Title: 4.7 – Make WordPress Core

---

#  Tag Archives: 4.7

 [  ](https://profiles.wordpress.org/swissspidy/) [Pascal Birchler](https://profiles.wordpress.org/swissspidy/)
5:49 pm _on_ April 18, 2017     
Tags: 4.7, [4.7.4 ( 17 )](https://make.wordpress.org/core/tag/4-7-4/),
[maintenance ( 14 )](https://make.wordpress.org/core/tag/maintenance/), [release ( 40 )](https://make.wordpress.org/core/tag/release/)

# 󠀁[4.7.4 Release Candidate](https://make.wordpress.org/core/2017/04/18/4-7-4-release-candidate/)󠁿

After about six weeks of development, a [Release Candidate for WordPress 4.7.4](https://wordpress.org/wordpress-4.7.4-RC1.zip)
is now available. This maintenance release fixes [46 issues](https://core.trac.wordpress.org/milestone/4.7.4)
reported against 4.7 and is scheduled for final release on Thursday, April 20, 2017.

Thus far WordPress 4.7 has been [downloaded nearly 60 million times](https://wordpress.org/download/counter/?branch=4.7)
since its release on December 6, 2016. _Please help us by [testing this release candidate](https://make.wordpress.org/core/handbook/testing/beta/)_
to ensure 4.7.4 fixes the reported issues and doesn’t introduce any new ones.

## Notable Bug Fixes

There are a few more notable issues being addressed in this release. The first one
is about broken video/audio thumbnails when uploading media ([#40075](https://core.trac.wordpress.org/ticket/40075)).
Additionally, an incompatibility between the upcoming Chrome version and the visual
editor ([#40305](https://core.trac.wordpress.org/ticket/40305)) has been solved 
by updating TinyMCE. Furthermore, the REST APIREST API The REST API is an acronym
for the RESTful Application Program Interface (API) that uses HTTP requests to GET,
PUT, POST and DELETE data. It is how the front end of an application (think “phone
app” or “website”) can communicate with the data store (think “database” or “file
system”) [https://developer.wordpress.org/rest-api/](https://developer.wordpress.org/rest-api/)
saw some enhancements in relation to date handling ([#39854](https://core.trac.wordpress.org/ticket/39854),
[#40136](https://core.trac.wordpress.org/ticket/40136)).

## All Changes

Here’s a list of all closed tickets, sorted by component:

### Administration

 * [#39983](https://core.trac.wordpress.org/ticket/39983) – Consider to don’t use
   the CSSCSS Cascading Style Sheets. class button-link for controls that don’t 
   look like links
 * [#40056](https://core.trac.wordpress.org/ticket/40056) – Shift-click to select
   a range of checkboxes isn’t working anymore since 4.7.3 update

### Bootstrap/Load

 * [#39445](https://core.trac.wordpress.org/ticket/39445) – Add `class_exists()`
   check before defining the `PasswordHash` class

### Build/Test Tools

 * [#38500](https://core.trac.wordpress.org/ticket/38500) – Automatically cancel
   pending Travis builds with each commit
 * [#39219](https://core.trac.wordpress.org/ticket/39219) – Add `assertNotFalse`
   method to `WP_UnitTestCase`.
 * [#39367](https://core.trac.wordpress.org/ticket/39367) – Don’t no-op $user_id
   in test suite’s `wp_set_auth_cookie()`
 * [#39988](https://core.trac.wordpress.org/ticket/39988) – The theme used during
   tests should call `wp_head()` and `wp_footer()`
 * [#40066](https://core.trac.wordpress.org/ticket/40066) – Remove the twentysixteen
   git clone from the Travis config
 * [#40086](https://core.trac.wordpress.org/ticket/40086) – Get Travis tests working
   again on PHPPHP The web scripting language in which WordPress is primarily architected.
   WordPress requires PHP 7.4 or higher 7

### Bundled Theme

 * [#40216](https://core.trac.wordpress.org/ticket/40216) – Twenty Seventeen: Some
   parts do not escape htmlHTML HyperText Markup Language. The semantic scripting
   language primarily used for outputting content in web browsers. attributes
 * [#40224](https://core.trac.wordpress.org/ticket/40224) – Twenty Seventeen: navigation.
   js should be enqueued with jQuery as dependency
 * [#40264](https://core.trac.wordpress.org/ticket/40264) – Twenty Seventeen: Incorrect
   heading hierarchy for front page sections
 * [#40461](https://core.trac.wordpress.org/ticket/40461) – Twenty Seventeen: Bump
   version and update changelog

### Customize

 * [#31850](https://core.trac.wordpress.org/ticket/31850) – CustomizerCustomizer
   Tool built into WordPress core that hooks into most modern themes. You can use
   it to preview and modify many of your site’s appearance settings. links should
   use canonical adminadmin (and super admin) URLURL A specific web address of a
   website or web page on the Internet, such as a website’s URL www.wordpress.org
 * [#37471](https://core.trac.wordpress.org/ticket/37471) – Widgets: If your theme
   only has one widgetWidget A WordPress Widget is a small block that performs a
   specific function. You can add these widgets in sidebars also known as widget-
   ready areas on your web page. WordPress widgets were originally created to provide
   a simple and easy-to-use way of giving design and structure control of the WordPress
   theme to the user. area, we should open it automatically
 * [#38953](https://core.trac.wordpress.org/ticket/38953) – Customize Menus: clicking
   outside of the available menu items panel does not close the panel
 * [#39430](https://core.trac.wordpress.org/ticket/39430) – sections and panels 
   that are open and become inactive should be closed
 * [#39770](https://core.trac.wordpress.org/ticket/39770) – Client-side notification
   error is unexpectedly cleared when no corresponding server-side validation
 * [#40010](https://core.trac.wordpress.org/ticket/40010) – Template for site icon
   control fails to check if full image size exists before using
 * [#40018](https://core.trac.wordpress.org/ticket/40018) – Selective refresh always
   falls back to full refreshes when customizing the 404 template
 * [#40112](https://core.trac.wordpress.org/ticket/40112) – Can’t preview starter
   content “Home” menu item in subdirectory installation
 * [#40198](https://core.trac.wordpress.org/ticket/40198) – all previewable links
   are blocked in the customize preview on IE11
 * [#40271](https://core.trac.wordpress.org/ticket/40271) – Use `get_user_locale()`
   in Customizer
 * [#40277](https://core.trac.wordpress.org/ticket/40277) – Adding page created 
   with the dropdown-pages settings to menu creates Custom Link instead of Page
 * [#40308](https://core.trac.wordpress.org/ticket/40308) – Video headerHeader The
   header of your site is typically the first thing people will experience. The 
   masthead or header art located across the top of your page is part of the look
   and feel of your website. It can influence a visitor’s opinion about your content
   and you/ your organization’s brand. It may also look different on different screen
   sizes. control fails to use `is_header_video_active()` for `active_callback`
 * [#40405](https://core.trac.wordpress.org/ticket/40405) – IE9 errors when attempting
   to generate changeset parameter

### Login and Registration

 * [#39497](https://core.trac.wordpress.org/ticket/39497) – Can’t log out completely
   without closing my browser

### Media

 * [#31071](https://core.trac.wordpress.org/ticket/31071) – media / post_mime_type
   related queries are very slow on larger sites
 * [#40017](https://core.trac.wordpress.org/ticket/40017) – `wp_get_image_mime()`
   returns ‘application/octet-stream’ for non-image files.
 * [#40075](https://core.trac.wordpress.org/ticket/40075) – Broken video/audio thumbnails
   because of corrupted blob metaMeta Meta is a term that refers to the inside workings
   of a group. For us, this is the team that works on internal WordPress sites like
   WordCamp Central and Make WordPress. data
 * [#40085](https://core.trac.wordpress.org/ticket/40085) – Audio/video uploads 
   are broken in 4.2.13 and 4.3.9
 * [#40152](https://core.trac.wordpress.org/ticket/40152) – Crop Image button off-
   screen on mobile

### Networks and Sites

 * [#40036](https://core.trac.wordpress.org/ticket/40036) – Re-save Networknetwork(
   versus site, blog) Settings ruin starter content
 * [#40063](https://core.trac.wordpress.org/ticket/40063) – Handle site cache invalidation
   more specifically for option updates

### Posts, Post Types

 * [#39986](https://core.trac.wordpress.org/ticket/39986) – Register missing REST
   API properties on `WP_Post_Type`

### Quick/Bulk Edit

 * [#40242](https://core.trac.wordpress.org/ticket/40242) – Bulk edit tagtag A directory
   in Subversion. WordPress uses tags to store a single snapshot of a version (3.6,
   3.6.1, etc.), the common convention of tags in version control systems. (Not 
   to be confused with post tags.) autocomplete layout error

### REST API

 * [#39854](https://core.trac.wordpress.org/ticket/39854) – Add gmt_offset to base/
   wp-jsonJSON JSON, or JavaScript Object Notation, is a minimal, readable format
   for structuring data. It is used primarily to transmit data between a server 
   and web application, as an alternative to XML. response
 * [#39881](https://core.trac.wordpress.org/ticket/39881) – `WP_REST_Posts_Controller::
   check_read_permission()` should check if `$parent` exists before calling itself
 * [#40027](https://core.trac.wordpress.org/ticket/40027) – Tags and Categories 
   should have a “slugs” parameter for batch fetching
 * [#40136](https://core.trac.wordpress.org/ticket/40136) – Issues with dates and
   DST
 * [#40213](https://core.trac.wordpress.org/ticket/40213) – Users endpoint slug 
   parameter should allow an array of slugs

### TaxonomyTaxonomy A taxonomy is a way to group things together. In WordPress, some common taxonomies are category, link, tag, or post format. 󠀁[https://codex.wordpress.org/Taxonomies#Default_Taxonomies](https://codex.wordpress.org/Taxonomies#Default_Taxonomies)󠁿.

 * [#39987](https://core.trac.wordpress.org/ticket/39987) – Register missing REST
   API properties on `WP_Taxonomy`
 * [#40154](https://core.trac.wordpress.org/ticket/40154) – Incorrectly formatted`
   $taxonomies` parameter passed to wp_get_object_terms filterFilter Filters are
   one of the two types of Hooks [https://codex.wordpress.org/Plugin_API/Hooks](https://codex.wordpress.org/Plugin_API/Hooks).
   They provide a way for functions to modify data of other functions. They are 
   the counterpart to Actions. Unlike Actions, filters are meant to work in an isolated
   manner, and should never have side effects such as affecting global variables
   and output.
 * [#40306](https://core.trac.wordpress.org/ticket/40306) – Term cache isn’t cleared
   completely when setting and removing object terms

### Themes

 * [#38292](https://core.trac.wordpress.org/ticket/38292) – Introduce exclusion 
   for `WP_Theme::scandir()`

### TinyMCE

 * [#40305](https://core.trac.wordpress.org/ticket/40305) – Image popup toolbar 
   does not support Chrome BetaBeta A pre-release of software that is given out 
   to a large group of users to trial under real conditions. Beta versions have 
   gone through alpha testing in-house and are generally fairly close in look, feel
   and function to the final product; however, design changes often occur as part
   of the process.

[Download the Release Candidate now](https://wordpress.org/wordpress-4.7.4-RC1.zip)
and help us test!

[#4-7](https://make.wordpress.org/core/tag/4-7/), [#4-7-4](https://make.wordpress.org/core/tag/4-7-4/),
[#maintenance](https://make.wordpress.org/core/tag/maintenance/), [#release](https://make.wordpress.org/core/tag/release/)

 [  ](https://profiles.wordpress.org/desrosj/) [Jonathan Desrosiers](https://profiles.wordpress.org/desrosj/)
2:34 pm _on_ April 3, 2017     
Tags: 4.7, [4.7.4 ( 17 )](https://make.wordpress.org/core/tag/4-7-4/),
[community summit ( 5 )](https://make.wordpress.org/core/tag/community-summit/),
[core-editor ( 761 )](https://make.wordpress.org/core/tag/core-editor/), [core-restapi ( 34 )](https://make.wordpress.org/core/tag/core-restapi/),
[dev chat ( 932 )](https://make.wordpress.org/core/tag/dev-chat/), [summary ( 981 )](https://make.wordpress.org/core/tag/summary/)

# 󠀁[Dev Chat Summary: March 29th (4.7.4 week 4)](https://make.wordpress.org/core/2017/04/03/dev-chat-summary-march-29th-4-7-4-week-4/)󠁿

This post summarizes the dev chat meeting from March 29th ([agenda](https://make.wordpress.org/core/2017/03/28/dev-chat-agenda-for-march-29th-4-7-4-week-4/),
[Slack archive](https://wordpress.slack.com/archives/C02RQBWTW/p1490817610827569)).

### 4.7.4 Planning

 * There were only 35 open tickets in the milestone at the time of the meeting.
 * 2 bugbug A bug is an error or unexpected result. Performance improvements, code
   optimization, and are considered enhancements, not defects. After feature freeze,
   only bugs are dealt with, with regressions (adverse changes from the previous
   version) being the highest priority. scrubs over the last 2 weeks helped close
   a lot of those open tickets.
 * The release is still on schedule for the first week of May, but a few more bug
   scrubs are necessary.
 * If you have owned a ticketticket Created for both bug reports and feature development
   on the bug tracker., please help test it!
 * Next bug scrub will take place on [April 3, 2017 at 17:00 UTC](https://www.timeanddate.com/worldclock/fixedtime.html?iso=20170403T1700).
   [@stevenkword](https://profiles.wordpress.org/stevenkword/) offered to help.

### 󠀁[Editor](https://make.wordpress.org/core/components/editor/)󠁿 Team

 * Nothing in particular to discuss this week.
 * Work continues on the editor feature pluginFeature Plugin A plugin that was created
   with the intention of eventually being proposed for inclusion in WordPress Core.
   See [Features as Plugins](https://make.wordpress.org/core/handbook/about/release-cycle/features-as-plugins/).
 * Day to day discussion and work happens in the [#core-editor](https://wordpress.slack.com/archives/C02QB2JS7)
   SlackSlack Slack is a Collaborative Group Chat Platform [https://slack.com/](https://slack.com/).
   The WordPress community has its own Slack Channel at [https://make.wordpress.org/chat/](https://make.wordpress.org/chat/)
   channel, and the [Gutenberg GitHub project](https://github.com/WordPress/gutenberg).
 * Help testing, feedback, and contributions are welcome in both places.

### 󠀁[REST API](https://make.wordpress.org/core/components/rest-api/)󠁿 Team

 * No updates this week.
 * Work continues in the [#core-restapi](https://wordpress.slack.com/archives/C02RQC26G)
   Slack channel.
 * There are some component tickets in the 4.7.4 milestone that will hopefully be
   closer to merge this week.

### CoreCore Core is the set of software required to run WordPress. The Core Development Team builds WordPress. team reps

 * [@desrosj](https://profiles.wordpress.org/desrosj/), [@stevenkword](https://profiles.wordpress.org/stevenkword/),
   and [@adamsilverstein](https://profiles.wordpress.org/adamsilverstein/) all volunteered
   to help [@logankipp](https://profiles.wordpress.org/logankipp/) as a Core team
   repTeam Rep A Team Rep is a person who represents the Make WordPress team to 
   the rest of the project, make sure issues are raised and addressed as needed,
   and coordinates cross-team efforts..
 * All three are attending WCEU and the Community Summit.

### Open Floor Items

 * [@dlh](https://profiles.wordpress.org/dlh/) brought up [#36188](https://core.trac.wordpress.org/ticket/36188)
 * [@stevenkword](https://profiles.wordpress.org/stevenkword/) brought up [#20899](https://core.trac.wordpress.org/ticket/20899)
 * Both requested additional eyes, and people to test the fixes. Both offered to
   trade tickets and test.

[#4-7](https://make.wordpress.org/core/tag/4-7/), [#4-7-4](https://make.wordpress.org/core/tag/4-7-4/),
[#community-summit](https://make.wordpress.org/core/tag/community-summit/), [#core-editor](https://make.wordpress.org/core/tag/core-editor/),
[#core-restapi](https://make.wordpress.org/core/tag/core-restapi/), [#dev-chat](https://make.wordpress.org/core/tag/dev-chat/),
[#summary](https://make.wordpress.org/core/tag/summary/)

 [  ](https://profiles.wordpress.org/desrosj/) [Jonathan Desrosiers](https://profiles.wordpress.org/desrosj/)
12:44 pm _on_ March 28, 2017     
Tags: 4.7, [4.7.4 ( 17 )](https://make.wordpress.org/core/tag/4-7-4/),
[agenda ( 1,149 )](https://make.wordpress.org/core/tag/agenda/), [dev chat ( 932 )](https://make.wordpress.org/core/tag/dev-chat/)

# 󠀁[Dev Chat Agenda for March 29th (4.7.4 week 4)](https://make.wordpress.org/core/2017/03/28/dev-chat-agenda-for-march-29th-4-7-4-week-4/)󠁿

**Please note the changed start time of this dev chat to account for DST. This is
the first meeting at this new time.**

This is the agenda for the weekly dev meeting on [March 29, 2017 at 20:00 UTC](https://www.timeanddate.com/worldclock/fixedtime.html?iso=20170329T2000):

 * 4.7.4 planning (bugbug A bug is an error or unexpected result. Performance improvements,
   code optimization, and are considered enhancements, not defects. After feature
   freeze, only bugs are dealt with, with regressions (adverse changes from the 
   previous version) being the highest priority. scrubs, release date)
 * Editor team (feature pluginFeature Plugin A plugin that was created with the 
   intention of eventually being proposed for inclusion in WordPress Core. See [Features as Plugins](https://make.wordpress.org/core/handbook/about/release-cycle/features-as-plugins/)
   work is [continuing on GitHub](https://github.com/WordPress/gutenberg))
 * REST APIREST API The REST API is an acronym for the RESTful Application Program
   Interface (API) that uses HTTP requests to GET, PUT, POST and DELETE data. It
   is how the front end of an application (think “phone app” or “website”) can communicate
   with the data store (think “database” or “file system”) [https://developer.wordpress.org/rest-api/](https://developer.wordpress.org/rest-api/)
   team
 * Community Summit CoreCore Core is the set of software required to run WordPress.
   The Core Development Team builds WordPress. team reps

If you have anything to propose to add to the agenda or specific items related to
the above, please leave a comment below. See you there!

[#4-7](https://make.wordpress.org/core/tag/4-7/), [#4-7-4](https://make.wordpress.org/core/tag/4-7-4/),
[#agenda](https://make.wordpress.org/core/tag/agenda/), [#dev-chat](https://make.wordpress.org/core/tag/dev-chat/)

 [  ](https://profiles.wordpress.org/aaroncampbell/) [Aaron D. Campbell](https://profiles.wordpress.org/aaroncampbell/)
3:59 pm _on_ February 1, 2017     
Tags: 4.7, [release ( 40 )](https://make.wordpress.org/core/tag/release/),
[security ( 18 )](https://make.wordpress.org/core/tag/security/)   

# 󠀁[Disclosure of Additional Security Fix in WordPress 4.7.2](https://make.wordpress.org/core/2017/02/01/disclosure-of-additional-security-fix-in-wordpress-4-7-2/)󠁿

[WordPress 4.7.2](https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/)
was released last Thursday, January 26th. If you have not already updated, please
do so immediately.

In addition to the three security vulnerabilities mentioned in the original release
post, WordPress 4.7 and 4.7.1 had one additional vulnerability for which disclosure
was delayed. There was an _Unauthenticated Privilege Escalation Vulnerability in
a REST APIREST API The REST API is an acronym for the RESTful Application Program
Interface (API) that uses HTTP requests to GET, PUT, POST and DELETE data. It is
how the front end of an application (think “phone app” or “website”) can communicate
with the data store (think “database” or “file system”) [https://developer.wordpress.org/rest-api/](https://developer.wordpress.org/rest-api/)
Endpoint_. Previous versions of WordPress, even with the REST API PluginPlugin A
plugin is a piece of software containing a group of functions that can be added 
to a WordPress website. They can extend functionality or add new features to your
WordPress websites. WordPress plugins are written in the PHP programming language
and integrate seamlessly with WordPress. These can be free in the WordPress.org 
Plugin Directory [https://wordpress.org/plugins/](https://wordpress.org/plugins/)
or can be cost-based plugin from a third-party., were never vulnerable to this.

**We believe transparency is in the public’s best interest**. It is our stance that
security issues should always be disclosed. In this case, we intentionally delayed
disclosing this issue by one week to ensure the safety of millions of additional
WordPress sites.

On January 20th, [Sucuri](https://sucuri.net/) alerted us to a vulnerability discovered
by one of their security researchers, [Marc-Alexandre Montpas](https://twitter.com/MarcS0h).
The security team began assessing the issue and working on solutions. While a first
iteration of a fix was created early on, the team felt that more testing was needed.

Meanwhile, Sucuri added rules to their Web Application Firewall (WAF) to blockBlock
Block is the abstract term used to describe units of markup that, composed together,
form the content or layout of a webpage using the WordPress editor. The idea combines
concepts of what in the past may have achieved with shortcodes, custom HTML, and
embed discovery into a single consistent API and user experience. exploit attempts
against their clients. This issue was found internally and no outside attempts were
discovered by Sucuri.

Over the weekend, we reached out to several other companies with WAFs including 
SiteLock, Cloudflare, and Incapsula and worked with them to create a set of rules
that could protect more users. By Monday, they had put rules in place and were regularly
checking for exploit attempts in the wild.

On Monday, while we continued to test and refine the fix, our focus shifted to WordPress
hosts. We contacted them privately with information on the vulnerability and ways
to protect users. Hosts worked closely with the security team to implement protections
and regularly checked for exploit attempts against their users.

By Wednesday afternoon, most of the hosts we worked with had protections in place.
Data from all four WAFs and WordPress hosts showed _no indication that the vulnerability
had been exploited in the wild_. As a result, we made the decision to delay disclosure
of this particular issue to give time for automatic updates to run and ensure as
many users as possible were protected before the issue was made public.

On Thursday, January 26, we [released WordPress 4.7.2 to the world](https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/).
The release went out over our autoupdate system and, over a couple of hours, millions
of WordPress 4.7.x users were protected without knowing about the issue or taking
any action at all.

We’d like to thank Sucuri for their [responsible disclosure](https://blog.sucuri.net/2017/02/content-injection-vulnerability-wordpress-rest-api.html),
as well as working with us to delay disclosure until we were confident that as many
WordPress sites were updated to 4.7.2 as possible. We’d also like to thank the WAFs
and hosts who worked closely with us to add additional protections and monitored
their systems for attempts to use this exploit in the wild. As of today, to our 
knowledge, there have been no attempts to exploit this vulnerability in the wild.

[#4-7](https://make.wordpress.org/core/tag/4-7/), [#release](https://make.wordpress.org/core/tag/release/),
[#security](https://make.wordpress.org/core/tag/security/)

 [  ](https://profiles.wordpress.org/voldemortensen/) [Garth Mortensen](https://profiles.wordpress.org/voldemortensen/)
10:37 pm _on_ January 6, 2017     
Tags: 4.7, [4.7.1 ( 10 )](https://make.wordpress.org/core/tag/4-7-1/),
[maintenance ( 14 )](https://make.wordpress.org/core/tag/maintenance/), [release ( 40 )](https://make.wordpress.org/core/tag/release/),
[security ( 18 )](https://make.wordpress.org/core/tag/security/)   

# 󠀁[4.7.1 Release Candidate](https://make.wordpress.org/core/2017/01/06/upcoming-wordpress-4-7-1-release/)󠁿

A [Release Candidate for WordPress 4.7.1](https://wordpress.org/wordpress-4.7.1-RC1.zip)
is now available. This security and maintenance release fixes [62 issues](https://core.trac.wordpress.org/milestone/4.7.1)
reported against 4.7 and is scheduled for final release on Wednesday, January 11,
2017. Note this does not address a number of other issues, [which are slated for a 4.7.2 release](https://core.trac.wordpress.org/query?status=!closed&milestone=4.7.2).

Thus far WordPress 4.7 has been [downloaded over 9 million times](https://wordpress.org/download/counter/?branch=4.7)
since its release on December 6, 2016. _Please help us by [testing this release candidate](https://make.wordpress.org/core/handbook/testing/beta/)_
to ensure 4.7.1 fixes the reported issues and doesn’t introduce any new ones. As
always, the entire WordPress project is grateful to security reporters for practicing
[responsible disclosure](https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/).

## PHPMailer Update

Last month a security vulnerability ([CVE 20016-10033](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10033))
in the [PHPMailer library](https://github.com/PHPMailer/phpmailer) was made public.
WordPress uses this library as the basis for its email functionality. The Security
Team has spent some time analysing this vulnerability, and how it applies to WordPress.
This vulnerability **does not** appear to be directly exploitable in WordPress CoreCore
Core is the set of software required to run WordPress. The Core Development Team
builds WordPress., or any major plugins in the pluginPlugin A plugin is a piece 
of software containing a group of functions that can be added to a WordPress website.
They can extend functionality or add new features to your WordPress websites. WordPress
plugins are written in the PHP programming language and integrate seamlessly with
WordPress. These can be free in the WordPress.org Plugin Directory [https://wordpress.org/plugins/](https://wordpress.org/plugins/)
or can be cost-based plugin from a third-party. directory. The `wp_mail()` function,
which WordPress Core and most plugins use for sending email, blocks this vulnerability
from being exploited.

## All Changes

Here’s a list of all closed tickets, sorted by component:

### Bootstrap/Load

 * [#39132](https://core.trac.wordpress.org/ticket/39132) – WP 4.7, object-cache.
   php breaks the site if APC is not enabled in php

### Build/Test Tools

 * [#39327](https://core.trac.wordpress.org/ticket/39327) – Database connection 
   errors in unit tests on 4.7

### Bundled Theme

 * [#39138](https://core.trac.wordpress.org/ticket/39138) – wordpress 4.7 default
   theme does not get installed when upgrading
 * [#39272](https://core.trac.wordpress.org/ticket/39272) – Twenty Seventeen: Incorrect
   $content_width
 * [#39302](https://core.trac.wordpress.org/ticket/39302) – Twenty Seventeen: Featured
   imageFeatured image A featured image is the main image used on your blog archive
   page and is pulled when the post or page is shared on social media. The image
   can be used to display in widget areas on your site or in a summary list of posts.
   not displayed on single template
 * [#39335](https://core.trac.wordpress.org/ticket/39335) – Twenty Seventeen: customize-
   controls.js incorrectly assumes theme_options section is always present
 * [#39109](https://core.trac.wordpress.org/ticket/39109) – Twenty Seventeen: starter
   content array needs a filterFilter Filters are one of the two types of Hooks 
   [https://codex.wordpress.org/Plugin_API/Hooks](https://codex.wordpress.org/Plugin_API/Hooks).
   They provide a way for functions to modify data of other functions. They are 
   the counterpart to Actions. Unlike Actions, filters are meant to work in an isolated
   manner, and should never have side effects such as affecting global variables
   and output.
 * [#39489](https://core.trac.wordpress.org/ticket/39489) – Twenty Seventeen: Bump
   version and update changelog

### Charset

 * [#37982](https://core.trac.wordpress.org/ticket/37982) – 4.6.1 Breaks apostrophes
   in titles and utf-8 characters

### Comments

 * [#39280](https://core.trac.wordpress.org/ticket/39280) – comment permalink wrong
   in WordPress 4.7
 * [#39380](https://core.trac.wordpress.org/ticket/39380) – wp_update_comment can
   cause database error with new filter

### Customize

 * [#39009](https://core.trac.wordpress.org/ticket/39009) – CustomizerCustomizer
   Tool built into WordPress core that hooks into most modern themes. You can use
   it to preview and modify many of your site’s appearance settings.: the preview
   UIUI User interface language should be the user language
 * [#39098](https://core.trac.wordpress.org/ticket/39098) – Customize: Clicking 
   on child elements of preview links fails to abort navigation to non-previewable
   links
 * [#39100](https://core.trac.wordpress.org/ticket/39100) – Customize: Edit shortcuts
   do not work if page hasn’t been saved and published
 * [#39101](https://core.trac.wordpress.org/ticket/39101) – Customize: edit shortcuts
   for custom menu widgets do not work
 * [#39102](https://core.trac.wordpress.org/ticket/39102) – Customize: Shift-click
   on placeholder nav menu items fails to focus on the nav menu item control
 * [#39103](https://core.trac.wordpress.org/ticket/39103) – Customize: menus aren’t
   deleted
 * [#39104](https://core.trac.wordpress.org/ticket/39104) – Customize: starter content
   home menu item needs to be a link, not a page
 * [#39125](https://core.trac.wordpress.org/ticket/39125) – Customize: Video HeaderHeader
   The header of your site is typically the first thing people will experience. 
   The masthead or header art located across the top of your page is part of the
   look and feel of your website. It can influence a visitor’s opinion about your
   content and you/ your organization’s brand. It may also look different on different
   screen sizes. YouTube field has issues when whitespace is inserted at beginning
   or end of URLURL A specific web address of a website or web page on the Internet,
   such as a website’s URL www.wordpress.org
 * [#39134](https://core.trac.wordpress.org/ticket/39134) – Customize: custom CSSCSS
   Cascading Style Sheets. textarea is scrolled to top when pressing tab
 * [#39145](https://core.trac.wordpress.org/ticket/39145) – custom-background URL
   escaped
 * [#39175](https://core.trac.wordpress.org/ticket/39175) – Customizer assumes url
   is passed with replaceState and pushState
 * [#39194](https://core.trac.wordpress.org/ticket/39194) – Invalidinvalid A resolution
   on the bug tracker (and generally common in software development, sometimes also
   _notabug_) that indicates the ticket is not a bug, is a support request, or is
   generally invalid. parameters in Custom CSS and Changeset queries
 * [#39198](https://core.trac.wordpress.org/ticket/39198) – Customize: Apostrophes
   in custom CSS cause false positives for validation errors
 * [#39227](https://core.trac.wordpress.org/ticket/39227) – Changeset parameter 
   not generated
 * [#39259](https://core.trac.wordpress.org/ticket/39259) – ‘custom_css_post_id’
   theme mod of `-1` doesn’t prevent queries
 * [#39270](https://core.trac.wordpress.org/ticket/39270) – Use a higher priority
   on wp_head for inline custom CSS
 * [#39349](https://core.trac.wordpress.org/ticket/39349) – Customizer (mobile preview)
   site title extra padding
 * [#39444](https://core.trac.wordpress.org/ticket/39444) – Text Decoration Underline
   removes on hover in Customizer

### Editor

 * [#39276](https://core.trac.wordpress.org/ticket/39276) – Link Editor bugbug A
   bug is an error or unexpected result. Performance improvements, code optimization,
   and are considered enhancements, not defects. After feature freeze, only bugs
   are dealt with, with regressions (adverse changes from the previous version) 
   being the highest priority. – target=”_blank” not removed
 * [#39313](https://core.trac.wordpress.org/ticket/39313) – Add New button not disappearing
   in Distraction-free Writing mode
 * [#39368](https://core.trac.wordpress.org/ticket/39368) – .page-template-default
   body class in editor doesn’t appear in initial post/page load.

### External Libraries

 * [#37210](https://core.trac.wordpress.org/ticket/37210) – Update PHPMailer to 
   5.2.21

### Feeds

 * [#39066](https://core.trac.wordpress.org/ticket/39066) – `fetch_feed()` changes
   REST APIREST API The REST API is an acronym for the RESTful Application Program
   Interface (API) that uses HTTP requests to GET, PUT, POST and DELETE data. It
   is how the front end of an application (think “phone app” or “website”) can communicate
   with the data store (think “database” or “file system”) [https://developer.wordpress.org/rest-api/](https://developer.wordpress.org/rest-api/)
   response `Content-Type`
 * [#39141](https://core.trac.wordpress.org/ticket/39141) – RSS feeds have incorrect
   lastBuildDate when using alternate languages

### General

 * [#39148](https://core.trac.wordpress.org/ticket/39148) – Correct concatenated
   dynamic hooksHooks In WordPress theme and development, hooks are functions that
   can be applied to an action or a Filter in WordPress. Actions are functions performed
   when a certain event occurs in WordPress. Filters allow you to modify certain
   functions. Arguments used to hook both filters and actions look the same.
 * [#39433](https://core.trac.wordpress.org/ticket/39433) – Update copyright year
   in license.txt

### HTTPHTTP HTTP is an acronym for Hyper Text Transfer Protocol. HTTP is the underlying protocol used by the World Wide Web and this protocol defines how messages are formatted and transmitted, and what actions Web servers and browsers should take in response to various commands. APIAPI An API or Application Programming Interface is a software intermediary that allows programs to interact with each other and share data in limited, clearly defined ways.

 * [#37839](https://core.trac.wordpress.org/ticket/37839) – wp_remote_get sometimes
   mutilates the response body
 * [#37991](https://core.trac.wordpress.org/ticket/37991) – fsockopen logic bug
 * [#37992](https://core.trac.wordpress.org/ticket/37992) – fsockopen hard codes
   port 443 when http scheme used
 * [#38070](https://core.trac.wordpress.org/ticket/38070) – RegEx to remove double
   slashes affects query strings as well.
 * [#38226](https://core.trac.wordpress.org/ticket/38226) – “cURL error 23: Failed
   writing body” when updating plugins or themes
 * [#38232](https://core.trac.wordpress.org/ticket/38232) – Setting `sslverify` 
   to false still validates the hostname

### Media

 * [#39195](https://core.trac.wordpress.org/ticket/39195) – Undefined index: extension
   in class-wp-image-editor-imagick.php on line 152
 * [#39231](https://core.trac.wordpress.org/ticket/39231) – Allow the pdf fallback_intermediate_image_sizes
   filter to process add_image_size() sizes.
 * [#39250](https://core.trac.wordpress.org/ticket/39250) – Undefinded Variable 
   in Media-Modal

### Posts, Post Types

 * [#39211](https://core.trac.wordpress.org/ticket/39211) – is_page_template could
   return true on terms

### REST API

 * [#38700](https://core.trac.wordpress.org/ticket/38700) – REST API: Cannot send
   an empty or no-op comment update
 * [#38977](https://core.trac.wordpress.org/ticket/38977) – REST API: `password`
   is incorrectly included in arguments to get a media item
 * [#39010](https://core.trac.wordpress.org/ticket/39010) – REST API: Treat null
   and other falsy values like `false` in ‘rest_allow_anonymous_comments’
 * [#39042](https://core.trac.wordpress.org/ticket/39042) – REST API: Allow sanitization_callback
   to be set to null to bypass `rest_parse_request_arg()`
 * [#39070](https://core.trac.wordpress.org/ticket/39070) – WP-API JSJS JavaScript,
   a web scripting language typically executed in the browser. Often used for advanced
   user interfaces and behaviors. client can’t use getCategories for models returned
   by collections
 * [#39092](https://core.trac.wordpress.org/ticket/39092) – REST API: Add support
   for filename search in media endpoint
 * [#39150](https://core.trac.wordpress.org/ticket/39150) – Empty JSONJSON JSON,
   or JavaScript Object Notation, is a minimal, readable format for structuring 
   data. It is used primarily to transmit data between a server and web application,
   as an alternative to XML. Payload Causes rest_invalid_json
 * [#39293](https://core.trac.wordpress.org/ticket/39293) – WordPress REST API warnings
 * [#39300](https://core.trac.wordpress.org/ticket/39300) – REST API Terms Controller
   Dynamic Filter Bug
 * [#39314](https://core.trac.wordpress.org/ticket/39314) – WP-API Backbone Client:
   buildModelGetter fails to reject deferred on fetch error

### TaxonomyTaxonomy A taxonomy is a way to group things together. In WordPress, some common taxonomies are category, link, tag, or post format. 󠀁[https://codex.wordpress.org/Taxonomies#Default_Taxonomies](https://codex.wordpress.org/Taxonomies#Default_Taxonomies)󠁿.

 * [#39215](https://core.trac.wordpress.org/ticket/39215) – Support for string $
   args in wp_get_object_terms() broken in 4.7
 * [#39328](https://core.trac.wordpress.org/ticket/39328) – Adding terms without
   AJAX strips “taxonomy” query arg

### Themes

 * [#39246](https://core.trac.wordpress.org/ticket/39246) – Theme deletion has a
   JS error that prevents multiple themes from being deleted.

### Upgrade/Install

 * [#39047](https://core.trac.wordpress.org/ticket/39047) – Installer tries to create
   nonce before options table exists
 * [#39057](https://core.trac.wordpress.org/ticket/39057) – FTPFTP FTP is an acronym
   for File Transfer Protocol which is a way of moving computer files from one computer
   to another via the Internet. You can use software, known as a FTP client, to 
   upload files to a server for a WordPress website. [https://codex.wordpress.org/FTP_Clients](https://codex.wordpress.org/FTP_Clients)
   credentials form doesn’t display the SSH2 fields on the Updates screen

 

[#4-7](https://make.wordpress.org/core/tag/4-7/), [#4-7-1](https://make.wordpress.org/core/tag/4-7-1/),
[#maintenance](https://make.wordpress.org/core/tag/maintenance/), [#release](https://make.wordpress.org/core/tag/release/),
[#security](https://make.wordpress.org/core/tag/security/)

 [  ](https://profiles.wordpress.org/rockwell15/) [Andrew Rockwell](https://profiles.wordpress.org/rockwell15/)
8:34 pm _on_ December 8, 2016     
Tags: 4.7, [week in core ( 245 )](https://make.wordpress.org/core/tag/week-in-core/)

# 󠀁[Week in Core, November 30 – December 6, 2016](https://make.wordpress.org/core/2016/12/08/week-in-core-november-30-december-6-2016/)󠁿

Welcome back the latest issue of Week in CoreCore Core is the set of software required
to run WordPress. The Core Development Team builds WordPress., covering changes 
[[39380-](https://core.trac.wordpress.org/log?rev=39379&stop_rev=39341&verbose=on)
[39529](https://core.trac.wordpress.org/browser/?rev=39529)[]](https://core.trac.wordpress.org/log?rev=39379&stop_rev=39341&verbose=on).
Here are the highlights:

 * 150 commits
 * 63 contributors
 * 140 tickets created
 * 17 tickets reopened
 * 104 tickets closed
 * [WordPress 4.7 released](https://wordpress.org/news/2016/12/vaughan/) 🎉

Ticketticket Created for both bug reports and feature development on the bug tracker.
numbers based on [trac timeline](https://core.trac.wordpress.org/timeline?from=12%2F06%2F16&daysback=6&authors=&ticket=on&changeset=on&sfp_email=&sfph_mail=&update=Update)
for the period above. The following is a summary of commits, organized by component.

## Code Changes

### Administration

 * AccessibilityAccessibility Accessibility (commonly shortened to a11y) refers 
   to the design of products, devices, services, or environments for people with
   disabilities. The concept of accessible design ensures both “direct access” (
   i.e. unassisted) and “indirect access” meaning compatibility with a person’s 
   assistive technology (for example, computer screen readers). (https://en.wikipedia.
   org/wiki/Accessibility): Remove inappropriate content from the Themes screen 
   heading. [[39528]](https://core.trac.wordpress.org/changeset/39528) [#26601](https://core.trac.wordpress.org/ticket/26601)
 * Accessibility: Remove inappropriate content from the Add Themes screen heading.
   [[39527]](https://core.trac.wordpress.org/changeset/39527) [#26601](https://core.trac.wordpress.org/ticket/26601)
 * Accessibility: Remove inappropriate content from the Media Library screens headings.
   [[39526]](https://core.trac.wordpress.org/changeset/39526) [#26601](https://core.trac.wordpress.org/ticket/26601)

### Build/Test Tools

 * Correctly set up the current screen during list table tests so that they don’t
   fail when run individually. [[39481]](https://core.trac.wordpress.org/changeset/39481)
   [#38761](https://core.trac.wordpress.org/ticket/38761)
 * Specify exact node version in package.jsonJSON JSON, or JavaScript Object Notation,
   is a minimal, readable format for structuring data. It is used primarily to transmit
   data between a server and web application, as an alternative to XML.. [[39480]](https://core.trac.wordpress.org/changeset/39480),
   [[39478]](https://core.trac.wordpress.org/changeset/39478) #35105, [#38657](https://core.trac.wordpress.org/ticket/38657)
 * Remove PHPPHP The web scripting language in which WordPress is primarily architected.
   WordPress requires PHP 7.4 or higher 7.1 from allowed failures [[39424-39425]](https://core.trac.wordpress.org/log/?revs=39424-39425)
   [#37625](https://core.trac.wordpress.org/ticket/37625)

### Bundled Theme

 * Default Themes: Update version numbers and readme files for 4.7 release [[39496]](https://core.trac.wordpress.org/changeset/39496)
   [#38858](https://core.trac.wordpress.org/ticket/38858)
 * Twenty Seventeen: Fix CSSCSS Cascading Style Sheets. specificity problem with
   CSS feature query for `object-fit` [[39495]](https://core.trac.wordpress.org/changeset/39495)
   [#39073](https://core.trac.wordpress.org/ticket/39073)
 * Twenty Seventeen: Improve display of video headerHeader The header of your site
   is typically the first thing people will experience. The masthead or header art
   located across the top of your page is part of the look and feel of your website.
   It can influence a visitor’s opinion about your content and you/ your organization’s
   brand. It may also look different on different screen sizes. and header image
   in modern browsers [[39485]](https://core.trac.wordpress.org/changeset/39485),
   [[39483]](https://core.trac.wordpress.org/changeset/39483) #39035
 * Twenty Seventeen: Add specific font stack for Thai language [[39484]](https://core.trac.wordpress.org/changeset/39484),
   [[39482]](https://core.trac.wordpress.org/changeset/39482) #38937
 * Twenty Seventeen: Improve ARIA for the nav menu. [[39451-39452]](https://core.trac.wordpress.org/log/?revs=39451-39452)
   [#39029](https://core.trac.wordpress.org/ticket/39029), [#39026](https://core.trac.wordpress.org/ticket/39026)
 * Twenty Seventeen: Ensure header text color updates in CustomizerCustomizer Tool
   built into WordPress core that hooks into most modern themes. You can use it 
   to preview and modify many of your site’s appearance settings. preview when cleared
   [[39447-39448]](https://core.trac.wordpress.org/log/?revs=39447-39448) [#38993](https://core.trac.wordpress.org/ticket/38993)
 * Twenty Seventeen: Fix broken menu toggle in Customizer after menu items are added
   [[39419]](https://core.trac.wordpress.org/changeset/39419), [[39423]](https://core.trac.wordpress.org/changeset/39423)
   [#38992](https://core.trac.wordpress.org/ticket/38992)
 * Twenty Seventeen: Fix style issues with gallery image links [[39418]](https://core.trac.wordpress.org/changeset/39418),
   [[39422]](https://core.trac.wordpress.org/changeset/39422) [#38969](https://core.trac.wordpress.org/ticket/38969)
 * Twenty Seventeen: Hide front section panels on page load of Customizer. [[39417]](https://core.trac.wordpress.org/changeset/39417),
   [[39421]](https://core.trac.wordpress.org/changeset/39421) [#38951](https://core.trac.wordpress.org/ticket/38951)
 * Twenty Seventeen: Add `.has-header-video` styles for custom color schemes. [[39416]](https://core.trac.wordpress.org/changeset/39416)
   [#38995](https://core.trac.wordpress.org/ticket/38995)
 * Twenty Seventeen: Better handling of custom headers when no image is set. [[39413-39414]](https://core.trac.wordpress.org/log/?revs=39413-39414)
   [#38995](https://core.trac.wordpress.org/ticket/38995)
 * Twenty Seventeen: Make spacing on pages without comments consistent [[39404-39405]](https://core.trac.wordpress.org/log/?revs=39404-39405)
   [#38972](https://core.trac.wordpress.org/ticket/38972)
 * Twenty Seventeen: Make sure header text color is applied when color schemes are
   active. [[39397-39398]](https://core.trac.wordpress.org/log/?revs=39397-39398)
   [#38980](https://core.trac.wordpress.org/ticket/38980)
 * Twenty Seventeen: Make fixed navigation apply at correct height on front page,
   without header video or image [[39394]](https://core.trac.wordpress.org/changeset/39394),
   [[39392]](https://core.trac.wordpress.org/changeset/39392) #38927
 * Twenty Seventeen: Provide a background color fallback for non-webkit browsers
   on input styles [[39388]](https://core.trac.wordpress.org/changeset/39388) [#38939](https://core.trac.wordpress.org/ticket/38939)
 * Twenty Seventeen: Allow child themes to easily extend custom color patterns [[39386]](https://core.trac.wordpress.org/changeset/39386)
   [#38949](https://core.trac.wordpress.org/ticket/38949)
 * Twenty Seventeen: Make screen reader text on scroll arrow more meaningful [[39384]](https://core.trac.wordpress.org/changeset/39384)
   [#38970](https://core.trac.wordpress.org/ticket/38970)
 * Twenty Seventeen: Keep header videos from extending past footer. [[39380-39381]](https://core.trac.wordpress.org/log/?revs=39380-39381)
   [#38950](https://core.trac.wordpress.org/ticket/38950)

### Comments

 * Merge a similar string between comments.php, XML-RPC and the REST APIREST API
   The REST API is an acronym for the RESTful Application Program Interface (API)
   that uses HTTP requests to GET, PUT, POST and DELETE data. It is how the front
   end of an application (think “phone app” or “website”) can communicate with the
   data store (think “database” or “file system”) [https://developer.wordpress.org/rest-api/](https://developer.wordpress.org/rest-api/)
   comments controller. [[39508]](https://core.trac.wordpress.org/changeset/39508)
   [#39013](https://core.trac.wordpress.org/ticket/39013)

### Customize

 * Prevent infinite full refresh from occurring when selective refresh falls back
   for a nav menu that has items excluded from rendering via filtering. [[39510-39511]](https://core.trac.wordpress.org/log/?revs=39510-39511)
   [#38612](https://core.trac.wordpress.org/ticket/38612)
 * Defer populating `post_name` for `auto-draft` posts in customized state until
   posts are published. [[39506-39507]](https://core.trac.wordpress.org/log/?revs=39506-39507)
   [#39078](https://core.trac.wordpress.org/ticket/39078)
 * Ensure `changeset_uuid` query param is removed from the `customize.php` window’s
   location once a changeset has been published (committed) with starter content.
   [[39504-39505]](https://core.trac.wordpress.org/log/?revs=39504-39505) [#39081](https://core.trac.wordpress.org/ticket/39081)
 * Prevent posts/pages imported via starter content from being dropped when adding
   post/page stubs via nav menus and the dropdown-pages control. [[39502-39503]](https://core.trac.wordpress.org/log/?revs=39502-39503)
   [#38114](https://core.trac.wordpress.org/ticket/38114), [#34923](https://core.trac.wordpress.org/ticket/34923),
   [#39071](https://core.trac.wordpress.org/ticket/39071)
 * Ensure `textarea` for Custom CSS displays as code (in LTR) when an RTL language
   is active. [[39499-39500]](https://core.trac.wordpress.org/log/?revs=39499-39500)
   [#35395](https://core.trac.wordpress.org/ticket/35395), [#39085](https://core.trac.wordpress.org/ticket/39085)
 * Ensure a `custom_css` post insertion gets an initial post revision. [[39479]](https://core.trac.wordpress.org/changeset/39479),
   [[39477]](https://core.trac.wordpress.org/changeset/39477) [#30854](https://core.trac.wordpress.org/ticket/30854),
   [#38672](https://core.trac.wordpress.org/ticket/38672), [#35395](https://core.trac.wordpress.org/ticket/35395),
   [#39032](https://core.trac.wordpress.org/ticket/39032)
 * Custom CSS: Change the help link to something better for users. [[39467]](https://core.trac.wordpress.org/changeset/39467),
   [[39466]](https://core.trac.wordpress.org/changeset/39466) [#39015](https://core.trac.wordpress.org/ticket/39015)
 * Fix posts limit query arg for `WP_Query` from incorrect `number` to `posts_per_page`.
   [[39434-39435]](https://core.trac.wordpress.org/log/?revs=39434-39435) [#39022](https://core.trac.wordpress.org/ticket/39022)
 * Reuse existing non-auto-draft posts and existing auto-draft posts in the customized
   state with matching slugs when applying starter content. [[39411]](https://core.trac.wordpress.org/changeset/39411)
   [#38114](https://core.trac.wordpress.org/ticket/38114), [#38928](https://core.trac.wordpress.org/ticket/38928)
 * Reject a changeset update when a non-future date is provided and also ensure 
   that a published changeset always gets set to the current date/time. [[39409-39410]](https://core.trac.wordpress.org/log/?revs=39409-39410)
   [#30937](https://core.trac.wordpress.org/ticket/30937), [#38943](https://core.trac.wordpress.org/ticket/38943)
 * Fix handling of the nav menu item labels (titles) that match defaults (original
   titles) and fix the display of item type labels. [[39395]](https://core.trac.wordpress.org/changeset/39395),
   [[39393]](https://core.trac.wordpress.org/changeset/39393) [#38015](https://core.trac.wordpress.org/ticket/38015),
   [#38955](https://core.trac.wordpress.org/ticket/38955)

### Feeds

 * Load: Re-add `class-wp-upgrader-skins.php`, `class-feed.php`, `locale.php`, and`
   session.php`. [[39459]](https://core.trac.wordpress.org/changeset/39459) [#39027](https://core.trac.wordpress.org/ticket/39027)
 * Load: No-op `locale.php` [[39456]](https://core.trac.wordpress.org/changeset/39456)
   [#39027](https://core.trac.wordpress.org/ticket/39027)
 * Load: Re-add `locale.php`. [[39455]](https://core.trac.wordpress.org/changeset/39455)
   [#37827](https://core.trac.wordpress.org/ticket/37827), [#39027](https://core.trac.wordpress.org/ticket/39027)
 * Load: Re-add `session.php`. [[39453]](https://core.trac.wordpress.org/changeset/39453)
   [#36335](https://core.trac.wordpress.org/ticket/36335), [#39027](https://core.trac.wordpress.org/ticket/39027)
 * Load: Re-add `class-wp-upgrader-skins.php`. [[39450]](https://core.trac.wordpress.org/changeset/39450)
   [#36335](https://core.trac.wordpress.org/ticket/36335), [#39027](https://core.trac.wordpress.org/ticket/39027)
 * Load: Re-add `class-feed.php`. [[39449]](https://core.trac.wordpress.org/changeset/39449)
   [#36335](https://core.trac.wordpress.org/ticket/36335), [#39027](https://core.trac.wordpress.org/ticket/39027)

### General

 * Remove 4.7 cruft from `$_old_files`. [[39520-39521]](https://core.trac.wordpress.org/log/?revs=39520-39521)
   [#39113](https://core.trac.wordpress.org/ticket/39113)
 * Readme: Update recommendations to PHP 7, and to include HTTPSHTTPS HTTPS is an
   acronym for Hyper Text Transfer Protocol Secure. HTTPS is the secure version 
   of HTTP, the protocol over which data is sent between your browser and the website
   that you are connected to. The 'S' at the end of HTTPS stands for 'Secure'. It
   means all communications between your browser and the website are encrypted. 
   This is especially helpful for protecting sensitive data like banking information..
   [[39428-39429]](https://core.trac.wordpress.org/log/?revs=39428-39429) [#39024](https://core.trac.wordpress.org/ticket/39024)

### Help/About

 * About page: Update video and REST API reference URLs. [[39522-39523]](https://core.trac.wordpress.org/log/?revs=39522-39523)
   [#38616](https://core.trac.wordpress.org/ticket/38616)
 * About page: Bump image versions because CDN caching. [[39517-39518]](https://core.trac.wordpress.org/log/?revs=39517-39518)
   [#38616](https://core.trac.wordpress.org/ticket/38616)
 * About page: Resposive images and CDN media URLs. [[39514-39515]](https://core.trac.wordpress.org/log/?revs=39514-39515)
   [#38616](https://core.trac.wordpress.org/ticket/38616)
 * About page: Imagery and beautification. [[39512-39513]](https://core.trac.wordpress.org/log/?revs=39512-39513)
   [#38616](https://core.trac.wordpress.org/ticket/38616)
 * About page: Add strings for 4.7 and make available for translationtranslation
   The process (or result) of changing text, words, and display formatting to support
   another language. Also see [localization](https://make.wordpress.org/core/tag/4-7/?output_format=md#l10n),
   [internationalization](https://make.wordpress.org/core/tag/4-7/?output_format=md#i18n)..
   [[39445]](https://core.trac.wordpress.org/changeset/39445), [[39420]](https://core.trac.wordpress.org/changeset/39420)
   [#38616](https://core.trac.wordpress.org/ticket/38616)
 * About page: Remove link tags from inside translatable strings. [[39443]](https://core.trac.wordpress.org/changeset/39443)
   [#38616](https://core.trac.wordpress.org/ticket/38616)
 * About page: Remove emoji from translatable string. [[39442]](https://core.trac.wordpress.org/changeset/39442)
   [#38616](https://core.trac.wordpress.org/ticket/38616)
 * About page: Don’t wrap URLs with “ tags. [[39433]](https://core.trac.wordpress.org/changeset/39433)
   [#38616](https://core.trac.wordpress.org/ticket/38616)
 * About page: Restore the double `%` in a `printf()` call which has been removed
   in [[39420]](https://core.trac.wordpress.org/changeset/39420). [[39432]](https://core.trac.wordpress.org/changeset/39432)
   [#38616](https://core.trac.wordpress.org/ticket/38616)

### Media

 * Accessibility: Improve keyboard accessibility avoiding confusing tab stops in
   the Media views. [[39529]](https://core.trac.wordpress.org/changeset/39529) [#30599](https://core.trac.wordpress.org/ticket/30599)
 * Docs: Add inline documentation for `image-edit.js`. [[39493]](https://core.trac.wordpress.org/changeset/39493)
   [#38748](https://core.trac.wordpress.org/ticket/38748)
 * Fix regressionregression A software bug that breaks or degrades something that
   previously worked. Regressions are often treated as critical bugs or [blockers](https://make.wordpress.org/core/tag/4-7/?output_format=md#blocker).
   Recent regressions may be given higher priorities. A "3.6 regression" would be
   a bug in 3.6 that worked as intended in 3.5. with display of small images in 
   media library. [[39399]](https://core.trac.wordpress.org/changeset/39399), [[39396]](https://core.trac.wordpress.org/changeset/39396)
   [#38965](https://core.trac.wordpress.org/ticket/38965)
 * Docs: Document the usage of the global `$wpdb` in `_filter_query_attachment_filenames()`.
   [[39390]](https://core.trac.wordpress.org/changeset/39390) [#38973](https://core.trac.wordpress.org/ticket/38973)

### Misc

 * Tag 4.7 [[39525]](https://core.trac.wordpress.org/changeset/39525) #
 * WordPress 4.7 “Vaughan”. [[39524]](https://core.trac.wordpress.org/changeset/39524)#
 * Post-RC3 bump. [[39519]](https://core.trac.wordpress.org/changeset/39519) #
 * WordPress 4.7 RC3. [[39516]](https://core.trac.wordpress.org/changeset/39516)#
 * Post-RC2 bump. [[39474]](https://core.trac.wordpress.org/changeset/39474) #
 * WordPress 4.7 RC2. [[39473]](https://core.trac.wordpress.org/changeset/39473)#
 * Twenty Seventeen: Add `.has-header-video` styles for custom color schemes. [[39415]](https://core.trac.wordpress.org/changeset/39415)

### Options, MetaMeta Meta is a term that refers to the inside workings of a group. For us, this is the team that works on internal WordPress sites like WordCamp Central and Make WordPress. APIs

 * REST API: Register the admin_email setting in single site only. [[39470-39472]](https://core.trac.wordpress.org/log/?revs=39470-39472)
   [#38990](https://core.trac.wordpress.org/ticket/38990)
 * REST API: Site URLURL A specific web address of a website or web page on the 
   Internet, such as a website’s URL www.wordpress.org setting should not be present
   on multisitemultisite Used to describe a WordPress installation with a network
   of multiple blogs, grouped by sites. This installation type has shared users 
   tables, and creates separate database tables for each blog (wp_posts becomes 
   wp_0_posts). See also **network**, **blog**, **site** installations. [[39468]](https://core.trac.wordpress.org/changeset/39468)
   [#39005](https://core.trac.wordpress.org/ticket/39005)
 * REST API: Correct the `admin_email` setting description for single site installs.
   [[39406]](https://core.trac.wordpress.org/changeset/39406) [#38990](https://core.trac.wordpress.org/ticket/38990)
 * Multisite: Display different descriptions for multisite or single site installations.
   [[39407]](https://core.trac.wordpress.org/changeset/39407) [#38990](https://core.trac.wordpress.org/ticket/38990)
 * Options: Pass the `$passed_default` parameter to the `'default_option_{$option}`
   filterFilter Filters are one of the two types of Hooks [https://codex.wordpress.org/Plugin_API/Hooks](https://codex.wordpress.org/Plugin_API/Hooks).
   They provide a way for functions to modify data of other functions. They are 
   the counterpart to Actions. Unlike Actions, filters are meant to work in an isolated
   manner, and should never have side effects such as affecting global variables
   and output. in `add_option()`. [[39382]](https://core.trac.wordpress.org/changeset/39382)
   [#38176](https://core.trac.wordpress.org/ticket/38176), [#38930](https://core.trac.wordpress.org/ticket/38930)

### Plugins

 * Add a `current_priority()` method to `WP_Hook`. [[39430-39431]](https://core.trac.wordpress.org/log/?revs=39430-39431)
   [#39007](https://core.trac.wordpress.org/ticket/39007)

### REST API

 * Comments: Merge similar strings between comments.php and the REST API comments
   controller. [[39490-39491]](https://core.trac.wordpress.org/log/?revs=39490-39491)
   [#39014](https://core.trac.wordpress.org/ticket/39014)
 * Merge similar date strings in the revisionsRevisions The WordPress revisions 
   system stores a record of each saved draft or published update. The revision 
   system allows you to see what changes were made in each revision by dragging 
   a slider (or using the Next/Previous buttons). The display indicates what has
   changed in each revision. and comments controllers. [[39488-39489]](https://core.trac.wordpress.org/log/?revs=39488-39489)
   [#39016](https://core.trac.wordpress.org/ticket/39016)
 * Treat any falsy value as `false` in ‘rest_allow_anonymous_comments’. [[39487]](https://core.trac.wordpress.org/changeset/39487)
   [#39010](https://core.trac.wordpress.org/ticket/39010)
 * Docs: Add missing REST API-related args to `register_post_type()` and `register_taxonomy()`.
   [[39462-39463]](https://core.trac.wordpress.org/log/?revs=39462-39463) [#39023](https://core.trac.wordpress.org/ticket/39023)
 * Merge similar strings in a comments endpoint parameter description. [[39457]](https://core.trac.wordpress.org/changeset/39457)
   [#39036](https://core.trac.wordpress.org/ticket/39036)
 * Fix bugbug A bug is an error or unexpected result. Performance improvements, 
   code optimization, and are considered enhancements, not defects. After feature
   freeze, only bugs are dealt with, with regressions (adverse changes from the 
   previous version) being the highest priority. where comment author and author
   email could be an empty string when creating a comment. [[39446]](https://core.trac.wordpress.org/changeset/39446),
   [[39444]](https://core.trac.wordpress.org/changeset/39444) [#38971](https://core.trac.wordpress.org/ticket/38971)
 * Fix handling of some orderby parameters for the Posts controller. [[39440-39441]](https://core.trac.wordpress.org/log/?revs=39440-39441)
   [#38971](https://core.trac.wordpress.org/ticket/38971)
 * Disable `DELETE` requests for users in multisite. [[39438-39439]](https://core.trac.wordpress.org/log/?revs=39438-39439)
   [#38962](https://core.trac.wordpress.org/ticket/38962)
 * Return a `WP_Error` if `meta` property is not an array. [[39436-39437]](https://core.trac.wordpress.org/log/?revs=39436-39437)
   [#38989](https://core.trac.wordpress.org/ticket/38989)
 * Add test for creating a comment with an invalidinvalid A resolution on the bug
   tracker (and generally common in software development, sometimes also _notabug_)
   that indicates the ticket is not a bug, is a support request, or is generally
   invalid. post ID. [[39408]](https://core.trac.wordpress.org/changeset/39408) 
   [#38991](https://core.trac.wordpress.org/ticket/38991)
 * Fix incorrect uses of `rest_sanitize_value_from_schema()`. [[39400-39401]](https://core.trac.wordpress.org/log/?revs=39400-39401)
   [#38984](https://core.trac.wordpress.org/ticket/38984)

### Role/Capabilitycapability A **capability** is permission to perform one or more types of task. Checking if a user has a capability is performed by the `current_user_can` function. Each user of a WordPress site might have some permissions but not others, depending on their role. For example, users who have the Author role usually have permission to edit their own posts (the “edit_posts” capability), but not permission to edit other users’ posts (the “edit_others_posts” capability).

 * Don’t assign the `delete_site` capability to anyone on single site installs. 
   [[39494]](https://core.trac.wordpress.org/changeset/39494) [#38326](https://core.trac.wordpress.org/ticket/38326)
 * Multisite: Replace `is_super_admin()` with `manage_network` for adminadmin (and
   super admin) bar permissions. [[39492]](https://core.trac.wordpress.org/changeset/39492)
   [#39064](https://core.trac.wordpress.org/ticket/39064), [#37616](https://core.trac.wordpress.org/ticket/37616)

### TaxonomyTaxonomy A taxonomy is a way to group things together. In WordPress, some common taxonomies are category, link, tag, or post format. 󠀁[https://codex.wordpress.org/Taxonomies#Default_Taxonomies](https://codex.wordpress.org/Taxonomies#Default_Taxonomies)󠁿.

 * Docs: Update an `@since` as there will not be a 4.6.2 before 4.7. [[39475-39476]](https://core.trac.wordpress.org/log/?revs=39475-39476)
   [#37291](https://core.trac.wordpress.org/ticket/37291)
 * REST API: Capability check for editing a single term should use the singular 
   form. [[39464]](https://core.trac.wordpress.org/changeset/39464) [#35614](https://core.trac.wordpress.org/ticket/35614),
   [#39012](https://core.trac.wordpress.org/ticket/39012)
 * REST API: Use the correct error message when editing a single term. [[39460-39461]](https://core.trac.wordpress.org/log/?revs=39460-39461)
   [#39017](https://core.trac.wordpress.org/ticket/39017)
 * REST API: Fix incorrect capability check on term create. [[39402-39403]](https://core.trac.wordpress.org/log/?revs=39402-39403)
   [#35614](https://core.trac.wordpress.org/ticket/35614), [#38958](https://core.trac.wordpress.org/ticket/38958)
 * Performance: Revert [[38677]](https://core.trac.wordpress.org/changeset/38677)
   from the 4.7 branchbranch A directory in Subversion. WordPress uses branches 
   to store the latest development code for each major release (3.9, 4.0, etc.).
   Branches are then updated with code for any minor releases of that branch. Sometimes,
   a major version of WordPress and its minor versions are collectively referred
   to as a "branch", such as "the 4.0 branch".. This avoids fatal errors caused 
   with recursive calling of term functions within the `get_terms` filter. [[39454]](https://core.trac.wordpress.org/changeset/39454)
   [#21760](https://core.trac.wordpress.org/ticket/21760)

### Themes

 * Reuse existing non-auto-draft posts and existing auto-draft posts in the customized
   state with matching slugs when applying starter content. [[39412]](https://core.trac.wordpress.org/changeset/39412)
   [#38114](https://core.trac.wordpress.org/ticket/38114), [#38928](https://core.trac.wordpress.org/ticket/38928)

### TinyMCE

 * Fix the styling of notices generated by the editor UIUI User interface. [[39501]](https://core.trac.wordpress.org/changeset/39501)
   [#38917](https://core.trac.wordpress.org/ticket/38917)

### Users

 * Clarify the return value of `get_current_user_id()` for non-logged-in users. 
   [[39486]](https://core.trac.wordpress.org/changeset/39486) [#39051](https://core.trac.wordpress.org/ticket/39051)
 * REST API: Require the reassign parameter when deleting users. [[39426-39427]](https://core.trac.wordpress.org/log/?revs=39426-39427)
   [#39000](https://core.trac.wordpress.org/ticket/39000)

Thanks to [@andizer](https://profiles.wordpress.org/andizer/), [@mor10](https://profiles.wordpress.org/mor10/),
[@adamsilverstein](https://profiles.wordpress.org/adamsilverstein/), [@afercia](https://profiles.wordpress.org/afercia/),
[@azaozz](https://profiles.wordpress.org/azaozz/), [@boonebgorges](https://profiles.wordpress.org/boonebgorges/),
[@celloexpressions](https://profiles.wordpress.org/celloexpressions/), [@ChopinBach](https://profiles.wordpress.org/ChopinBach/),
[@clorith](https://profiles.wordpress.org/clorith/), [@coffee2code](https://profiles.wordpress.org/coffee2code/),
[@davidakennedy](https://profiles.wordpress.org/davidakennedy/), [@dd32](https://profiles.wordpress.org/dd32/),
[@desrosj](https://profiles.wordpress.org/desrosj/), [@dlh](https://profiles.wordpress.org/dlh/),
[@flixos90](https://profiles.wordpress.org/flixos90/), [@georgestephanis](https://profiles.wordpress.org/georgestephanis/),
[@helen](https://profiles.wordpress.org/helen/), [@helen](https://profiles.wordpress.org/helen/),
[@hnle](https://profiles.wordpress.org/hnle/), [@iaaxpage](https://profiles.wordpress.org/iaaxpage/),
[@imnok](https://profiles.wordpress.org/imnok/), [@jbpaul17](https://profiles.wordpress.org/jbpaul17/),
[@jeremyfelt](https://profiles.wordpress.org/jeremyfelt/), [@jnylen0](https://profiles.wordpress.org/jnylen0/),
[@joedolson](https://profiles.wordpress.org/joedolson/), [@joehoyle](https://profiles.wordpress.org/joehoyle/),
[@joemcgill](https://profiles.wordpress.org/joemcgill/), [@johnbillion](https://profiles.wordpress.org/johnbillion/),
[@jorbin](https://profiles.wordpress.org/jorbin/), [@kadamwhite](https://profiles.wordpress.org/kadamwhite/),
[@karmatosed](https://profiles.wordpress.org/karmatosed/), [@ketuchetan](https://profiles.wordpress.org/ketuchetan/),
[@laurelfulford](https://profiles.wordpress.org/laurelfulford/), [@littlebigthing](https://profiles.wordpress.org/littlebigthing/),
[@lucasstark](https://profiles.wordpress.org/lucasstark/), [@melchoyce](https://profiles.wordpress.org/melchoyce/),
[@michaelarestad](https://profiles.wordpress.org/michaelarestad/), [@mikeschroder](https://profiles.wordpress.org/mikeschroder/),
[@mt8.biz](https://profiles.wordpress.org/mt8.biz/), [@nacin](https://profiles.wordpress.org/nacin/),
[@netweb](https://profiles.wordpress.org/netweb/), [@ocean90](https://profiles.wordpress.org/ocean90/),
[@ovenal](https://profiles.wordpress.org/ovenal/), [@pento](https://profiles.wordpress.org/pento/),
[@peterwilsoncc](https://profiles.wordpress.org/peterwilsoncc/), [@presskopp](https://profiles.wordpress.org/presskopp/),
[@rachelbaker](https://profiles.wordpress.org/rachelbaker/), [@rahulsprajapati](https://profiles.wordpress.org/rahulsprajapati/),
[@ramiabraham](https://profiles.wordpress.org/ramiabraham/), [@ramiy](https://profiles.wordpress.org/ramiy/),
[@rensw90](https://profiles.wordpress.org/rensw90/), [@rianrietveld](https://profiles.wordpress.org/rianrietveld/),
[@rmccue](https://profiles.wordpress.org/rmccue/), [@samuelsidler](https://profiles.wordpress.org/samuelsidler/),
[@sayedwp](https://profiles.wordpress.org/sayedwp/), [@SergeyBiryukov](https://profiles.wordpress.org/SergeyBiryukov/),
[@sstoqnov](https://profiles.wordpress.org/sstoqnov/), [@The](https://profiles.wordpress.org/The/)
PHP tea, [@timmydcrawford](https://profiles.wordpress.org/timmydcrawford/), [@utkarshpatel](https://profiles.wordpress.org/utkarshpatel/),
and [@westonruter](https://profiles.wordpress.org/westonruter/) for their contributions!

[#4-7](https://make.wordpress.org/core/tag/4-7/), [#week-in-core](https://make.wordpress.org/core/tag/week-in-core/)

 [  ](https://profiles.wordpress.org/jorbin/) [Aaron Jorbin](https://profiles.wordpress.org/jorbin/)
7:32 pm _on_ December 8, 2016     
Tags: 4.7, [retrospective ( 23 )](https://make.wordpress.org/core/tag/retrospective/)

# 󠀁[4.7 Retrospective](https://make.wordpress.org/core/2016/12/08/4-7-retrospective/)󠁿

A retrospective meeting on the WordPress 4.7  release will be held during the week
of December 19th. In order to properly prepare for that retrospective and make the
time as productive as possible, I would like to encourage everyone to comment below
with things they would like to bring up. To help, here are three good questions 
to ask yourself:

 * What should WordPress start doing as a part of the development process?
 * What should WordPress stop doing as a part of the development process?
 * What should WordPress continue doing as a part of the development process?

Please remember when commenting to keep the [discussion professional](https://make.wordpress.org/core/handbook/best-practices/post-comment-guidelines/#comments)
and focused on ways the process of creating WordPress is either already working 
great or can be improved.

[#4-7](https://make.wordpress.org/core/tag/4-7/), [#retrospective](https://make.wordpress.org/core/tag/retrospective/)

 [  ](https://profiles.wordpress.org/jeffpaul/) [Jeffrey Paul](https://profiles.wordpress.org/jeffpaul/)
7:16 pm _on_ December 8, 2016     
Tags: 4.7, [core ( 756 )](https://make.wordpress.org/core/tag/core/),
[dev chat ( 932 )](https://make.wordpress.org/core/tag/dev-chat/), [summary ( 981 )](https://make.wordpress.org/core/tag/summary/)

# 󠀁[Dev Chat Summary: December 7th (4.7 launch week)](https://make.wordpress.org/core/2016/12/08/dev-chat-summary-december-7th-4-7-launch-week/)󠁿

This post summarizes the dev chat meeting from December 7th ([Slack archive](https://wordpress.slack.com/archives/core/p1481144415001410)).

### Reminders

 * [Schedule](https://make.wordpress.org/core/4-7/): Tuesday, December 6th was launch
   day for [WordPress 4.7 “Vaughan”](https://wordpress.org/news/2016/12/vaughan/).
    - Minor releases will continue to follow the philosophy of trying to fix more
      bugs than we create.
 * [Bug Scrubs](https://make.wordpress.org/core/2016/08/25/bug-scrubs-for-4-7/):
   Two scheduled for this week, a general one on Thursday and a Customize one on
   Friday. [Details for these scrubs have been posted on Make/Core](https://make.wordpress.org/core/2016/12/07/bug-scrubs-for-week-of-december-5th/).

### 4.7 Issues Reported

 * Caches not always clearing, not something we can fix, but seems to be the most
   common problem
 * Couple of reports around fatals related to WP_Hook, one traced to APC the cause
   of the other is still unknown
    - [#39132](https://core.trac.wordpress.org/ticket/39132): WP 4.7, object-cache.
      php breaks the site if APC is not enabled in php
 * We’re unable to pinpoint why lots of folks who meet the requirements still don’t
   have PDF thumbnails
    - Are there more specific requirements beyond “you need Imagik, ImageMagick 
      and Ghostscript” perhaps specific versions?
    - Many problems so far there have been outright lack of Ghostscript installed,
      so having the gs info when reporting bugs would be great
    - Discussion continued on capturing ghostscript, Imagick and ImageMagick versions
      details via a plugin (e.g., a hidden wp-admin/debug.php, https://wordpress.
      org/plugins/health-check/)
 * Several reports of `rest_cannot_edit` and similar things from the users endpoints
 * Reports of people getting denied access to the adminadmin (and super admin) area,
   issue appears to all be caching plugins not being cleared properly
 * [#39104](https://core.trac.wordpress.org/ticket/39104): Customize: starter content
   home menu item needs to be a link, not a page
    - This is concerning for back-compatability and needs to have a coordinated 
      Twenty Seventeen update. The usability implications are somewhat concerning
      for new sites being created with 4.7.0.
 * [#39146](https://core.trac.wordpress.org/ticket/39146): plugin.php gives error
   on do_all_hook() function
 * [#39150](https://core.trac.wordpress.org/ticket/39150): Empty JSONJSON JSON, 
   or JavaScript Object Notation, is a minimal, readable format for structuring 
   data. It is used primarily to transmit data between a server and web application,
   as an alternative to XML. Payload Causes rest_invalid_json
 * Thanks to [@macmanx](https://profiles.wordpress.org/macmanx/) and [@clorith](https://profiles.wordpress.org/clorith/)
   and all of the people volunteering in the forums! Would be great for everyone
   to help answer questions in the forums, its a great way to understand the problems
   that users are having.
    - https://wordpress.org/support/view/no-replies/ is a great place to start
    - [Support handbook](https://make.wordpress.org/support/handbook/) as reference
      for those helping out

### 4.7.1 Planning

 * Discussion on targeting 4.7.1 before the holidays in December 2016 or aiming 
   for January 2017
    - Timing depends heavily on the severityseverity The seriousness of the ticket
      in the eyes of the reporter. Generally, severity is a judgment of how bad 
      a bug is, while **priority** is its relationship to other bugs. and type of
      issue(s), and not the amount of issues
    - Target is to get close to a 4.7.1 RCrelease candidate One of the final stages
      in the version release cycle, this version signals the potential to be a final
      release to the public. Also see [alpha (beta)](https://make.wordpress.org/core/tag/4-7/?output_format=md#alpha-beta).
      by the end of the year
    - Two bugbug A bug is an error or unexpected result. Performance improvements,
      code optimization, and are considered enhancements, not defects. After feature
      freeze, only bugs are dealt with, with regressions (adverse changes from the
      previous version) being the highest priority. scrubs happening this week (
      see the Bug Scrubs reference in Reminders section above) that will give us
      an idea of what’s realistically close to being ready for a December release.
 * No immediate Release LeadRelease Lead The community member ultimately responsible
   for the Release. for 4.7.1
 * [Handbook reference for releasing minor versions](https://make.wordpress.org/core/handbook/about/release-cycle/releasing-minor-versions/)

### 4.7 Retrospective

 * We failed at getting the field guideField guide The field guide is a type of 
   blogpost published on Make/Core during the release candidate phase of the [WordPress release cycle](https://make.wordpress.org/core/handbook/about/release-cycle/).
   The field guide generally lists all the dev notes published during the beta cycle.
   This guide is linked in the about page of the corresponding version of WordPress,
   in the release post and in the HelpHub version page. and email to pluginPlugin
   A plugin is a piece of software containing a group of functions that can be added
   to a WordPress website. They can extend functionality or add new features to 
   your WordPress websites. WordPress plugins are written in the PHP programming
   language and integrate seamlessly with WordPress. These can be free in the WordPress.
   org Plugin Directory [https://wordpress.org/plugins/](https://wordpress.org/plugins/)
   or can be cost-based plugin from a third-party. dev out early though. We have
   aimed to have that out around betaBeta A pre-release of software that is given
   out to a large group of users to trial under real conditions. Beta versions have
   gone through alpha testing in-house and are generally fairly close in look, feel
   and function to the final product; however, design changes often occur as part
   of the process. 2 and usually end up getting it out around RC the last few releases.
 * We will post a general request for feedback on Make/CoreCore Core is the set 
   of software required to run WordPress. The Core Development Team builds WordPress.
   to capture Retrospective input
 * We will review the feedback and then present it for discussion during the dev
   chat on December 21st and agree on action items on how we can improve in the 
   future

[#4-7](https://make.wordpress.org/core/tag/4-7/), [#core](https://make.wordpress.org/core/tag/core/),
[#dev-chat](https://make.wordpress.org/core/tag/dev-chat/), [#summary](https://make.wordpress.org/core/tag/summary/)

 [  ](https://profiles.wordpress.org/jorbin/) [Aaron Jorbin](https://profiles.wordpress.org/jorbin/)
9:05 pm _on_ December 5, 2016     
Tags: 4.7, [dev-notes ( 648 )](https://make.wordpress.org/core/tag/dev-notes/),
[field guide ( 35 )](https://make.wordpress.org/core/tag/field-guide/)   

# 󠀁[WordPress 4.7 Field Guide](https://make.wordpress.org/core/2016/12/05/wordpress-4-7-field-guide/)󠁿

WordPress 4.7 is shaping up to be the best WordPress yet!  Users will receive new
and refined features that make it easier to “Make your site, YOUR site”, and developers
will be able to take advantage of 173 enhancements and feature requests added.  
Let’s look at the many improvements coming in 4.7…

### RESTing, RESTing: 1, 2, 3

The foundation for RESTful APIs has been in coreCore Core is the set of software
required to run WordPress. The Core Development Team builds WordPress. since 4.4,
and 4.7 sees the addition of Content Endpoints after a [healthy discussion](https://make.wordpress.org/core/2016/10/13/merge-proposal-discussion-rest-api-content-endpoints/).
We’ve defined [four success metrics](https://make.wordpress.org/core/2016/10/19/wordpress-rest-api-success-metrics/)
as part of the merge discussion and you can help by building themes and plugins 
on top of the APIAPI An API or Application Programming Interface is a software intermediary
that allows programs to interact with each other and share data in limited, clearly
defined ways., using the API in custom development projects, and utilizing the API
for a feature project, core features, or patches. So, dive in, start playing around,
and let us know what you build!

https://make.wordpress.org/core/2016/10/08/rest-api-merge-proposal-part-2-content-
api/

 

### It don’t mean a thing, if you ain’t got a theme

No matter if you are building themes for public consumption, as a bespoke project
for a major public company, or anything in between WordPress 4.7 has something to
help you.

https://make.wordpress.org/core/2016/11/29/theming-with-twenty-seventeen/

https://make.wordpress.org/core/2016/11/26/video-headers-in-4-7/

https://make.wordpress.org/core/?p=20650

https://make.wordpress.org/core/2016/11/10/visible-edit-shortcuts-in-the-customizer-
preview/

https://make.wordpress.org/core/2016/11/07/whitespace-changes-in-navigation-for-
4-7/

https://make.wordpress.org/core/2016/11/03/post-type-templates-in-4-7/

https://make.wordpress.org/core/2016/11/03/new-post-type-labels-in-4-7/

https://make.wordpress.org/core/2016/09/09/new-functions-hooks-and-behaviour-for-
theme-developers-in-wordpress-4-7/

### The Voyages of USS Media

Two notable changes, enhanced PDF support in the media library and changes to the
default fallbacks for image alt attributes, are explained in separate posts.

https://make.wordpress.org/core/2016/11/15/enhanced-pdf-support-4-7/

https://make.wordpress.org/core/2016/11/11/improving-accessibility-of-image-alternative-
text-in-4-7/

[Media also received other exciting enhancements and bug fixes you should check out](https://make.wordpress.org/core/2016/11/22/media-changes-in-4-7/).

### Around the World

The way users understand the words on WordPress are important and now users will
be able to select their personal preferred language.

https://make.wordpress.org/core/2016/11/07/user-admin-languages-and-locale-switching-
in-4-7/

 

### For Whom Customization Tolls

The customize component will now support the ability to create pages within live
preview during site setup; will have a faster, smoother, and more accessible navigation;
will automatically persist your changes in the background while you browse your 
site and switch themes; and will let you fine-tune your site with custom CSSCSS 
Cascading Style Sheets..

https://make.wordpress.org/core/?p=20534

https://make.wordpress.org/core/2016/10/12/customize-changesets-technical-design-
decisions/

https://make.wordpress.org/core/2016/09/28/changes-to-customizer-sliding-panelssections-
in-wordpress-4-7/

https://make.wordpress.org/core/2016/11/26/extending-the-custom-css-editor/

 

### Reading, Writing and Teriffic

Whether you’re creating content in the WordPress Adminadmin (and super admin) or
concerned about comment moderation, we’ve got updates that will be sure to please
you.

https://make.wordpress.org/core/2016/10/28/editor-changes-in-4-7/

https://make.wordpress.org/core/2016/10/11/comment-allowed-checks-in-wordpress-4-
7/

 

### The Foundation of WordPress

For those who like to get “under the hood” of WordPress, we’ve got some improvements
that will hopefully make your life easier.

https://make.wordpress.org/core/2016/11/07/changed-loading-order-for-current-user-
in-4-7/

https://make.wordpress.org/core/2016/11/04/multisite-focused-changes-in-4-7/

https://make.wordpress.org/core/2016/11/03/attributes-for-resource-hints-in-4-7/

https://make.wordpress.org/core/2016/11/02/wp_list_sort-and-wp_list_util-in-4-7/

https://make.wordpress.org/core/2016/10/29/wp_taxonomy-in-4-7/

https://make.wordpress.org/core/2016/10/28/fine-grained-capabilities-for-taxonomy-
terms-in-4-7/

https://make.wordpress.org/core/2016/09/08/wp_hook-next-generation-actions-and-filters/

https://make.wordpress.org/core/2016/10/26/registering-your-settings-in-wordpress-
4-7/

 

### But Wait, There is More!

Over 447 bugs, 165 enhancements, 8 feature requests, and 15 blessed tasks have been
[marked as fixed in WordPress 4.7](https://core.trac.wordpress.org/query?status=closed&milestone=4.7&group=component&col=id&col=summary&col=owner&col=type&col=priority&col=component&col=version&order=priority).
Some additional ones to highlight include:

 * Make media library searchable by file name ([#22744](https://core.trac.wordpress.org/ticket/22744))
 * Improved Custom Background Properties UIUI User interface ([#22058](https://core.trac.wordpress.org/ticket/22058))
 * Hue-only Color Picker ([#38263](https://core.trac.wordpress.org/ticket/38263))
 * Fix Sections that `.cannot-expand` ([#37980](https://core.trac.wordpress.org/ticket/37980))
 * Allow Plugins to do Comprehensive Late Validation of Settings ([#37638](https://core.trac.wordpress.org/ticket/37638))

Please, test your code. Fixing issues now, before 4.7 is released, helps you and
helps millions of WordPress sites.

[#4-7](https://make.wordpress.org/core/tag/4-7/), [#dev-notes](https://make.wordpress.org/core/tag/dev-notes/),
[#field-guide](https://make.wordpress.org/core/tag/field-guide/)

 [  ](https://profiles.wordpress.org/helen/) [Helen Hou-Sandi](https://profiles.wordpress.org/helen/)
6:26 am _on_ December 3, 2016     
Tags: 4.7   

# 󠀁[There is a quiet RC2 now available it…](https://make.wordpress.org/core/2016/12/03/there-is-a-quiet-rc2-now-available-it/)󠁿

There is a [quiet RC2 now available](https://wordpress.org/wordpress-4.7-RC2.zip)–
it is a fair number of commits ([50+](https://core.trac.wordpress.org/log/branches/4.7/src?action=stop_on_copy&mode=stop_on_copy&rev=39474&stop_rev=39365&limit=200&verbose=on&sfp_email=&sfph_mail=)),
so please take a look through those and test as you can.

[#4-7](https://make.wordpress.org/core/tag/4-7/)

# Post navigation

[← Older posts](https://make.wordpress.org/core/tag/4-7/page/2/?output_format=md)