Update to WordPress 6.4.3. For more information, see https://wordpres…

…s.org/news/2024/01/wordpress-6-4-3-maintenance-and-security-release/
pantheon-systems · Jan 30, 2024 · 0228b56 · 0228b56
1 parent 0165951
commit 0228b56
Show file tree

Hide file tree

Showing 43 changed files with 526 additions and 261 deletions.
diff --git a/wp-admin/about.php b/wp-admin/about.php
@@ -51,12 +51,12 @@
  printf(
  /* translators: 1: WordPress version number, 2: Plural number of bugs. */
  _n(
- '<strong>Version %1$s</strong> addressed %2$s bug.',
- '<strong>Version %1$s</strong> addressed %2$s bugs.',
- 4
+ '<strong>Version %1$s</strong> addressed some security issues and fixed %2$s bug.',
+ '<strong>Version %1$s</strong> addressed some security issues and fixed %2$s bugs.',
+ 21
  ),
- '6.4.1',
- '4'
+ '6.4.3',
+ '21'
  );
  ?>
  <?php
@@ -66,11 +66,12 @@
  sprintf(
  /* translators: %s: WordPress version. */
  esc_url( __( 'https://wordpress.org/support/wordpress-version/version-%s/' ) ),
- sanitize_title( '6.4.1' )
+ sanitize_title( '6.4.3' )
  )
  );
  ?>
  </p>
+
  <p>
  <?php
  printf(
@@ -96,6 +97,32 @@
  );
  ?>
  </p>
+
+ <p>
+ <?php
+ printf(
+ /* translators: 1: WordPress version number, 2: Plural number of bugs. */
+ _n(
+ '<strong>Version %1$s</strong> addressed %2$s bug.',
+ '<strong>Version %1$s</strong> addressed %2$s bugs.',
+ 4
+ ),
+ '6.4.1',
+ '4'
+ );
+ ?>
+ <?php
+ printf(
+ /* translators: %s: HelpHub URL. */
+ __( 'For more information, see <a href="%s">the release notes</a>.' ),
+ sprintf(
+ /* translators: %s: WordPress version. */
+ esc_url( __( 'https://wordpress.org/support/wordpress-version/version-%s/' ) ),
+ sanitize_title( '6.4.1' )
+ )
+ );
+ ?>
+ </p>
  </div>
  </div>
 

diff --git a/wp-admin/includes/class-file-upload-upgrader.php b/wp-admin/includes/class-file-upload-upgrader.php
@@ -69,6 +69,30 @@ public function __construct( $form, $urlholder ) {
  wp_die( $file['error'] );
  }
 
+ if ( 'pluginzip' === $form || 'themezip' === $form ) {
+ $archive_is_valid = false;
+
+ /** This filter is documented in wp-admin/includes/file.php */
+ if ( class_exists( 'ZipArchive', false ) && apply_filters( 'unzip_file_use_ziparchive', true ) ) {
+ $archive = new ZipArchive();
+ $archive_is_valid = $archive->open( $file['file'], ZIPARCHIVE::CHECKCONS );
+
+ if ( true === $archive_is_valid ) {
+ $archive->close();
+ }
+ } else {
+ require_once ABSPATH . 'wp-admin/includes/class-pclzip.php';
+
+ $archive = new PclZip( $file['file'] );
+ $archive_is_valid = is_array( $archive->properties() );
+ }
+
+ if ( true !== $archive_is_valid ) {
+ wp_delete_file( $file['file'] );
+ wp_die( __( 'Incompatible Archive.' ) );
+ }
+ }
+
  $this->filename = $_FILES[ $form ]['name'];
  $this->package = $file['file'];
 

diff --git a/wp-admin/includes/schema.php b/wp-admin/includes/schema.php
@@ -599,14 +599,12 @@ function populate_options( array $options = array() ) {
  $autoload = 'yes';
  }
 
- if ( is_array( $value ) ) {
- $value = serialize( $value );
- }
-
  if ( ! empty( $insert ) ) {
  $insert .= ', ';
  }
 
+ $value = maybe_serialize( sanitize_option( $option, $value ) );
+
  $insert .= $wpdb->prepare( '(%s, %s, %s)', $option, $value, $autoload );
  }
 

diff --git a/wp-admin/update.php b/wp-admin/update.php
@@ -154,6 +154,10 @@
 
  check_admin_referer( 'plugin-upload' );
 
+ if ( isset( $_FILES['pluginzip']['name'] ) && ! str_ends_with( strtolower( $_FILES['pluginzip']['name'] ), '.zip' ) ) {
+ wp_die( __( 'Only .zip archives may be uploaded.' ) );
+ }
+
  $file_upload = new File_Upload_Upgrader( 'pluginzip', 'package' );
 
  // Used in the HTML title tag.
@@ -302,6 +306,10 @@
 
  check_admin_referer( 'theme-upload' );
 
+ if ( isset( $_FILES['themezip']['name'] ) && ! str_ends_with( strtolower( $_FILES['themezip']['name'] ), '.zip' ) ) {
+ wp_die( __( 'Only .zip archives may be uploaded.' ) );
+ }
+
  $file_upload = new File_Upload_Upgrader( 'themezip', 'package' );
 
  // Used in the HTML title tag.

diff --git a/wp-includes/assets/script-loader-packages.min.php b/wp-includes/assets/script-loader-packages.min.php
diff --git a/wp-includes/assets/script-loader-packages.php b/wp-includes/assets/script-loader-packages.php
diff --git a/wp-includes/blocks/cover/style-rtl.css b/wp-includes/blocks/cover/style-rtl.css
@@ -115,7 +115,7 @@
  width:100%;
  z-index:1;
 }
-.wp-block-cover h1:not(.has-text-color),.wp-block-cover h2:not(.has-text-color),.wp-block-cover h3:not(.has-text-color),.wp-block-cover h4:not(.has-text-color),.wp-block-cover h5:not(.has-text-color),.wp-block-cover h6:not(.has-text-color),.wp-block-cover p:not(.has-text-color),.wp-block-cover-image h1:not(.has-text-color),.wp-block-cover-image h2:not(.has-text-color),.wp-block-cover-image h3:not(.has-text-color),.wp-block-cover-image h4:not(.has-text-color),.wp-block-cover-image h5:not(.has-text-color),.wp-block-cover-image h6:not(.has-text-color),.wp-block-cover-image p:not(.has-text-color){
+.wp-block-cover h1:where(:not(.has-text-color)),.wp-block-cover h2:where(:not(.has-text-color)),.wp-block-cover h3:where(:not(.has-text-color)),.wp-block-cover h4:where(:not(.has-text-color)),.wp-block-cover h5:where(:not(.has-text-color)),.wp-block-cover h6:where(:not(.has-text-color)),.wp-block-cover p:where(:not(.has-text-color)),.wp-block-cover-image h1:where(:not(.has-text-color)),.wp-block-cover-image h2:where(:not(.has-text-color)),.wp-block-cover-image h3:where(:not(.has-text-color)),.wp-block-cover-image h4:where(:not(.has-text-color)),.wp-block-cover-image h5:where(:not(.has-text-color)),.wp-block-cover-image h6:where(:not(.has-text-color)),.wp-block-cover-image p:where(:not(.has-text-color)){
  color:inherit;
 }
 .wp-block-cover-image.is-position-top-left,.wp-block-cover.is-position-top-left{

diff --git a/wp-includes/blocks/cover/style-rtl.min.css b/wp-includes/blocks/cover/style-rtl.min.css
diff --git a/wp-includes/blocks/cover/style.css b/wp-includes/blocks/cover/style.css
@@ -115,7 +115,7 @@
  width:100%;
  z-index:1;
 }
-.wp-block-cover h1:not(.has-text-color),.wp-block-cover h2:not(.has-text-color),.wp-block-cover h3:not(.has-text-color),.wp-block-cover h4:not(.has-text-color),.wp-block-cover h5:not(.has-text-color),.wp-block-cover h6:not(.has-text-color),.wp-block-cover p:not(.has-text-color),.wp-block-cover-image h1:not(.has-text-color),.wp-block-cover-image h2:not(.has-text-color),.wp-block-cover-image h3:not(.has-text-color),.wp-block-cover-image h4:not(.has-text-color),.wp-block-cover-image h5:not(.has-text-color),.wp-block-cover-image h6:not(.has-text-color),.wp-block-cover-image p:not(.has-text-color){
+.wp-block-cover h1:where(:not(.has-text-color)),.wp-block-cover h2:where(:not(.has-text-color)),.wp-block-cover h3:where(:not(.has-text-color)),.wp-block-cover h4:where(:not(.has-text-color)),.wp-block-cover h5:where(:not(.has-text-color)),.wp-block-cover h6:where(:not(.has-text-color)),.wp-block-cover p:where(:not(.has-text-color)),.wp-block-cover-image h1:where(:not(.has-text-color)),.wp-block-cover-image h2:where(:not(.has-text-color)),.wp-block-cover-image h3:where(:not(.has-text-color)),.wp-block-cover-image h4:where(:not(.has-text-color)),.wp-block-cover-image h5:where(:not(.has-text-color)),.wp-block-cover-image h6:where(:not(.has-text-color)),.wp-block-cover-image p:where(:not(.has-text-color)){
  color:inherit;
 }
 .wp-block-cover-image.is-position-top-left,.wp-block-cover.is-position-top-left{

diff --git a/wp-includes/blocks/cover/style.min.css b/wp-includes/blocks/cover/style.min.css
diff --git a/wp-includes/blocks/query.php b/wp-includes/blocks/query.php
@@ -44,11 +44,15 @@ function render_block_core_query( $attributes, $content, $block ) {
  $block->block_type->supports['interactivity'] = true;
 
  // Add a div to announce messages using `aria-live`.
- $last_div_position = strripos( $content, '</div>' );
+ $html_tag = 'div';
+ if ( ! empty( $attributes['tagName'] ) ) {
+ $html_tag = esc_attr( $attributes['tagName'] );
+ }
+ $last_tag_position = strripos( $content, '</' . $html_tag . '>' );
  $content = substr_replace(
  $content,
  '<div
- class="wp-block-query__enhanced-pagination-navigation-announce screen-reader-text"
+ class="screen-reader-text"
  aria-live="polite"
  data-wp-text="context.core.query.message"
  ></div>
@@ -57,7 +61,7 @@ class="wp-block-query__enhanced-pagination-animation"
  data-wp-class--start-animation="selectors.core.query.startAnimation"
  data-wp-class--finish-animation="selectors.core.query.finishAnimation"
  ></div>',
- $last_div_position,
+ $last_tag_position,
  0
  );
  }

diff --git a/wp-includes/canonical.php b/wp-includes/canonical.php
@@ -548,13 +548,23 @@ function redirect_canonical( $requested_url = null, $do_redirect = true ) {
  $is_attachment_redirect = false;
 
  if ( is_attachment() && ! get_option( 'wp_attachment_pages_enabled' ) ) {
- $attachment_id = get_query_var( 'attachment_id' );
-
- if ( current_user_can( 'read_post', $attachment_id ) ) {
- $redirect_url = wp_get_attachment_url( $attachment_id );
-
- $is_attachment_redirect = true;
+ $attachment_id = get_query_var( 'attachment_id' );
+ $attachment_post = get_post( $attachment_id );
+ $attachment_parent_id = $attachment_post ? $attachment_post->post_parent : 0;
+
+ $attachment_url = wp_get_attachment_url( $attachment_id );
+ if ( $attachment_url !== $redirect_url ) {
+ /*
+ * If an attachment is attached to a post, it inherits the parent post's status. Fetch the
+ * parent post to check its status later.
+ */
+ if ( $attachment_parent_id ) {
+ $redirect_obj = get_post( $attachment_parent_id );
+ }
+ $redirect_url = $attachment_url;
  }
+
+ $is_attachment_redirect = true;
  }
 
  $redirect['query'] = preg_replace( '#^\??&*?#', '', $redirect['query'] );

diff --git a/wp-includes/css/dist/block-editor/content-rtl.css b/wp-includes/css/dist/block-editor/content-rtl.css
@@ -48,15 +48,12 @@
  opacity:.4;
  }
 }
+:root .block-editor-block-list__layout::selection,:root .has-multi-selection .block-editor-block-list__layout::selection,_::-webkit-full-page-media,_:future{
+ background-color:transparent;
+}
 .block-editor-block-list__layout{
  position:relative;
 }
-.block-editor-block-list__layout::selection{
- background:transparent;
-}
-.has-multi-selection .block-editor-block-list__layout::selection{
- background:transparent;
-}
 .block-editor-block-list__layout:where(.block-editor-block-list__block.is-multi-selected:not(.is-partially-selected)){
  border-radius:2px;
 }

diff --git a/wp-includes/css/dist/block-editor/content-rtl.min.css b/wp-includes/css/dist/block-editor/content-rtl.min.css
diff --git a/wp-includes/css/dist/block-editor/content.css b/wp-includes/css/dist/block-editor/content.css
@@ -48,15 +48,12 @@
  opacity:.4;
  }
 }
+:root .block-editor-block-list__layout::selection,:root .has-multi-selection .block-editor-block-list__layout::selection,_::-webkit-full-page-media,_:future{
+ background-color:transparent;
+}
 .block-editor-block-list__layout{
  position:relative;
 }
-.block-editor-block-list__layout::selection{
- background:transparent;
-}
-.has-multi-selection .block-editor-block-list__layout::selection{
- background:transparent;
-}
 .block-editor-block-list__layout:where(.block-editor-block-list__block.is-multi-selected:not(.is-partially-selected)){
  border-radius:2px;
 }

diff --git a/wp-includes/css/dist/block-editor/content.min.css b/wp-includes/css/dist/block-editor/content.min.css
diff --git a/wp-includes/css/dist/block-library/style-rtl.css b/wp-includes/css/dist/block-library/style-rtl.css
@@ -592,7 +592,7 @@
  width:100%;
  z-index:1;
 }
-.wp-block-cover h1:not(.has-text-color),.wp-block-cover h2:not(.has-text-color),.wp-block-cover h3:not(.has-text-color),.wp-block-cover h4:not(.has-text-color),.wp-block-cover h5:not(.has-text-color),.wp-block-cover h6:not(.has-text-color),.wp-block-cover p:not(.has-text-color),.wp-block-cover-image h1:not(.has-text-color),.wp-block-cover-image h2:not(.has-text-color),.wp-block-cover-image h3:not(.has-text-color),.wp-block-cover-image h4:not(.has-text-color),.wp-block-cover-image h5:not(.has-text-color),.wp-block-cover-image h6:not(.has-text-color),.wp-block-cover-image p:not(.has-text-color){
+.wp-block-cover h1:where(:not(.has-text-color)),.wp-block-cover h2:where(:not(.has-text-color)),.wp-block-cover h3:where(:not(.has-text-color)),.wp-block-cover h4:where(:not(.has-text-color)),.wp-block-cover h5:where(:not(.has-text-color)),.wp-block-cover h6:where(:not(.has-text-color)),.wp-block-cover p:where(:not(.has-text-color)),.wp-block-cover-image h1:where(:not(.has-text-color)),.wp-block-cover-image h2:where(:not(.has-text-color)),.wp-block-cover-image h3:where(:not(.has-text-color)),.wp-block-cover-image h4:where(:not(.has-text-color)),.wp-block-cover-image h5:where(:not(.has-text-color)),.wp-block-cover-image h6:where(:not(.has-text-color)),.wp-block-cover-image p:where(:not(.has-text-color)){
  color:inherit;
 }
 .wp-block-cover-image.is-position-top-left,.wp-block-cover.is-position-top-left{

diff --git a/wp-includes/css/dist/block-library/style-rtl.min.css b/wp-includes/css/dist/block-library/style-rtl.min.css
diff --git a/wp-includes/css/dist/block-library/style.css b/wp-includes/css/dist/block-library/style.css
@@ -592,7 +592,7 @@
  width:100%;
  z-index:1;
 }
-.wp-block-cover h1:not(.has-text-color),.wp-block-cover h2:not(.has-text-color),.wp-block-cover h3:not(.has-text-color),.wp-block-cover h4:not(.has-text-color),.wp-block-cover h5:not(.has-text-color),.wp-block-cover h6:not(.has-text-color),.wp-block-cover p:not(.has-text-color),.wp-block-cover-image h1:not(.has-text-color),.wp-block-cover-image h2:not(.has-text-color),.wp-block-cover-image h3:not(.has-text-color),.wp-block-cover-image h4:not(.has-text-color),.wp-block-cover-image h5:not(.has-text-color),.wp-block-cover-image h6:not(.has-text-color),.wp-block-cover-image p:not(.has-text-color){
+.wp-block-cover h1:where(:not(.has-text-color)),.wp-block-cover h2:where(:not(.has-text-color)),.wp-block-cover h3:where(:not(.has-text-color)),.wp-block-cover h4:where(:not(.has-text-color)),.wp-block-cover h5:where(:not(.has-text-color)),.wp-block-cover h6:where(:not(.has-text-color)),.wp-block-cover p:where(:not(.has-text-color)),.wp-block-cover-image h1:where(:not(.has-text-color)),.wp-block-cover-image h2:where(:not(.has-text-color)),.wp-block-cover-image h3:where(:not(.has-text-color)),.wp-block-cover-image h4:where(:not(.has-text-color)),.wp-block-cover-image h5:where(:not(.has-text-color)),.wp-block-cover-image h6:where(:not(.has-text-color)),.wp-block-cover-image p:where(:not(.has-text-color)){
  color:inherit;
 }
 .wp-block-cover-image.is-position-top-left,.wp-block-cover.is-position-top-left{

diff --git a/wp-includes/css/dist/block-library/style.min.css b/wp-includes/css/dist/block-library/style.min.css
diff --git a/wp-includes/css/dist/patterns/style-rtl.css b/wp-includes/css/dist/patterns/style-rtl.css
@@ -44,4 +44,13 @@
 .patterns-create-modal__name-input input[type=text]{
  margin:0;
  min-height:40px;
+}
+
+.patterns-rename-pattern-category-modal__validation-message{
+ color:#cc1818;
+}
+@media (min-width:782px){
+ .patterns-rename-pattern-category-modal__validation-message{
+ width:320px;
+ }
 }
diff --git a/wp-includes/css/dist/patterns/style-rtl.min.css b/wp-includes/css/dist/patterns/style-rtl.min.css
diff --git a/wp-includes/css/dist/patterns/style.css b/wp-includes/css/dist/patterns/style.css
@@ -44,4 +44,13 @@
 .patterns-create-modal__name-input input[type=text]{
  margin:0;
  min-height:40px;
+}
+
+.patterns-rename-pattern-category-modal__validation-message{
+ color:#cc1818;
+}
+@media (min-width:782px){
+ .patterns-rename-pattern-category-modal__validation-message{
+ width:320px;
+ }
 }
diff --git a/wp-includes/css/dist/patterns/style.min.css b/wp-includes/css/dist/patterns/style.min.css
diff --git a/wp-includes/default-filters.php b/wp-includes/default-filters.php
@@ -687,6 +687,7 @@
 add_action( 'embed_head', 'wp_robots' );
 add_action( 'embed_head', 'rel_canonical' );
 add_action( 'embed_head', 'locale_stylesheet', 30 );
+add_action( 'enqueue_embed_scripts', 'wp_enqueue_emoji_styles' );
 
 add_action( 'embed_content_meta', 'print_embed_comments_button' );
 add_action( 'embed_content_meta', 'print_embed_sharing_button' );