3 Commits

Include renames

Author	SHA1	Message	Date
janniclas.loosen	28bb033a8b	fix: cap Base64 media transfers at 10 MB, upload limit at most 32 MB	2026-09-26 05:04:38 +02:00
janniclas.loosenandClaude Opus 5.5	56f561c436	fix: media upload whitelist per extension, no stray files, IPv4-only import ... Empty effective whitelist is rejected instead of falling back to all types; the whitelist is matched per extension against core's keys (mp3|m4a|m4b); a file moved into uploads is deleted when the attachment cannot be created; the import request resolves IPv4 only; empty temp name guard for URL imports. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01At3V6SjwbMe6eMzVGW3Hs7	2026-09-26 02:42:45 +02:00
janniclas.loosenandClaude Opus 5.5	2e29a6cd4d	feat: media upload by URL and base64 with whitelist and size limit ... MediaImporter streams URL imports via wp_safe_remote_get with limit_response_size, checks Content-Length, intersects the MIME whitelist with get_allowed_mime_types and validates real content; base64 is size-checked before decoding. Server-side failures are write_failed; a failed alt text deletes the new attachment again (or partial_write). MediaUploads is the shared permission/result helper of both upload abilities. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01At3V6SjwbMe6eMzVGW3Hs7	2026-09-26 02:37:43 +02:00