirect( $target_url, 301 ); exit; } else { - echo ""; + echo ''; } get_header(); diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/feed-extras.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/feed-extras.php index 3803c29b95..baff05c947 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/feed-extras.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/feed-extras.php @@ -54,7 +54,7 @@ ]]> - + diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/functions.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/functions.php index e8d5ed7598..89c2816a11 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/functions.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/functions.php @@ -98,16 +98,16 @@ function wp_flavors() { foreach ( $flavors as $flavor ) { if ( in_category( $flavor ) ) { - echo '
  • ' . $flavor . '
    • '; + echo '
  • ' . esc_html( $flavor ) . '
    • '; } else { - echo '
  • ' . $flavor . '
    • '; + echo '
  • ' . esc_html( $flavor ) . '
    • '; } } if ( in_category( 'BuddyPress' ) ) { - echo '
  • ' . __( 'BuddyPress', 'wporg-showcase' ). '
    • '; + echo '
  • ' . esc_html__( 'BuddyPress', 'wporg-showcase' ) . '
    • '; } else { - echo '
  • ' . __( 'BuddyPress', 'wporg-showcase' ). '
    • '; + echo '
  • ' . esc_html__( 'BuddyPress', 'wporg-showcase' ) . '
    • '; } echo ''; @@ -160,7 +160,7 @@ function popular_tags ($number = 10) { function breadcrumb() { ?> -

    +

    -

    +

    diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/page-home.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/page-home.php index a1273ba303..a78754abd5 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/page-home.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/page-home.php @@ -33,10 +33,10 @@

    - ID, 'domain', true ) ); ?> - - - + ID, 'domain', true ) ); ?> + + + @@ -109,7 +109,7 @@ - + diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/page-submit.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/page-submit.php index a4477fd4cf..69933eea62 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/page-submit.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-showcase/page-submit.php @@ -105,7 +105,7 @@ if ( !empty( $recaptcha_error ) ) $recaptcha_url .= '&error=' . $recaptcha_error; ?> - +
    -

    home page.', 'wporg-forums' ), home_url( '/forums/' ) ); ?>

    +

    + home page.', 'wporg-forums' ) ), esc_url( home_url( '/forums/' ) ) ); + ?> +

    diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/form-reply.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/form-reply.php index 4592840cdc..80d4b42647 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/form-reply.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/form-reply.php @@ -216,13 +216,15 @@ if ( is_user_logged_in() ) { esc_html_e( 'You cannot reply to this review.', 'wporg-forums' ); } else { - printf( __( 'You must be logged in to reply to this review.', 'wporg-forums' ), wp_login_url() ); + /* translators: %s: URL of the log in page. */ + printf( wp_kses_post( __( 'You must be logged in to reply to this review.', 'wporg-forums' ) ), esc_url( wp_login_url() ) ); } } else { if ( is_user_logged_in() ) { esc_html_e( 'You cannot reply to this topic.', 'wporg-forums' ); } else { - printf( __( 'You must be logged in to reply to this topic.', 'wporg-forums' ), wp_login_url() ); + /* translators: %s: URL of the log in page. */ + printf( wp_kses_post( __( 'You must be logged in to reply to this topic.', 'wporg-forums' ) ), esc_url( wp_login_url() ) ); } } ?>

    diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/form-user-edit.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/form-user-edit.php index f3f5a88833..768589b97d 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/form-user-edit.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/form-user-edit.php @@ -109,7 +109,7 @@
    - (edit) + (edit)
    @@ -120,7 +120,7 @@

    the Account section.', 'wporg' ), - get_edit_account_url( bbp_get_displayed_user_id() ) + esc_url( get_edit_account_url( bbp_get_displayed_user_id() ) ) ); ?>

    diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/loop-single-reply-topic.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/loop-single-reply-topic.php index 893e29888b..14a729d853 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/loop-single-reply-topic.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/loop-single-reply-topic.php @@ -24,7 +24,16 @@ - %2$s', 'wporg-forums' ), bbp_get_forum_permalink( bbp_get_topic_forum_id( $topic_id ) ), bbp_get_forum_title( bbp_get_topic_forum_id( $topic_id ) ) ); ?> + + %2$s', 'wporg-forums' ) ), + esc_url( bbp_get_forum_permalink( bbp_get_topic_forum_id( $topic_id ) ) ), + esc_html( bbp_get_forum_title( bbp_get_topic_forum_id( $topic_id ) ) ) + ); + ?> + diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/loop-single-topic.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/loop-single-topic.php index 7e19d0b8bd..3a1f3990db 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/loop-single-topic.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/bbpress/loop-single-topic.php @@ -60,7 +60,16 @@ - %2$s', 'wporg-forums' ), bbp_get_forum_permalink( bbp_get_topic_forum_id() ), bbp_get_forum_title( bbp_get_topic_forum_id() ) ); ?> + + %2$s', 'wporg-forums' ) ), + esc_url( bbp_get_forum_permalink( bbp_get_topic_forum_id() ) ), + esc_html( bbp_get_forum_title( bbp_get_topic_forum_id() ) ) + ); + ?> + diff --git a/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/sidebar.php b/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/sidebar.php index 847c75cbd5..7937956793 100644 --- a/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/sidebar.php +++ b/wordpress.org/public_html/wp-content/themes/pub/wporg-support-2024/sidebar.php @@ -27,7 +27,7 @@
    • - + diff --git a/wordpress.tv/public_html/wp-content/themes/wptv2/404.php b/wordpress.tv/public_html/wp-content/themes/wptv2/404.php index 853741b9bd..3e0544ea9c 100644 --- a/wordpress.tv/public_html/wp-content/themes/wptv2/404.php +++ b/wordpress.tv/public_html/wp-content/themes/wptv2/404.php @@ -18,7 +18,7 @@
    -
    +
    Mark Jaquith' ); ?>
    diff --git a/wordpress.tv/public_html/wp-content/themes/wptv2/anon-upload-template.php b/wordpress.tv/public_html/wp-content/themes/wptv2/anon-upload-template.php index 722c41411a..9f78187871 100644 --- a/wordpress.tv/public_html/wp-content/themes/wptv2/anon-upload-template.php +++ b/wordpress.tv/public_html/wp-content/themes/wptv2/anon-upload-template.php @@ -285,7 +285,7 @@ function anon_upload_css() {

    Please review the guidelines listed on the right, then submit your video below:

    -
    + diff --git a/wordpress.tv/public_html/wp-content/themes/wptv2/front-page.php b/wordpress.tv/public_html/wp-content/themes/wptv2/front-page.php index a043d29730..a78b542d4a 100644 --- a/wordpress.tv/public_html/wp-content/themes/wptv2/front-page.php +++ b/wordpress.tv/public_html/wp-content/themes/wptv2/front-page.php @@ -33,7 +33,7 @@

    - +

      ' . absint( $term->count ) . '' : ''; $links[] = '' . esc_html( $term->name ) . $count . ''; } - echo $before . join( $sep, $links ) . $after; + echo wp_kses_post( $before . join( $sep, $links ) . $after ); } /** diff --git a/wordpress.tv/public_html/wp-content/themes/wptv2/header.php b/wordpress.tv/public_html/wp-content/themes/wptv2/header.php index 25f736a9d8..8cdab39849 100644 --- a/wordpress.tv/public_html/wp-content/themes/wptv2/header.php +++ b/wordpress.tv/public_html/wp-content/themes/wptv2/header.php @@ -38,9 +38,9 @@