Нема описа

default-filters.php 30KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684
  1. <?php
  2. /**
  3. * Sets up the default filters and actions for most
  4. * of the WordPress hooks.
  5. *
  6. * If you need to remove a default hook, this file will
  7. * give you the priority to use for removing the hook.
  8. *
  9. * Not all of the default hooks are found in this file.
  10. * For instance, administration-related hooks are located in
  11. * wp-admin/includes/admin-filters.php.
  12. *
  13. * If a hook should only be called from a specific context
  14. * (admin area, multisite environment…), please move it
  15. * to a more appropriate file instead.
  16. *
  17. * @package WordPress
  18. */
  19. // Strip, trim, kses, special chars for string saves.
  20. foreach ( array( 'pre_term_name', 'pre_comment_author_name', 'pre_link_name', 'pre_link_target', 'pre_link_rel', 'pre_user_display_name', 'pre_user_first_name', 'pre_user_last_name', 'pre_user_nickname' ) as $filter ) {
  21. add_filter( $filter, 'sanitize_text_field' );
  22. add_filter( $filter, 'wp_filter_kses' );
  23. add_filter( $filter, '_wp_specialchars', 30 );
  24. }
  25. // Strip, kses, special chars for string display.
  26. foreach ( array( 'term_name', 'comment_author_name', 'link_name', 'link_target', 'link_rel', 'user_display_name', 'user_first_name', 'user_last_name', 'user_nickname' ) as $filter ) {
  27. if ( is_admin() ) {
  28. // These are expensive. Run only on admin pages for defense in depth.
  29. add_filter( $filter, 'sanitize_text_field' );
  30. add_filter( $filter, 'wp_kses_data' );
  31. }
  32. add_filter( $filter, '_wp_specialchars', 30 );
  33. }
  34. // Kses only for textarea saves.
  35. foreach ( array( 'pre_term_description', 'pre_link_description', 'pre_link_notes', 'pre_user_description' ) as $filter ) {
  36. add_filter( $filter, 'wp_filter_kses' );
  37. }
  38. // Kses only for textarea admin displays.
  39. if ( is_admin() ) {
  40. foreach ( array( 'term_description', 'link_description', 'link_notes', 'user_description' ) as $filter ) {
  41. add_filter( $filter, 'wp_kses_data' );
  42. }
  43. add_filter( 'comment_text', 'wp_kses_post' );
  44. }
  45. // Email saves.
  46. foreach ( array( 'pre_comment_author_email', 'pre_user_email' ) as $filter ) {
  47. add_filter( $filter, 'trim' );
  48. add_filter( $filter, 'sanitize_email' );
  49. add_filter( $filter, 'wp_filter_kses' );
  50. }
  51. // Email admin display.
  52. foreach ( array( 'comment_author_email', 'user_email' ) as $filter ) {
  53. add_filter( $filter, 'sanitize_email' );
  54. if ( is_admin() ) {
  55. add_filter( $filter, 'wp_kses_data' );
  56. }
  57. }
  58. // Save URL.
  59. foreach ( array(
  60. 'pre_comment_author_url',
  61. 'pre_user_url',
  62. 'pre_link_url',
  63. 'pre_link_image',
  64. 'pre_link_rss',
  65. 'pre_post_guid',
  66. ) as $filter ) {
  67. add_filter( $filter, 'wp_strip_all_tags' );
  68. add_filter( $filter, 'esc_url_raw' );
  69. add_filter( $filter, 'wp_filter_kses' );
  70. }
  71. // Display URL.
  72. foreach ( array( 'user_url', 'link_url', 'link_image', 'link_rss', 'comment_url', 'post_guid' ) as $filter ) {
  73. if ( is_admin() ) {
  74. add_filter( $filter, 'wp_strip_all_tags' );
  75. }
  76. add_filter( $filter, 'esc_url' );
  77. if ( is_admin() ) {
  78. add_filter( $filter, 'wp_kses_data' );
  79. }
  80. }
  81. // Slugs.
  82. add_filter( 'pre_term_slug', 'sanitize_title' );
  83. add_filter( 'wp_insert_post_data', '_wp_customize_changeset_filter_insert_post_data', 10, 2 );
  84. // Keys.
  85. foreach ( array( 'pre_post_type', 'pre_post_status', 'pre_post_comment_status', 'pre_post_ping_status' ) as $filter ) {
  86. add_filter( $filter, 'sanitize_key' );
  87. }
  88. // Mime types.
  89. add_filter( 'pre_post_mime_type', 'sanitize_mime_type' );
  90. add_filter( 'post_mime_type', 'sanitize_mime_type' );
  91. // Meta.
  92. add_filter( 'register_meta_args', '_wp_register_meta_args_allowed_list', 10, 2 );
  93. // Counts.
  94. add_action( 'admin_init', 'wp_schedule_update_user_counts' );
  95. add_action( 'wp_update_user_counts', 'wp_schedule_update_user_counts', 10, 0 );
  96. foreach ( array( 'user_register', 'deleted_user' ) as $action ) {
  97. add_action( $action, 'wp_maybe_update_user_counts', 10, 0 );
  98. }
  99. // Post meta.
  100. add_action( 'added_post_meta', 'wp_cache_set_posts_last_changed' );
  101. add_action( 'updated_post_meta', 'wp_cache_set_posts_last_changed' );
  102. add_action( 'deleted_post_meta', 'wp_cache_set_posts_last_changed' );
  103. // Term meta.
  104. add_action( 'added_term_meta', 'wp_cache_set_terms_last_changed' );
  105. add_action( 'updated_term_meta', 'wp_cache_set_terms_last_changed' );
  106. add_action( 'deleted_term_meta', 'wp_cache_set_terms_last_changed' );
  107. add_filter( 'get_term_metadata', 'wp_check_term_meta_support_prefilter' );
  108. add_filter( 'add_term_metadata', 'wp_check_term_meta_support_prefilter' );
  109. add_filter( 'update_term_metadata', 'wp_check_term_meta_support_prefilter' );
  110. add_filter( 'delete_term_metadata', 'wp_check_term_meta_support_prefilter' );
  111. add_filter( 'get_term_metadata_by_mid', 'wp_check_term_meta_support_prefilter' );
  112. add_filter( 'update_term_metadata_by_mid', 'wp_check_term_meta_support_prefilter' );
  113. add_filter( 'delete_term_metadata_by_mid', 'wp_check_term_meta_support_prefilter' );
  114. add_filter( 'update_term_metadata_cache', 'wp_check_term_meta_support_prefilter' );
  115. // Comment meta.
  116. add_action( 'added_comment_meta', 'wp_cache_set_comments_last_changed' );
  117. add_action( 'updated_comment_meta', 'wp_cache_set_comments_last_changed' );
  118. add_action( 'deleted_comment_meta', 'wp_cache_set_comments_last_changed' );
  119. // Places to balance tags on input.
  120. foreach ( array( 'content_save_pre', 'excerpt_save_pre', 'comment_save_pre', 'pre_comment_content' ) as $filter ) {
  121. add_filter( $filter, 'convert_invalid_entities' );
  122. add_filter( $filter, 'balanceTags', 50 );
  123. }
  124. // Add proper rel values for links with target.
  125. add_action( 'init', 'wp_init_targeted_link_rel_filters' );
  126. // Format strings for display.
  127. foreach ( array( 'comment_author', 'term_name', 'link_name', 'link_description', 'link_notes', 'bloginfo', 'wp_title', 'document_title', 'widget_title' ) as $filter ) {
  128. add_filter( $filter, 'wptexturize' );
  129. add_filter( $filter, 'convert_chars' );
  130. add_filter( $filter, 'esc_html' );
  131. }
  132. // Format WordPress.
  133. foreach ( array( 'the_content', 'the_title', 'wp_title', 'document_title' ) as $filter ) {
  134. add_filter( $filter, 'capital_P_dangit', 11 );
  135. }
  136. add_filter( 'comment_text', 'capital_P_dangit', 31 );
  137. // Format titles.
  138. foreach ( array( 'single_post_title', 'single_cat_title', 'single_tag_title', 'single_month_title', 'nav_menu_attr_title', 'nav_menu_description' ) as $filter ) {
  139. add_filter( $filter, 'wptexturize' );
  140. add_filter( $filter, 'strip_tags' );
  141. }
  142. // Format text area for display.
  143. foreach ( array( 'term_description', 'get_the_post_type_description' ) as $filter ) {
  144. add_filter( $filter, 'wptexturize' );
  145. add_filter( $filter, 'convert_chars' );
  146. add_filter( $filter, 'wpautop' );
  147. add_filter( $filter, 'shortcode_unautop' );
  148. }
  149. // Format for RSS.
  150. add_filter( 'term_name_rss', 'convert_chars' );
  151. // Pre save hierarchy.
  152. add_filter( 'wp_insert_post_parent', 'wp_check_post_hierarchy_for_loops', 10, 2 );
  153. add_filter( 'wp_update_term_parent', 'wp_check_term_hierarchy_for_loops', 10, 3 );
  154. // Display filters.
  155. add_filter( 'the_title', 'wptexturize' );
  156. add_filter( 'the_title', 'convert_chars' );
  157. add_filter( 'the_title', 'trim' );
  158. add_filter( 'the_content', 'do_blocks', 9 );
  159. add_filter( 'the_content', 'wptexturize' );
  160. add_filter( 'the_content', 'convert_smilies', 20 );
  161. add_filter( 'the_content', 'wpautop' );
  162. add_filter( 'the_content', 'shortcode_unautop' );
  163. add_filter( 'the_content', 'prepend_attachment' );
  164. add_filter( 'the_content', 'wp_filter_content_tags' );
  165. add_filter( 'the_content', 'wp_replace_insecure_home_url' );
  166. add_filter( 'the_excerpt', 'wptexturize' );
  167. add_filter( 'the_excerpt', 'convert_smilies' );
  168. add_filter( 'the_excerpt', 'convert_chars' );
  169. add_filter( 'the_excerpt', 'wpautop' );
  170. add_filter( 'the_excerpt', 'shortcode_unautop' );
  171. add_filter( 'the_excerpt', 'wp_filter_content_tags' );
  172. add_filter( 'the_excerpt', 'wp_replace_insecure_home_url' );
  173. add_filter( 'get_the_excerpt', 'wp_trim_excerpt', 10, 2 );
  174. add_filter( 'the_post_thumbnail_caption', 'wptexturize' );
  175. add_filter( 'the_post_thumbnail_caption', 'convert_smilies' );
  176. add_filter( 'the_post_thumbnail_caption', 'convert_chars' );
  177. add_filter( 'comment_text', 'wptexturize' );
  178. add_filter( 'comment_text', 'convert_chars' );
  179. add_filter( 'comment_text', 'make_clickable', 9 );
  180. add_filter( 'comment_text', 'force_balance_tags', 25 );
  181. add_filter( 'comment_text', 'convert_smilies', 20 );
  182. add_filter( 'comment_text', 'wpautop', 30 );
  183. add_filter( 'comment_excerpt', 'convert_chars' );
  184. add_filter( 'list_cats', 'wptexturize' );
  185. add_filter( 'wp_sprintf', 'wp_sprintf_l', 10, 2 );
  186. add_filter( 'widget_text', 'balanceTags' );
  187. add_filter( 'widget_text_content', 'capital_P_dangit', 11 );
  188. add_filter( 'widget_text_content', 'wptexturize' );
  189. add_filter( 'widget_text_content', 'convert_smilies', 20 );
  190. add_filter( 'widget_text_content', 'wpautop' );
  191. add_filter( 'widget_text_content', 'shortcode_unautop' );
  192. add_filter( 'widget_text_content', 'wp_filter_content_tags' );
  193. add_filter( 'widget_text_content', 'wp_replace_insecure_home_url' );
  194. add_filter( 'widget_text_content', 'do_shortcode', 11 ); // Runs after wpautop(); note that $post global will be null when shortcodes run.
  195. add_filter( 'widget_block_content', 'do_blocks', 9 );
  196. add_filter( 'widget_block_content', 'wp_filter_content_tags' );
  197. add_filter( 'widget_block_content', 'do_shortcode', 11 );
  198. add_filter( 'block_type_metadata', 'wp_migrate_old_typography_shape' );
  199. add_filter( 'wp_get_custom_css', 'wp_replace_insecure_home_url' );
  200. // RSS filters.
  201. add_filter( 'the_title_rss', 'strip_tags' );
  202. add_filter( 'the_title_rss', 'ent2ncr', 8 );
  203. add_filter( 'the_title_rss', 'esc_html' );
  204. add_filter( 'the_content_rss', 'ent2ncr', 8 );
  205. add_filter( 'the_content_feed', 'wp_staticize_emoji' );
  206. add_filter( 'the_content_feed', '_oembed_filter_feed_content' );
  207. add_filter( 'the_excerpt_rss', 'convert_chars' );
  208. add_filter( 'the_excerpt_rss', 'ent2ncr', 8 );
  209. add_filter( 'comment_author_rss', 'ent2ncr', 8 );
  210. add_filter( 'comment_text_rss', 'ent2ncr', 8 );
  211. add_filter( 'comment_text_rss', 'esc_html' );
  212. add_filter( 'comment_text_rss', 'wp_staticize_emoji' );
  213. add_filter( 'bloginfo_rss', 'ent2ncr', 8 );
  214. add_filter( 'the_author', 'ent2ncr', 8 );
  215. add_filter( 'the_guid', 'esc_url' );
  216. // Email filters.
  217. add_filter( 'wp_mail', 'wp_staticize_emoji_for_email' );
  218. // Robots filters.
  219. add_filter( 'wp_robots', 'wp_robots_noindex' );
  220. add_filter( 'wp_robots', 'wp_robots_noindex_embeds' );
  221. add_filter( 'wp_robots', 'wp_robots_noindex_search' );
  222. add_filter( 'wp_robots', 'wp_robots_max_image_preview_large' );
  223. // Mark site as no longer fresh.
  224. foreach (
  225. array(
  226. 'publish_post',
  227. 'publish_page',
  228. 'wp_ajax_save-widget',
  229. 'wp_ajax_widgets-order',
  230. 'customize_save_after',
  231. 'rest_after_save_widget',
  232. 'rest_delete_widget',
  233. 'rest_save_sidebar',
  234. ) as $action
  235. ) {
  236. add_action( $action, '_delete_option_fresh_site', 0 );
  237. }
  238. // Misc filters.
  239. add_filter( 'option_ping_sites', 'privacy_ping_filter' );
  240. add_filter( 'option_blog_charset', '_wp_specialchars' ); // IMPORTANT: This must not be wp_specialchars() or esc_html() or it'll cause an infinite loop.
  241. add_filter( 'option_blog_charset', '_canonical_charset' );
  242. add_filter( 'option_home', '_config_wp_home' );
  243. add_filter( 'option_siteurl', '_config_wp_siteurl' );
  244. add_filter( 'tiny_mce_before_init', '_mce_set_direction' );
  245. add_filter( 'teeny_mce_before_init', '_mce_set_direction' );
  246. add_filter( 'pre_kses', 'wp_pre_kses_less_than' );
  247. add_filter( 'pre_kses', 'wp_pre_kses_block_attributes', 10, 3 );
  248. add_filter( 'sanitize_title', 'sanitize_title_with_dashes', 10, 3 );
  249. add_action( 'check_comment_flood', 'check_comment_flood_db', 10, 4 );
  250. add_filter( 'comment_flood_filter', 'wp_throttle_comment_flood', 10, 3 );
  251. add_filter( 'pre_comment_content', 'wp_rel_ugc', 15 );
  252. add_filter( 'comment_email', 'antispambot' );
  253. add_filter( 'option_tag_base', '_wp_filter_taxonomy_base' );
  254. add_filter( 'option_category_base', '_wp_filter_taxonomy_base' );
  255. add_filter( 'the_posts', '_close_comments_for_old_posts', 10, 2 );
  256. add_filter( 'comments_open', '_close_comments_for_old_post', 10, 2 );
  257. add_filter( 'pings_open', '_close_comments_for_old_post', 10, 2 );
  258. add_filter( 'editable_slug', 'urldecode' );
  259. add_filter( 'editable_slug', 'esc_textarea' );
  260. add_filter( 'pingback_ping_source_uri', 'pingback_ping_source_uri' );
  261. add_filter( 'xmlrpc_pingback_error', 'xmlrpc_pingback_error' );
  262. add_filter( 'title_save_pre', 'trim' );
  263. add_action( 'transition_comment_status', '_clear_modified_cache_on_transition_comment_status', 10, 2 );
  264. add_filter( 'http_request_host_is_external', 'allowed_http_request_hosts', 10, 2 );
  265. // REST API filters.
  266. add_action( 'xmlrpc_rsd_apis', 'rest_output_rsd' );
  267. add_action( 'wp_head', 'rest_output_link_wp_head', 10, 0 );
  268. add_action( 'template_redirect', 'rest_output_link_header', 11, 0 );
  269. add_action( 'auth_cookie_malformed', 'rest_cookie_collect_status' );
  270. add_action( 'auth_cookie_expired', 'rest_cookie_collect_status' );
  271. add_action( 'auth_cookie_bad_username', 'rest_cookie_collect_status' );
  272. add_action( 'auth_cookie_bad_hash', 'rest_cookie_collect_status' );
  273. add_action( 'auth_cookie_valid', 'rest_cookie_collect_status' );
  274. add_action( 'application_password_failed_authentication', 'rest_application_password_collect_status' );
  275. add_action( 'application_password_did_authenticate', 'rest_application_password_collect_status', 10, 2 );
  276. add_filter( 'rest_authentication_errors', 'rest_application_password_check_errors', 90 );
  277. add_filter( 'rest_authentication_errors', 'rest_cookie_check_errors', 100 );
  278. // Actions.
  279. add_action( 'wp_head', '_wp_render_title_tag', 1 );
  280. add_action( 'wp_head', 'wp_enqueue_scripts', 1 );
  281. add_action( 'wp_head', 'wp_resource_hints', 2 );
  282. add_action( 'wp_head', 'feed_links', 2 );
  283. add_action( 'wp_head', 'feed_links_extra', 3 );
  284. add_action( 'wp_head', 'rsd_link' );
  285. add_action( 'wp_head', 'wlwmanifest_link' );
  286. add_action( 'wp_head', 'locale_stylesheet' );
  287. add_action( 'publish_future_post', 'check_and_publish_future_post', 10, 1 );
  288. add_action( 'wp_head', 'wp_robots', 1 );
  289. add_action( 'wp_head', 'print_emoji_detection_script', 7 );
  290. add_action( 'wp_head', 'wp_print_styles', 8 );
  291. add_action( 'wp_head', 'wp_print_head_scripts', 9 );
  292. add_action( 'wp_head', 'wp_generator' );
  293. add_action( 'wp_head', 'rel_canonical' );
  294. add_action( 'wp_head', 'wp_shortlink_wp_head', 10, 0 );
  295. add_action( 'wp_head', 'wp_custom_css_cb', 101 );
  296. add_action( 'wp_head', 'wp_site_icon', 99 );
  297. add_action( 'wp_footer', 'wp_print_footer_scripts', 20 );
  298. add_action( 'template_redirect', 'wp_shortlink_header', 11, 0 );
  299. add_action( 'wp_print_footer_scripts', '_wp_footer_scripts' );
  300. add_action( 'init', '_register_core_block_patterns_and_categories' );
  301. add_action( 'init', 'check_theme_switched', 99 );
  302. add_action( 'init', array( 'WP_Block_Supports', 'init' ), 22 );
  303. add_action( 'switch_theme', array( 'WP_Theme_JSON_Resolver', 'clean_cached_data' ) );
  304. add_action( 'start_previewing_theme', array( 'WP_Theme_JSON_Resolver', 'clean_cached_data' ) );
  305. add_action( 'after_switch_theme', '_wp_menus_changed' );
  306. add_action( 'after_switch_theme', '_wp_sidebars_changed' );
  307. add_action( 'wp_print_styles', 'print_emoji_styles' );
  308. add_action( 'plugins_loaded', '_wp_theme_json_webfonts_handler' );
  309. if ( isset( $_GET['replytocom'] ) ) {
  310. add_filter( 'wp_robots', 'wp_robots_no_robots' );
  311. }
  312. // Login actions.
  313. add_action( 'login_head', 'wp_robots', 1 );
  314. add_filter( 'login_head', 'wp_resource_hints', 8 );
  315. add_action( 'login_head', 'wp_print_head_scripts', 9 );
  316. add_action( 'login_head', 'print_admin_styles', 9 );
  317. add_action( 'login_head', 'wp_site_icon', 99 );
  318. add_action( 'login_footer', 'wp_print_footer_scripts', 20 );
  319. add_action( 'login_init', 'send_frame_options_header', 10, 0 );
  320. // Feed generator tags.
  321. foreach ( array( 'rss2_head', 'commentsrss2_head', 'rss_head', 'rdf_header', 'atom_head', 'comments_atom_head', 'opml_head', 'app_head' ) as $action ) {
  322. add_action( $action, 'the_generator' );
  323. }
  324. // Feed Site Icon.
  325. add_action( 'atom_head', 'atom_site_icon' );
  326. add_action( 'rss2_head', 'rss2_site_icon' );
  327. // WP Cron.
  328. if ( ! defined( 'DOING_CRON' ) ) {
  329. add_action( 'init', 'wp_cron' );
  330. }
  331. // HTTPS detection.
  332. add_action( 'init', 'wp_schedule_https_detection' );
  333. add_action( 'wp_https_detection', 'wp_update_https_detection_errors' );
  334. add_filter( 'cron_request', 'wp_cron_conditionally_prevent_sslverify', 9999 );
  335. // HTTPS migration.
  336. add_action( 'update_option_home', 'wp_update_https_migration_required', 10, 2 );
  337. // 2 Actions 2 Furious.
  338. add_action( 'do_feed_rdf', 'do_feed_rdf', 10, 0 );
  339. add_action( 'do_feed_rss', 'do_feed_rss', 10, 0 );
  340. add_action( 'do_feed_rss2', 'do_feed_rss2', 10, 1 );
  341. add_action( 'do_feed_atom', 'do_feed_atom', 10, 1 );
  342. add_action( 'do_pings', 'do_all_pings', 10, 0 );
  343. add_action( 'do_all_pings', 'do_all_pingbacks', 10, 0 );
  344. add_action( 'do_all_pings', 'do_all_enclosures', 10, 0 );
  345. add_action( 'do_all_pings', 'do_all_trackbacks', 10, 0 );
  346. add_action( 'do_all_pings', 'generic_ping', 10, 0 );
  347. add_action( 'do_robots', 'do_robots' );
  348. add_action( 'do_favicon', 'do_favicon' );
  349. add_action( 'set_comment_cookies', 'wp_set_comment_cookies', 10, 3 );
  350. add_action( 'sanitize_comment_cookies', 'sanitize_comment_cookies' );
  351. add_action( 'init', 'smilies_init', 5 );
  352. add_action( 'plugins_loaded', 'wp_maybe_load_widgets', 0 );
  353. add_action( 'plugins_loaded', 'wp_maybe_load_embeds', 0 );
  354. add_action( 'shutdown', 'wp_ob_end_flush_all', 1 );
  355. // Create a revision whenever a post is updated.
  356. add_action( 'post_updated', 'wp_save_post_revision', 10, 1 );
  357. add_action( 'publish_post', '_publish_post_hook', 5, 1 );
  358. add_action( 'transition_post_status', '_transition_post_status', 5, 3 );
  359. add_action( 'transition_post_status', '_update_term_count_on_transition_post_status', 10, 3 );
  360. add_action( 'comment_form', 'wp_comment_form_unfiltered_html_nonce' );
  361. // Privacy.
  362. add_action( 'user_request_action_confirmed', '_wp_privacy_account_request_confirmed' );
  363. add_action( 'user_request_action_confirmed', '_wp_privacy_send_request_confirmation_notification', 12 ); // After request marked as completed.
  364. add_filter( 'wp_privacy_personal_data_exporters', 'wp_register_comment_personal_data_exporter' );
  365. add_filter( 'wp_privacy_personal_data_exporters', 'wp_register_media_personal_data_exporter' );
  366. add_filter( 'wp_privacy_personal_data_exporters', 'wp_register_user_personal_data_exporter', 1 );
  367. add_filter( 'wp_privacy_personal_data_erasers', 'wp_register_comment_personal_data_eraser' );
  368. add_action( 'init', 'wp_schedule_delete_old_privacy_export_files' );
  369. add_action( 'wp_privacy_delete_old_export_files', 'wp_privacy_delete_old_export_files' );
  370. // Cron tasks.
  371. add_action( 'wp_scheduled_delete', 'wp_scheduled_delete' );
  372. add_action( 'wp_scheduled_auto_draft_delete', 'wp_delete_auto_drafts' );
  373. add_action( 'importer_scheduled_cleanup', 'wp_delete_attachment' );
  374. add_action( 'upgrader_scheduled_cleanup', 'wp_delete_attachment' );
  375. add_action( 'delete_expired_transients', 'delete_expired_transients' );
  376. // Navigation menu actions.
  377. add_action( 'delete_post', '_wp_delete_post_menu_item' );
  378. add_action( 'delete_term', '_wp_delete_tax_menu_item', 10, 3 );
  379. add_action( 'transition_post_status', '_wp_auto_add_pages_to_menu', 10, 3 );
  380. add_action( 'delete_post', '_wp_delete_customize_changeset_dependent_auto_drafts' );
  381. // Post Thumbnail CSS class filtering.
  382. add_action( 'begin_fetch_post_thumbnail_html', '_wp_post_thumbnail_class_filter_add' );
  383. add_action( 'end_fetch_post_thumbnail_html', '_wp_post_thumbnail_class_filter_remove' );
  384. // Redirect old slugs.
  385. add_action( 'template_redirect', 'wp_old_slug_redirect' );
  386. add_action( 'post_updated', 'wp_check_for_changed_slugs', 12, 3 );
  387. add_action( 'attachment_updated', 'wp_check_for_changed_slugs', 12, 3 );
  388. // Redirect old dates.
  389. add_action( 'post_updated', 'wp_check_for_changed_dates', 12, 3 );
  390. add_action( 'attachment_updated', 'wp_check_for_changed_dates', 12, 3 );
  391. // Nonce check for post previews.
  392. add_action( 'init', '_show_post_preview' );
  393. // Output JS to reset window.name for previews.
  394. add_action( 'wp_head', 'wp_post_preview_js', 1 );
  395. // Timezone.
  396. add_filter( 'pre_option_gmt_offset', 'wp_timezone_override_offset' );
  397. // If the upgrade hasn't run yet, assume link manager is used.
  398. add_filter( 'default_option_link_manager_enabled', '__return_true' );
  399. // This option no longer exists; tell plugins we always support auto-embedding.
  400. add_filter( 'pre_option_embed_autourls', '__return_true' );
  401. // Default settings for heartbeat.
  402. add_filter( 'heartbeat_settings', 'wp_heartbeat_settings' );
  403. // Check if the user is logged out.
  404. add_action( 'admin_enqueue_scripts', 'wp_auth_check_load' );
  405. add_filter( 'heartbeat_send', 'wp_auth_check' );
  406. add_filter( 'heartbeat_nopriv_send', 'wp_auth_check' );
  407. // Default authentication filters.
  408. add_filter( 'authenticate', 'wp_authenticate_username_password', 20, 3 );
  409. add_filter( 'authenticate', 'wp_authenticate_email_password', 20, 3 );
  410. add_filter( 'authenticate', 'wp_authenticate_application_password', 20, 3 );
  411. add_filter( 'authenticate', 'wp_authenticate_spam_check', 99 );
  412. add_filter( 'determine_current_user', 'wp_validate_auth_cookie' );
  413. add_filter( 'determine_current_user', 'wp_validate_logged_in_cookie', 20 );
  414. add_filter( 'determine_current_user', 'wp_validate_application_password', 20 );
  415. // Split term updates.
  416. add_action( 'admin_init', '_wp_check_for_scheduled_split_terms' );
  417. add_action( 'split_shared_term', '_wp_check_split_default_terms', 10, 4 );
  418. add_action( 'split_shared_term', '_wp_check_split_terms_in_menus', 10, 4 );
  419. add_action( 'split_shared_term', '_wp_check_split_nav_menu_terms', 10, 4 );
  420. add_action( 'wp_split_shared_term_batch', '_wp_batch_split_terms' );
  421. // Comment type updates.
  422. add_action( 'admin_init', '_wp_check_for_scheduled_update_comment_type' );
  423. add_action( 'wp_update_comment_type_batch', '_wp_batch_update_comment_type' );
  424. // Email notifications.
  425. add_action( 'comment_post', 'wp_new_comment_notify_moderator' );
  426. add_action( 'comment_post', 'wp_new_comment_notify_postauthor' );
  427. add_action( 'after_password_reset', 'wp_password_change_notification' );
  428. add_action( 'register_new_user', 'wp_send_new_user_notifications' );
  429. add_action( 'edit_user_created_user', 'wp_send_new_user_notifications', 10, 2 );
  430. // REST API actions.
  431. add_action( 'init', 'rest_api_init' );
  432. add_action( 'rest_api_init', 'rest_api_default_filters', 10, 1 );
  433. add_action( 'rest_api_init', 'register_initial_settings', 10 );
  434. add_action( 'rest_api_init', 'create_initial_rest_routes', 99 );
  435. add_action( 'parse_request', 'rest_api_loaded' );
  436. // Sitemaps actions.
  437. add_action( 'init', 'wp_sitemaps_get_server' );
  438. /**
  439. * Filters formerly mixed into wp-includes.
  440. */
  441. // Theme.
  442. add_action( 'setup_theme', 'create_initial_theme_features', 0 );
  443. add_action( 'setup_theme', '_add_default_theme_supports', 1 );
  444. add_action( 'wp_loaded', '_custom_header_background_just_in_time' );
  445. add_action( 'wp_head', '_custom_logo_header_styles' );
  446. add_action( 'plugins_loaded', '_wp_customize_include' );
  447. add_action( 'transition_post_status', '_wp_customize_publish_changeset', 10, 3 );
  448. add_action( 'admin_enqueue_scripts', '_wp_customize_loader_settings' );
  449. add_action( 'delete_attachment', '_delete_attachment_theme_mod' );
  450. add_action( 'transition_post_status', '_wp_keep_alive_customize_changeset_dependent_auto_drafts', 20, 3 );
  451. // Calendar widget cache.
  452. add_action( 'save_post', 'delete_get_calendar_cache' );
  453. add_action( 'delete_post', 'delete_get_calendar_cache' );
  454. add_action( 'update_option_start_of_week', 'delete_get_calendar_cache' );
  455. add_action( 'update_option_gmt_offset', 'delete_get_calendar_cache' );
  456. // Author.
  457. add_action( 'transition_post_status', '__clear_multi_author_cache' );
  458. // Post.
  459. add_action( 'init', 'create_initial_post_types', 0 ); // Highest priority.
  460. add_action( 'admin_menu', '_add_post_type_submenus' );
  461. add_action( 'before_delete_post', '_reset_front_page_settings_for_post' );
  462. add_action( 'wp_trash_post', '_reset_front_page_settings_for_post' );
  463. add_action( 'change_locale', 'create_initial_post_types' );
  464. // Post Formats.
  465. add_filter( 'request', '_post_format_request' );
  466. add_filter( 'term_link', '_post_format_link', 10, 3 );
  467. add_filter( 'get_post_format', '_post_format_get_term' );
  468. add_filter( 'get_terms', '_post_format_get_terms', 10, 3 );
  469. add_filter( 'wp_get_object_terms', '_post_format_wp_get_object_terms' );
  470. // KSES.
  471. add_action( 'init', 'kses_init' );
  472. add_action( 'set_current_user', 'kses_init' );
  473. // Script Loader.
  474. add_action( 'wp_default_scripts', 'wp_default_scripts' );
  475. add_action( 'wp_default_scripts', 'wp_default_packages' );
  476. add_action( 'wp_enqueue_scripts', 'wp_localize_jquery_ui_datepicker', 1000 );
  477. add_action( 'wp_enqueue_scripts', 'wp_common_block_scripts_and_styles' );
  478. add_action( 'admin_enqueue_scripts', 'wp_localize_jquery_ui_datepicker', 1000 );
  479. add_action( 'admin_enqueue_scripts', 'wp_common_block_scripts_and_styles' );
  480. add_action( 'enqueue_block_assets', 'wp_enqueue_registered_block_scripts_and_styles' );
  481. add_action( 'enqueue_block_assets', 'enqueue_block_styles_assets', 30 );
  482. add_action( 'enqueue_block_editor_assets', 'wp_enqueue_registered_block_scripts_and_styles' );
  483. add_action( 'enqueue_block_editor_assets', 'enqueue_editor_block_styles_assets' );
  484. add_action( 'enqueue_block_editor_assets', 'wp_enqueue_editor_block_directory_assets' );
  485. add_action( 'enqueue_block_editor_assets', 'wp_enqueue_editor_format_library_assets' );
  486. add_action( 'enqueue_block_editor_assets', 'wp_enqueue_global_styles_css_custom_properties' );
  487. add_filter( 'wp_print_scripts', 'wp_just_in_time_script_localization' );
  488. add_filter( 'print_scripts_array', 'wp_prototype_before_jquery' );
  489. add_filter( 'customize_controls_print_styles', 'wp_resource_hints', 1 );
  490. add_action( 'admin_head', 'wp_check_widget_editor_deps' );
  491. // Global styles can be enqueued in both the header and the footer. See https://core.trac.wordpress.org/ticket/53494.
  492. add_action( 'wp_enqueue_scripts', 'wp_enqueue_global_styles' );
  493. add_action( 'wp_footer', 'wp_enqueue_global_styles', 1 );
  494. // SVG filters like duotone have to be loaded at the beginning of the body in both admin and the front-end.
  495. add_action( 'wp_body_open', 'wp_global_styles_render_svg_filters' );
  496. add_action( 'in_admin_header', 'wp_global_styles_render_svg_filters' );
  497. add_action( 'wp_default_styles', 'wp_default_styles' );
  498. add_filter( 'style_loader_src', 'wp_style_loader_src', 10, 2 );
  499. add_action( 'wp_head', 'wp_maybe_inline_styles', 1 ); // Run for styles enqueued in <head>.
  500. add_action( 'wp_footer', 'wp_maybe_inline_styles', 1 ); // Run for late-loaded styles in the footer.
  501. /*
  502. * Disable "Post Attributes" for wp_navigation post type. The attributes are
  503. * also conditionally enabled when a site has custom templates. Block Theme
  504. * templates can be available for every post type.
  505. */
  506. add_filter( 'theme_wp_navigation_templates', '__return_empty_array' );
  507. // Taxonomy.
  508. add_action( 'init', 'create_initial_taxonomies', 0 ); // Highest priority.
  509. add_action( 'change_locale', 'create_initial_taxonomies' );
  510. // Canonical.
  511. add_action( 'template_redirect', 'redirect_canonical' );
  512. add_action( 'template_redirect', 'wp_redirect_admin_locations', 1000 );
  513. // Shortcodes.
  514. add_filter( 'the_content', 'do_shortcode', 11 ); // AFTER wpautop().
  515. // Media.
  516. add_action( 'wp_playlist_scripts', 'wp_playlist_scripts' );
  517. add_action( 'customize_controls_enqueue_scripts', 'wp_plupload_default_settings' );
  518. add_action( 'plugins_loaded', '_wp_add_additional_image_sizes', 0 );
  519. add_filter( 'plupload_default_settings', 'wp_show_heic_upload_error' );
  520. // Nav menu.
  521. add_filter( 'nav_menu_item_id', '_nav_menu_item_id_use_once', 10, 2 );
  522. // Widgets.
  523. add_action( 'after_setup_theme', 'wp_setup_widgets_block_editor', 1 );
  524. add_action( 'init', 'wp_widgets_init', 1 );
  525. add_action( 'change_locale', array( 'WP_Widget_Media', 'reset_default_labels' ) );
  526. // Admin Bar.
  527. // Don't remove. Wrong way to disable.
  528. add_action( 'template_redirect', '_wp_admin_bar_init', 0 );
  529. add_action( 'admin_init', '_wp_admin_bar_init' );
  530. add_action( 'before_signup_header', '_wp_admin_bar_init' );
  531. add_action( 'activate_header', '_wp_admin_bar_init' );
  532. add_action( 'wp_body_open', 'wp_admin_bar_render', 0 );
  533. add_action( 'wp_footer', 'wp_admin_bar_render', 1000 ); // Back-compat for themes not using `wp_body_open`.
  534. add_action( 'in_admin_header', 'wp_admin_bar_render', 0 );
  535. // Former admin filters that can also be hooked on the front end.
  536. add_action( 'media_buttons', 'media_buttons' );
  537. add_filter( 'image_send_to_editor', 'image_add_caption', 20, 8 );
  538. add_filter( 'media_send_to_editor', 'image_media_send_to_editor', 10, 3 );
  539. // Embeds.
  540. add_action( 'rest_api_init', 'wp_oembed_register_route' );
  541. add_filter( 'rest_pre_serve_request', '_oembed_rest_pre_serve_request', 10, 4 );
  542. add_action( 'wp_head', 'wp_oembed_add_discovery_links' );
  543. add_action( 'wp_head', 'wp_oembed_add_host_js' ); // Back-compat for sites disabling oEmbed host JS by removing action.
  544. add_filter( 'embed_oembed_html', 'wp_maybe_enqueue_oembed_host_js' );
  545. add_action( 'embed_head', 'enqueue_embed_scripts', 1 );
  546. add_action( 'embed_head', 'print_emoji_detection_script' );
  547. add_action( 'embed_head', 'print_embed_styles' );
  548. add_action( 'embed_head', 'wp_print_head_scripts', 20 );
  549. add_action( 'embed_head', 'wp_print_styles', 20 );
  550. add_action( 'embed_head', 'wp_robots' );
  551. add_action( 'embed_head', 'rel_canonical' );
  552. add_action( 'embed_head', 'locale_stylesheet', 30 );
  553. add_action( 'embed_content_meta', 'print_embed_comments_button' );
  554. add_action( 'embed_content_meta', 'print_embed_sharing_button' );
  555. add_action( 'embed_footer', 'print_embed_sharing_dialog' );
  556. add_action( 'embed_footer', 'print_embed_scripts' );
  557. add_action( 'embed_footer', 'wp_print_footer_scripts', 20 );
  558. add_filter( 'excerpt_more', 'wp_embed_excerpt_more', 20 );
  559. add_filter( 'the_excerpt_embed', 'wptexturize' );
  560. add_filter( 'the_excerpt_embed', 'convert_chars' );
  561. add_filter( 'the_excerpt_embed', 'wpautop' );
  562. add_filter( 'the_excerpt_embed', 'shortcode_unautop' );
  563. add_filter( 'the_excerpt_embed', 'wp_embed_excerpt_attachment' );
  564. add_filter( 'oembed_dataparse', 'wp_filter_oembed_iframe_title_attribute', 5, 3 );
  565. add_filter( 'oembed_dataparse', 'wp_filter_oembed_result', 10, 3 );
  566. add_filter( 'oembed_response_data', 'get_oembed_response_data_rich', 10, 4 );
  567. add_filter( 'pre_oembed_result', 'wp_filter_pre_oembed_result', 10, 3 );
  568. // Capabilities.
  569. add_filter( 'user_has_cap', 'wp_maybe_grant_install_languages_cap', 1 );
  570. add_filter( 'user_has_cap', 'wp_maybe_grant_resume_extensions_caps', 1 );
  571. add_filter( 'user_has_cap', 'wp_maybe_grant_site_health_caps', 1, 4 );
  572. // Block templates post type and rendering.
  573. add_filter( 'render_block_context', '_block_template_render_without_post_block_context' );
  574. add_filter( 'pre_wp_unique_post_slug', 'wp_filter_wp_template_unique_post_slug', 10, 5 );
  575. add_action( 'save_post_wp_template_part', 'wp_set_unique_slug_on_create_template_part' );
  576. add_action( 'wp_footer', 'the_block_template_skip_link' );
  577. add_action( 'setup_theme', 'wp_enable_block_templates' );
  578. add_action( 'wp_loaded', '_add_template_loader_filters' );
  579. unset( $filter, $action );