Enhance security checks and improve I18N handling - #160

Open

alimuzzaman wants to merge 23 commits into

Commits on Sep 15, 2025

Improve I18N Issue based on 2.5.3
alexclassroom
authored
95e00ff

Commits on Nov 5, 2025

Merge branch 'WPDevelopers:master' into master
alexclassroom
authored
a60017c

Commits on Dec 3, 2025

Merge branch 'WPDevelopers:master' into master
alexclassroom
authored
e6fd88a

Commits on Jan 26, 2026

Merge branch 'WPDevelopers:master' into master
alexclassroom
authored
24752f0

Commits on Mar 29, 2026

Security: remove HTTP_REFERER trust from is_network_admin() #4

alimuzzaman
and
claude
committed
c6714a3
Security: add capability check to disable_comments_settings() #1

alimuzzaman
and
claude
committed
e3ed4b9
Security: add capability and per-blog auth checks to delete_comments_settings() #2

alimuzzaman
and
claude
committed
8921f5d
Security: escape role names to prevent DOM XSS in role exclusion UI #3

alimuzzaman
and
claude
committed
854eb86
Security: add capability check to get_sub_sites() to prevent subsite enumeration #5

alimuzzaman
and
claude
committed
6cd801a
Exclude .claude/ worktrees from git tracking and distribution zips

alimuzzaman
and
claude
committed
60bd5f3
Security: derive network context from POST data, not is_network_admin()

alimuzzaman
and
claude
committed
c9b578a
Exclude pnpm-lock.yaml from distribution

alimuzzaman
and
claude
committed
9e9fe6d
Merge pull request #156 from alexclassroom/master
alimuzzaman
authored
6f54eea
Fix esc_html__ stripping HTML tags in admin notice

alimuzzaman
and
claude
committed
9fa11c9
Security: gate update_site_option on network action capability check

alimuzzaman
and
claude
committed
b996182
Fix is_network_admin() AJAX context and unify network action detection

alimuzzaman
and
claude
committed
6e5a776
Address Copilot review suggestions from PR #160

alimuzzaman
and
claude
committed
78478d0
Fix UI error handling and double-encoding in role names

alimuzzaman
and
claude
committed
2c86f7f
Handle new server error responses in JS

alimuzzaman
and
claude
committed
5e6657a

Commits on Mar 30, 2026

Fix nonce failure silently returning success in delete_comments_settings()

alimuzzaman
and
claude
committed
e41335c
Fix nonce failure silently returning success in disable_comments_settings()

Copilot
and
alimuzzaman
authored
8693705

Commits on Aug 30, 2026

Merge master and retain security hardening
alimuzzaman
committed
7cab84b
fix(security): guard subsite AJAX on single-site
alimuzzaman
committed
94843b1