[Summary view] [Print] [Text view]

   1  <?php
   2  /**
   3   * Sets up the default filters and actions for most
   4   * of the WordPress hooks.
   5   *
   6   * This file is loaded very early in the bootstrap which
   7   * means many functions are not yet available and site
   8   * information such as if this is multisite is unknown.
   9   * Before using functions besides `add_filter` and
  10   * `add_action`, verify things will work as expected.
  11   *
  12   * If you need to remove a default hook, this file will
  13   * give you the priority to use for removing the hook.
  14   *
  15   * Not all of the default hooks are found in this file.
  16   * For instance, administration-related hooks are located in
  17   * wp-admin/includes/admin-filters.php.
  18   *
  19   * If a hook should only be called from a specific context
  20   * (admin area, multisite environment…), please move it
  21   * to a more appropriate file instead.
  22   *
  23   * @package WordPress
  24   */
  25  
  26  // Don't load directly.
  27  if ( ! defined( 'ABSPATH' ) ) {
  28      die( '-1' );
  29  }
  30  
  31  // Strip, trim, kses, special chars for string saves.
  32  foreach ( array( 'pre_term_name', 'pre_comment_author_name', 'pre_link_name', 'pre_link_target', 'pre_link_rel', 'pre_user_display_name', 'pre_user_first_name', 'pre_user_last_name', 'pre_user_nickname' ) as $filter ) {
  33      add_filter( $filter, 'sanitize_text_field' );
  34      add_filter( $filter, 'wp_filter_kses' );
  35      add_filter( $filter, '_wp_specialchars', 30 );
  36  }
  37  
  38  // Strip, kses, special chars for string display.
  39  foreach ( array( 'term_name', 'comment_author_name', 'link_name', 'link_target', 'link_rel', 'user_display_name', 'user_first_name', 'user_last_name', 'user_nickname' ) as $filter ) {
  40      if ( is_admin() ) {
  41          // These are expensive. Run only on admin pages for defense in depth.
  42          add_filter( $filter, 'sanitize_text_field' );
  43          add_filter( $filter, 'wp_kses_data' );
  44      }
  45      add_filter( $filter, '_wp_specialchars', 30 );
  46  }
  47  
  48  // Kses only for textarea saves.
  49  foreach ( array( 'pre_term_description', 'pre_link_description', 'pre_link_notes', 'pre_user_description' ) as $filter ) {
  50      add_filter( $filter, 'wp_filter_kses' );
  51  }
  52  
  53  // Kses only for textarea admin displays.
  54  if ( is_admin() ) {
  55      foreach ( array( 'term_description', 'link_description', 'link_notes', 'user_description' ) as $filter ) {
  56          add_filter( $filter, 'wp_kses_data' );
  57      }
  58      add_filter( 'comment_text', 'wp_kses_post' );
  59  }
  60  
  61  // Email saves.
  62  foreach ( array( 'pre_comment_author_email', 'pre_user_email' ) as $filter ) {
  63      add_filter( $filter, 'trim' );
  64      add_filter( $filter, 'sanitize_email' );
  65      add_filter( $filter, 'wp_filter_kses' );
  66  }
  67  
  68  // Email admin display.
  69  foreach ( array( 'comment_author_email', 'user_email' ) as $filter ) {
  70      add_filter( $filter, 'sanitize_email' );
  71      if ( is_admin() ) {
  72          add_filter( $filter, 'wp_kses_data' );
  73      }
  74  }
  75  
  76  // Save URL.
  77  foreach ( array(
  78      'pre_comment_author_url',
  79      'pre_user_url',
  80      'pre_link_url',
  81      'pre_link_image',
  82      'pre_link_rss',
  83      'pre_post_guid',
  84  ) as $filter ) {
  85      add_filter( $filter, 'wp_strip_all_tags' );
  86      add_filter( $filter, 'sanitize_url' );
  87      add_filter( $filter, 'wp_filter_kses' );
  88  }
  89  
  90  // Display URL.
  91  foreach ( array( 'user_url', 'link_url', 'link_image', 'link_rss', 'comment_url', 'post_guid' ) as $filter ) {
  92      if ( is_admin() ) {
  93          add_filter( $filter, 'wp_strip_all_tags' );
  94      }
  95      add_filter( $filter, 'esc_url' );
  96      if ( is_admin() ) {
  97          add_filter( $filter, 'wp_kses_data' );
  98      }
  99  }
 100  
 101  // Slugs.
 102  add_filter( 'pre_term_slug', 'sanitize_title' );
 103  add_filter( 'wp_insert_post_data', '_wp_customize_changeset_filter_insert_post_data', 10, 2 );
 104  
 105  // Keys.
 106  foreach ( array( 'pre_post_type', 'pre_post_status', 'pre_post_comment_status', 'pre_post_ping_status' ) as $filter ) {
 107      add_filter( $filter, 'sanitize_key' );
 108  }
 109  
 110  // Mime types.
 111  add_filter( 'pre_post_mime_type', 'sanitize_mime_type' );
 112  add_filter( 'post_mime_type', 'sanitize_mime_type' );
 113  
 114  // Meta.
 115  add_filter( 'register_meta_args', '_wp_register_meta_args_allowed_list', 10, 2 );
 116  
 117  // Counts.
 118  add_action( 'admin_init', 'wp_schedule_update_user_counts' );
 119  add_action( 'wp_update_user_counts', 'wp_schedule_update_user_counts', 10, 0 );
 120  foreach ( array( 'user_register', 'deleted_user' ) as $action ) {
 121      add_action( $action, 'wp_maybe_update_user_counts', 10, 0 );
 122  }
 123  
 124  // Post meta.
 125  add_action( 'added_post_meta', 'wp_cache_set_posts_last_changed' );
 126  add_action( 'updated_post_meta', 'wp_cache_set_posts_last_changed' );
 127  add_action( 'deleted_post_meta', 'wp_cache_set_posts_last_changed' );
 128  
 129  // User meta.
 130  add_action( 'added_user_meta', 'wp_cache_set_users_last_changed' );
 131  add_action( 'updated_user_meta', 'wp_cache_set_users_last_changed' );
 132  add_action( 'deleted_user_meta', 'wp_cache_set_users_last_changed' );
 133  add_action( 'add_user_role', 'wp_cache_set_users_last_changed' );
 134  add_action( 'set_user_role', 'wp_cache_set_users_last_changed' );
 135  add_action( 'remove_user_role', 'wp_cache_set_users_last_changed' );
 136  
 137  // Term meta.
 138  add_action( 'added_term_meta', 'wp_cache_set_terms_last_changed' );
 139  add_action( 'updated_term_meta', 'wp_cache_set_terms_last_changed' );
 140  add_action( 'deleted_term_meta', 'wp_cache_set_terms_last_changed' );
 141  add_filter( 'get_term_metadata', 'wp_check_term_meta_support_prefilter' );
 142  add_filter( 'add_term_metadata', 'wp_check_term_meta_support_prefilter' );
 143  add_filter( 'update_term_metadata', 'wp_check_term_meta_support_prefilter' );
 144  add_filter( 'delete_term_metadata', 'wp_check_term_meta_support_prefilter' );
 145  add_filter( 'get_term_metadata_by_mid', 'wp_check_term_meta_support_prefilter' );
 146  add_filter( 'update_term_metadata_by_mid', 'wp_check_term_meta_support_prefilter' );
 147  add_filter( 'delete_term_metadata_by_mid', 'wp_check_term_meta_support_prefilter' );
 148  add_filter( 'update_term_metadata_cache', 'wp_check_term_meta_support_prefilter' );
 149  
 150  // Comment meta.
 151  add_action( 'added_comment_meta', 'wp_cache_set_comments_last_changed' );
 152  add_action( 'updated_comment_meta', 'wp_cache_set_comments_last_changed' );
 153  add_action( 'deleted_comment_meta', 'wp_cache_set_comments_last_changed' );
 154  
 155  // Places to balance tags on input.
 156  foreach ( array( 'content_save_pre', 'excerpt_save_pre', 'comment_save_pre', 'pre_comment_content' ) as $filter ) {
 157      add_filter( $filter, 'convert_invalid_entities' );
 158      add_filter( $filter, 'balanceTags', 50 );
 159  }
 160  
 161  // Format strings for display.
 162  foreach ( array( 'comment_author', 'term_name', 'link_name', 'link_description', 'link_notes', 'bloginfo', 'wp_title', 'document_title', 'widget_title' ) as $filter ) {
 163      add_filter( $filter, 'wptexturize' );
 164      add_filter( $filter, 'convert_chars' );
 165      add_filter( $filter, 'esc_html' );
 166  }
 167  
 168  // Format WordPress.
 169  foreach ( array( 'the_content', 'the_title', 'wp_title', 'document_title' ) as $filter ) {
 170      add_filter( $filter, 'capital_P_dangit', 11 );
 171  }
 172  add_filter( 'comment_text', 'capital_P_dangit', 31 );
 173  
 174  // Format titles.
 175  foreach ( array( 'single_post_title', 'single_cat_title', 'single_tag_title', 'single_month_title', 'nav_menu_attr_title', 'nav_menu_description' ) as $filter ) {
 176      add_filter( $filter, 'wptexturize' );
 177      add_filter( $filter, 'strip_tags' );
 178  }
 179  
 180  // Format text area for display.
 181  foreach ( array( 'term_description', 'get_the_post_type_description' ) as $filter ) {
 182      add_filter( $filter, 'wptexturize' );
 183      add_filter( $filter, 'convert_chars' );
 184      add_filter( $filter, 'wpautop' );
 185      add_filter( $filter, 'shortcode_unautop' );
 186  }
 187  
 188  // Format for RSS.
 189  add_filter( 'term_name_rss', 'convert_chars' );
 190  
 191  // Pre save hierarchy.
 192  add_filter( 'wp_insert_post_parent', 'wp_check_post_hierarchy_for_loops', 10, 2 );
 193  add_filter( 'wp_update_term_parent', 'wp_check_term_hierarchy_for_loops', 10, 3 );
 194  
 195  // Display filters.
 196  add_filter( 'the_title', 'wptexturize' );
 197  add_filter( 'the_title', 'convert_chars' );
 198  add_filter( 'the_title', 'trim' );
 199  
 200  add_filter( 'the_content', 'apply_block_hooks_to_content_from_post_object', 8 ); // BEFORE do_blocks().
 201  add_filter( 'the_content', 'do_blocks', 9 );
 202  add_filter( 'the_content', 'wptexturize' );
 203  add_filter( 'the_content', 'convert_smilies', 20 );
 204  add_filter( 'the_content', 'wpautop' );
 205  add_filter( 'the_content', 'shortcode_unautop' );
 206  add_filter( 'the_content', 'prepend_attachment' );
 207  add_filter( 'the_content', 'wp_replace_insecure_home_url' );
 208  add_filter( 'the_content', 'do_shortcode', 11 ); // AFTER wpautop().
 209  add_filter( 'the_content', 'wp_filter_content_tags', 12 ); // Runs after do_shortcode().
 210  
 211  add_filter( 'the_excerpt', 'wptexturize' );
 212  add_filter( 'the_excerpt', 'convert_smilies' );
 213  add_filter( 'the_excerpt', 'convert_chars' );
 214  add_filter( 'the_excerpt', 'wpautop' );
 215  add_filter( 'the_excerpt', 'shortcode_unautop' );
 216  add_filter( 'the_excerpt', 'wp_replace_insecure_home_url' );
 217  add_filter( 'the_excerpt', 'wp_filter_content_tags', 12 );
 218  add_filter( 'get_the_excerpt', 'wp_trim_excerpt', 10, 2 );
 219  
 220  add_filter( 'the_post_thumbnail_caption', 'wptexturize' );
 221  add_filter( 'the_post_thumbnail_caption', 'convert_smilies' );
 222  add_filter( 'the_post_thumbnail_caption', 'convert_chars' );
 223  
 224  add_filter( 'comment_text', 'wptexturize' );
 225  add_filter( 'comment_text', 'convert_chars' );
 226  add_filter( 'comment_text', 'make_clickable', 9 );
 227  add_filter( 'comment_text', 'force_balance_tags', 25 );
 228  add_filter( 'comment_text', 'convert_smilies', 20 );
 229  add_filter( 'comment_text', 'wpautop', 30 );
 230  
 231  add_filter( 'comment_excerpt', 'convert_chars' );
 232  
 233  add_filter( 'list_cats', 'wptexturize' );
 234  
 235  add_filter( 'wp_sprintf', 'wp_sprintf_l', 10, 2 );
 236  
 237  add_filter( 'widget_text', 'balanceTags' );
 238  add_filter( 'widget_text_content', 'capital_P_dangit', 11 );
 239  add_filter( 'widget_text_content', 'wptexturize' );
 240  add_filter( 'widget_text_content', 'convert_smilies', 20 );
 241  add_filter( 'widget_text_content', 'wpautop' );
 242  add_filter( 'widget_text_content', 'shortcode_unautop' );
 243  add_filter( 'widget_text_content', 'wp_replace_insecure_home_url' );
 244  add_filter( 'widget_text_content', 'do_shortcode', 11 ); // Runs after wpautop(); note that $post global will be null when shortcodes run.
 245  add_filter( 'widget_text_content', 'wp_filter_content_tags', 12 ); // Runs after do_shortcode().
 246  
 247  add_filter( 'widget_block_content', 'do_blocks', 9 );
 248  add_filter( 'widget_block_content', 'do_shortcode', 11 );
 249  add_filter( 'widget_block_content', 'wp_filter_content_tags', 12 ); // Runs after do_shortcode().
 250  
 251  add_filter( 'block_type_metadata', 'wp_migrate_old_typography_shape' );
 252  
 253  add_filter( 'wp_get_custom_css', 'wp_replace_insecure_home_url' );
 254  
 255  // RSS filters.
 256  add_filter( 'the_title_rss', 'strip_tags' );
 257  add_filter( 'the_title_rss', 'ent2ncr', 8 );
 258  add_filter( 'the_title_rss', 'esc_html' );
 259  add_filter( 'the_content_rss', 'ent2ncr', 8 );
 260  add_filter( 'the_content_feed', 'wp_staticize_emoji' );
 261  add_filter( 'the_content_feed', '_oembed_filter_feed_content' );
 262  add_filter( 'the_excerpt_rss', 'convert_chars' );
 263  add_filter( 'the_excerpt_rss', 'ent2ncr', 8 );
 264  add_filter( 'comment_author_rss', 'ent2ncr', 8 );
 265  add_filter( 'comment_text_rss', 'ent2ncr', 8 );
 266  add_filter( 'comment_text_rss', 'esc_html' );
 267  add_filter( 'comment_text_rss', 'wp_staticize_emoji' );
 268  add_filter( 'bloginfo_rss', 'ent2ncr', 8 );
 269  add_filter( 'the_author', 'ent2ncr', 8 );
 270  add_filter( 'the_guid', 'esc_url' );
 271  
 272  // Email filters.
 273  add_filter( 'wp_mail', 'wp_staticize_emoji_for_email' );
 274  
 275  // Robots filters.
 276  add_filter( 'wp_robots', 'wp_robots_noindex' );
 277  add_filter( 'wp_robots', 'wp_robots_noindex_embeds' );
 278  add_filter( 'wp_robots', 'wp_robots_noindex_search' );
 279  add_filter( 'wp_robots', 'wp_robots_max_image_preview_large' );
 280  
 281  // Mark site as no longer fresh.
 282  foreach (
 283      array(
 284          'publish_post',
 285          'publish_page',
 286          'wp_ajax_save-widget',
 287          'wp_ajax_widgets-order',
 288          'customize_save_after',
 289          'rest_after_save_widget',
 290          'rest_delete_widget',
 291          'rest_save_sidebar',
 292      ) as $action
 293  ) {
 294      add_action( $action, '_delete_option_fresh_site', 0 );
 295  }
 296  
 297  // Misc filters.
 298  add_filter( 'wp_default_autoload_value', 'wp_filter_default_autoload_value_via_option_size', 5, 4 ); // Allow the value to be overridden at the default priority.
 299  add_filter( 'option_ping_sites', 'privacy_ping_filter' );
 300  add_filter( 'option_blog_charset', '_wp_specialchars' ); // IMPORTANT: This must not be wp_specialchars() or esc_html() or it'll cause an infinite loop.
 301  add_filter( 'option_blog_charset', '_canonical_charset' );
 302  add_filter( 'option_home', '_config_wp_home' );
 303  add_filter( 'option_siteurl', '_config_wp_siteurl' );
 304  add_filter( 'tiny_mce_before_init', '_mce_set_direction' );
 305  add_filter( 'teeny_mce_before_init', '_mce_set_direction' );
 306  add_filter( 'pre_kses', 'wp_pre_kses_less_than' );
 307  add_filter( 'pre_kses', 'wp_pre_kses_block_attributes', 10, 3 );
 308  add_filter( 'sanitize_title', 'sanitize_title_with_dashes', 10, 3 );
 309  add_action( 'check_comment_flood', 'check_comment_flood_db', 10, 4 );
 310  add_filter( 'comment_flood_filter', 'wp_throttle_comment_flood', 10, 3 );
 311  add_filter( 'pre_comment_content', 'wp_rel_ugc', 15 );
 312  add_filter( 'comment_email', 'antispambot' );
 313  add_filter( 'option_tag_base', '_wp_filter_taxonomy_base' );
 314  add_filter( 'option_category_base', '_wp_filter_taxonomy_base' );
 315  add_filter( 'the_posts', '_close_comments_for_old_posts', 10, 2 );
 316  add_filter( 'comments_open', '_close_comments_for_old_post', 10, 2 );
 317  add_filter( 'pings_open', '_close_comments_for_old_post', 10, 2 );
 318  add_filter( 'editable_slug', 'urldecode' );
 319  add_filter( 'editable_slug', 'esc_textarea' );
 320  add_filter( 'pingback_ping_source_uri', 'pingback_ping_source_uri' );
 321  add_filter( 'xmlrpc_pingback_error', 'xmlrpc_pingback_error' );
 322  add_filter( 'title_save_pre', 'trim' );
 323  
 324  add_action( 'transition_comment_status', '_clear_modified_cache_on_transition_comment_status', 10, 2 );
 325  
 326  add_filter( 'http_request_host_is_external', 'allowed_http_request_hosts', 10, 2 );
 327  
 328  // REST API filters.
 329  add_action( 'xmlrpc_rsd_apis', 'rest_output_rsd' );
 330  add_action( 'wp_head', 'rest_output_link_wp_head', 10, 0 );
 331  add_action( 'template_redirect', 'rest_output_link_header', 11, 0 );
 332  add_action( 'auth_cookie_malformed', 'rest_cookie_collect_status' );
 333  add_action( 'auth_cookie_expired', 'rest_cookie_collect_status' );
 334  add_action( 'auth_cookie_bad_username', 'rest_cookie_collect_status' );
 335  add_action( 'auth_cookie_bad_hash', 'rest_cookie_collect_status' );
 336  add_action( 'auth_cookie_valid', 'rest_cookie_collect_status' );
 337  add_action( 'application_password_failed_authentication', 'rest_application_password_collect_status' );
 338  add_action( 'application_password_did_authenticate', 'rest_application_password_collect_status', 10, 2 );
 339  add_filter( 'rest_authentication_errors', 'rest_application_password_check_errors', 90 );
 340  add_filter( 'rest_authentication_errors', 'rest_cookie_check_errors', 100 );
 341  
 342  // Actions.
 343  add_action( 'wp_head', '_wp_render_title_tag', 1 );
 344  add_action( 'wp_head', 'wp_enqueue_scripts', 1 );
 345  add_action( 'wp_head', 'wp_resource_hints', 2 );
 346  add_action( 'wp_head', 'wp_preload_resources', 1 );
 347  add_action( 'wp_head', 'feed_links', 2 );
 348  add_action( 'wp_head', 'feed_links_extra', 3 );
 349  add_action( 'wp_head', 'rsd_link' );
 350  add_action( 'wp_head', 'locale_stylesheet' );
 351  add_action( 'publish_future_post', 'check_and_publish_future_post', 10, 1 );
 352  add_action( 'wp_head', 'wp_robots', 1 );
 353  add_action( 'wp_head', 'print_emoji_detection_script', 7 );
 354  add_action( 'wp_head', 'wp_print_styles', 8 );
 355  add_action( 'wp_head', 'wp_print_head_scripts', 9 );
 356  add_action( 'wp_head', 'wp_generator' );
 357  add_action( 'wp_head', 'rel_canonical' );
 358  add_action( 'wp_head', 'wp_shortlink_wp_head', 10, 0 );
 359  add_action( 'wp_head', 'wp_custom_css_cb', 101 );
 360  add_action( 'wp_head', 'wp_site_icon', 99 );
 361  add_action( 'wp_footer', 'wp_print_speculation_rules' );
 362  add_action( 'wp_footer', 'wp_print_footer_scripts', 20 );
 363  add_action( 'template_redirect', 'wp_shortlink_header', 11, 0 );
 364  add_action( 'wp_print_footer_scripts', '_wp_footer_scripts' );
 365  add_action( 'init', '_register_core_block_patterns_and_categories' );
 366  add_action( 'init', 'check_theme_switched', 99 );
 367  add_action( 'init', array( 'WP_Block_Supports', 'init' ), 22 );
 368  add_action( 'switch_theme', 'wp_clean_theme_json_cache' );
 369  add_action( 'start_previewing_theme', 'wp_clean_theme_json_cache' );
 370  add_action( 'after_switch_theme', '_wp_menus_changed' );
 371  add_action( 'after_switch_theme', '_wp_sidebars_changed' );
 372  add_action( 'wp_enqueue_scripts', 'wp_enqueue_emoji_styles' );
 373  add_action( 'wp_print_styles', 'print_emoji_styles' ); // Retained for backwards-compatibility. Unhooked by wp_enqueue_emoji_styles().
 374  
 375  if (
 376      // Comment reply link.
 377      isset( $_GET['replytocom'] )
 378      ||
 379      // Unapproved comment preview.
 380      ( isset( $_GET['unapproved'] ) && isset( $_GET['moderation-hash'] ) )
 381  ) {
 382      add_filter( 'wp_robots', 'wp_robots_no_robots' );
 383  }
 384  
 385  // Login actions.
 386  add_action( 'login_head', 'wp_robots', 1 );
 387  add_filter( 'login_head', 'wp_resource_hints', 8 );
 388  add_action( 'login_head', 'wp_print_head_scripts', 9 );
 389  add_action( 'login_head', 'print_admin_styles', 9 );
 390  add_action( 'login_head', 'wp_site_icon', 99 );
 391  add_action( 'login_footer', 'wp_print_footer_scripts', 20 );
 392  add_action( 'login_init', 'send_frame_options_header', 10, 0 );
 393  add_action( 'login_init', 'wp_admin_headers' );
 394  
 395  // Feed generator tags.
 396  foreach ( array( 'rss2_head', 'commentsrss2_head', 'rss_head', 'rdf_header', 'atom_head', 'comments_atom_head', 'opml_head', 'app_head' ) as $action ) {
 397      add_action( $action, 'the_generator' );
 398  }
 399  
 400  // Feed Site Icon.
 401  add_action( 'atom_head', 'atom_site_icon' );
 402  add_action( 'rss2_head', 'rss2_site_icon' );
 403  
 404  
 405  // WP Cron.
 406  if ( ! defined( 'DOING_CRON' ) ) {
 407      add_action( 'init', 'wp_cron' );
 408  }
 409  
 410  // HTTPS migration.
 411  add_action( 'update_option_home', 'wp_update_https_migration_required', 10, 2 );
 412  
 413  // 2 Actions 2 Furious.
 414  add_action( 'do_feed_rdf', 'do_feed_rdf', 10, 0 );
 415  add_action( 'do_feed_rss', 'do_feed_rss', 10, 0 );
 416  add_action( 'do_feed_rss2', 'do_feed_rss2', 10, 1 );
 417  add_action( 'do_feed_atom', 'do_feed_atom', 10, 1 );
 418  add_action( 'do_pings', 'do_all_pings', 10, 0 );
 419  add_action( 'do_all_pings', 'do_all_pingbacks', 10, 0 );
 420  add_action( 'do_all_pings', 'do_all_enclosures', 10, 0 );
 421  add_action( 'do_all_pings', 'do_all_trackbacks', 10, 0 );
 422  add_action( 'do_all_pings', 'generic_ping', 10, 0 );
 423  add_action( 'do_robots', 'do_robots' );
 424  add_action( 'do_favicon', 'do_favicon' );
 425  add_action( 'set_comment_cookies', 'wp_set_comment_cookies', 10, 3 );
 426  add_action( 'sanitize_comment_cookies', 'sanitize_comment_cookies' );
 427  add_action( 'init', 'smilies_init', 5 );
 428  add_action( 'plugins_loaded', 'wp_maybe_load_widgets', 0 );
 429  add_action( 'plugins_loaded', 'wp_maybe_load_embeds', 0 );
 430  add_action( 'shutdown', 'wp_ob_end_flush_all', 1 );
 431  // Create a revision whenever a post is updated.
 432  add_action( 'wp_after_insert_post', 'wp_save_post_revision_on_insert', 9, 3 );
 433  add_action( 'post_updated', 'wp_save_post_revision', 10, 1 );
 434  add_action( 'publish_post', '_publish_post_hook', 5, 1 );
 435  add_action( 'transition_post_status', '_transition_post_status', 5, 3 );
 436  add_action( 'transition_post_status', '_update_term_count_on_transition_post_status', 10, 3 );
 437  add_action( 'comment_form', 'wp_comment_form_unfiltered_html_nonce' );
 438  
 439  // Privacy.
 440  add_action( 'user_request_action_confirmed', '_wp_privacy_account_request_confirmed' );
 441  add_action( 'user_request_action_confirmed', '_wp_privacy_send_request_confirmation_notification', 12 ); // After request marked as completed.
 442  add_filter( 'wp_privacy_personal_data_exporters', 'wp_register_comment_personal_data_exporter' );
 443  add_filter( 'wp_privacy_personal_data_exporters', 'wp_register_media_personal_data_exporter' );
 444  add_filter( 'wp_privacy_personal_data_exporters', 'wp_register_user_personal_data_exporter', 1 );
 445  add_filter( 'wp_privacy_personal_data_erasers', 'wp_register_comment_personal_data_eraser' );
 446  add_action( 'init', 'wp_schedule_delete_old_privacy_export_files' );
 447  add_action( 'wp_privacy_delete_old_export_files', 'wp_privacy_delete_old_export_files' );
 448  
 449  // Cron tasks.
 450  add_action( 'wp_scheduled_delete', 'wp_scheduled_delete' );
 451  add_action( 'wp_scheduled_auto_draft_delete', 'wp_delete_auto_drafts' );
 452  add_action( 'importer_scheduled_cleanup', 'wp_delete_attachment' );
 453  add_action( 'upgrader_scheduled_cleanup', 'wp_delete_attachment' );
 454  add_action( 'delete_expired_transients', 'delete_expired_transients' );
 455  
 456  // Navigation menu actions.
 457  add_action( 'delete_post', '_wp_delete_post_menu_item' );
 458  add_action( 'delete_term', '_wp_delete_tax_menu_item', 10, 3 );
 459  add_action( 'transition_post_status', '_wp_auto_add_pages_to_menu', 10, 3 );
 460  add_action( 'delete_post', '_wp_delete_customize_changeset_dependent_auto_drafts' );
 461  
 462  // Post Thumbnail specific image filtering.
 463  add_action( 'begin_fetch_post_thumbnail_html', '_wp_post_thumbnail_class_filter_add' );
 464  add_action( 'end_fetch_post_thumbnail_html', '_wp_post_thumbnail_class_filter_remove' );
 465  add_action( 'begin_fetch_post_thumbnail_html', '_wp_post_thumbnail_context_filter_add' );
 466  add_action( 'end_fetch_post_thumbnail_html', '_wp_post_thumbnail_context_filter_remove' );
 467  
 468  // Redirect old slugs.
 469  add_action( 'template_redirect', 'wp_old_slug_redirect' );
 470  add_action( 'post_updated', 'wp_check_for_changed_slugs', 12, 3 );
 471  add_action( 'attachment_updated', 'wp_check_for_changed_slugs', 12, 3 );
 472  
 473  // Redirect old dates.
 474  add_action( 'post_updated', 'wp_check_for_changed_dates', 12, 3 );
 475  add_action( 'attachment_updated', 'wp_check_for_changed_dates', 12, 3 );
 476  
 477  // Nonce check for post previews.
 478  add_action( 'init', '_show_post_preview' );
 479  
 480  // Output JS to reset window.name for previews.
 481  add_action( 'wp_head', 'wp_post_preview_js', 1 );
 482  
 483  // Timezone.
 484  add_filter( 'pre_option_gmt_offset', 'wp_timezone_override_offset' );
 485  
 486  // If the upgrade hasn't run yet, assume link manager is used.
 487  add_filter( 'default_option_link_manager_enabled', '__return_true' );
 488  
 489  // This option no longer exists; tell plugins we always support auto-embedding.
 490  add_filter( 'pre_option_embed_autourls', '__return_true' );
 491  
 492  // Default settings for heartbeat.
 493  add_filter( 'heartbeat_settings', 'wp_heartbeat_settings' );
 494  
 495  // Check if the user is logged out.
 496  add_action( 'admin_enqueue_scripts', 'wp_auth_check_load' );
 497  add_filter( 'heartbeat_send', 'wp_auth_check' );
 498  add_filter( 'heartbeat_nopriv_send', 'wp_auth_check' );
 499  
 500  // Default authentication filters.
 501  add_filter( 'authenticate', 'wp_authenticate_username_password', 20, 3 );
 502  add_filter( 'authenticate', 'wp_authenticate_email_password', 20, 3 );
 503  add_filter( 'authenticate', 'wp_authenticate_application_password', 20, 3 );
 504  add_filter( 'authenticate', 'wp_authenticate_spam_check', 99 );
 505  add_filter( 'determine_current_user', 'wp_validate_auth_cookie' );
 506  add_filter( 'determine_current_user', 'wp_validate_logged_in_cookie', 20 );
 507  add_filter( 'determine_current_user', 'wp_validate_application_password', 20 );
 508  
 509  // Split term updates.
 510  add_action( 'admin_init', '_wp_check_for_scheduled_split_terms' );
 511  add_action( 'split_shared_term', '_wp_check_split_default_terms', 10, 4 );
 512  add_action( 'split_shared_term', '_wp_check_split_terms_in_menus', 10, 4 );
 513  add_action( 'split_shared_term', '_wp_check_split_nav_menu_terms', 10, 4 );
 514  add_action( 'wp_split_shared_term_batch', '_wp_batch_split_terms' );
 515  
 516  // Comment type updates.
 517  add_action( 'admin_init', '_wp_check_for_scheduled_update_comment_type' );
 518  add_action( 'wp_update_comment_type_batch', '_wp_batch_update_comment_type' );
 519  
 520  // Email notifications.
 521  add_action( 'comment_post', 'wp_new_comment_notify_moderator' );
 522  add_action( 'comment_post', 'wp_new_comment_notify_postauthor' );
 523  add_action( 'after_password_reset', 'wp_password_change_notification' );
 524  add_action( 'register_new_user', 'wp_send_new_user_notifications' );
 525  add_action( 'edit_user_created_user', 'wp_send_new_user_notifications', 10, 2 );
 526  
 527  // REST API actions.
 528  add_action( 'init', 'rest_api_init' );
 529  add_action( 'rest_api_init', 'rest_api_default_filters', 10, 1 );
 530  add_action( 'rest_api_init', 'register_initial_settings', 10 );
 531  add_action( 'rest_api_init', 'create_initial_rest_routes', 99 );
 532  add_action( 'parse_request', 'rest_api_loaded' );
 533  
 534  // Sitemaps actions.
 535  add_action( 'init', 'wp_sitemaps_get_server' );
 536  
 537  /**
 538   * Filters formerly mixed into wp-includes.
 539   */
 540  // Theme.
 541  add_action( 'setup_theme', 'create_initial_theme_features', 0 );
 542  add_action( 'after_setup_theme', '_add_default_theme_supports', 1 );
 543  add_action( 'wp_loaded', '_custom_header_background_just_in_time' );
 544  add_action( 'wp_head', '_custom_logo_header_styles' );
 545  add_action( 'plugins_loaded', '_wp_customize_include' );
 546  add_action( 'transition_post_status', '_wp_customize_publish_changeset', 10, 3 );
 547  add_action( 'admin_enqueue_scripts', '_wp_customize_loader_settings' );
 548  add_action( 'delete_attachment', '_delete_attachment_theme_mod' );
 549  add_action( 'transition_post_status', '_wp_keep_alive_customize_changeset_dependent_auto_drafts', 20, 3 );
 550  
 551  // Block Theme Previews.
 552  add_action( 'plugins_loaded', 'wp_initialize_theme_preview_hooks', 1 );
 553  
 554  // Calendar widget cache.
 555  add_action( 'save_post', 'delete_get_calendar_cache' );
 556  add_action( 'delete_post', 'delete_get_calendar_cache' );
 557  add_action( 'update_option_start_of_week', 'delete_get_calendar_cache' );
 558  add_action( 'update_option_gmt_offset', 'delete_get_calendar_cache' );
 559  
 560  // Author.
 561  add_action( 'transition_post_status', '__clear_multi_author_cache' );
 562  
 563  // Post.
 564  add_action( 'init', 'create_initial_post_types', 0 ); // Highest priority.
 565  add_action( 'admin_menu', '_add_post_type_submenus' );
 566  add_action( 'before_delete_post', '_reset_front_page_settings_for_post' );
 567  add_action( 'wp_trash_post', '_reset_front_page_settings_for_post' );
 568  add_action( 'change_locale', 'create_initial_post_types' );
 569  
 570  // Post Formats.
 571  add_filter( 'request', '_post_format_request' );
 572  add_filter( 'term_link', '_post_format_link', 10, 3 );
 573  add_filter( 'get_post_format', '_post_format_get_term' );
 574  add_filter( 'get_terms', '_post_format_get_terms', 10, 3 );
 575  add_filter( 'wp_get_object_terms', '_post_format_wp_get_object_terms' );
 576  
 577  // KSES.
 578  add_action( 'init', 'kses_init' );
 579  add_action( 'set_current_user', 'kses_init' );
 580  
 581  // Script Loader.
 582  add_action( 'wp_default_scripts', 'wp_default_scripts' );
 583  add_action( 'wp_default_scripts', 'wp_default_packages' );
 584  add_action( 'wp_default_scripts', 'wp_default_script_modules' );
 585  
 586  add_action( 'wp_enqueue_scripts', 'wp_localize_jquery_ui_datepicker', 1000 );
 587  add_action( 'wp_enqueue_scripts', 'wp_common_block_scripts_and_styles' );
 588  add_action( 'wp_enqueue_scripts', 'wp_enqueue_classic_theme_styles' );
 589  add_action( 'admin_enqueue_scripts', 'wp_localize_jquery_ui_datepicker', 1000 );
 590  add_action( 'admin_enqueue_scripts', 'wp_common_block_scripts_and_styles' );
 591  add_action( 'enqueue_block_assets', 'wp_enqueue_registered_block_scripts_and_styles' );
 592  add_action( 'enqueue_block_assets', 'enqueue_block_styles_assets', 30 );
 593  /*
 594   * `wp_enqueue_registered_block_scripts_and_styles` is bound to both
 595   * `enqueue_block_editor_assets` and `enqueue_block_assets` hooks
 596   * since the introduction of the block editor in WordPress 5.0.
 597   *
 598   * The way this works is that the block assets are loaded before any other assets.
 599   * For example, this is the order of styles for the editor:
 600   *
 601   * - front styles registered for blocks, via `styles` handle (block.json)
 602   * - editor styles registered for blocks, via `editorStyles` handle (block.json)
 603   * - editor styles enqueued via `enqueue_block_editor_assets` hook
 604   * - front styles enqueued via `enqueue_block_assets` hook
 605   */
 606  add_action( 'enqueue_block_editor_assets', 'wp_enqueue_registered_block_scripts_and_styles' );
 607  add_action( 'enqueue_block_editor_assets', 'enqueue_editor_block_styles_assets' );
 608  add_action( 'enqueue_block_editor_assets', 'wp_enqueue_editor_block_directory_assets' );
 609  add_action( 'enqueue_block_editor_assets', 'wp_enqueue_editor_format_library_assets' );
 610  add_action( 'enqueue_block_editor_assets', 'wp_enqueue_global_styles_css_custom_properties' );
 611  add_action( 'wp_print_scripts', 'wp_just_in_time_script_localization' );
 612  add_filter( 'print_scripts_array', 'wp_prototype_before_jquery' );
 613  add_action( 'customize_controls_print_styles', 'wp_resource_hints', 1 );
 614  add_action( 'admin_head', 'wp_check_widget_editor_deps' );
 615  add_filter( 'block_editor_settings_all', 'wp_add_editor_classic_theme_styles' );
 616  
 617  // Global styles can be enqueued in both the header and the footer. See https://core.trac.wordpress.org/ticket/53494.
 618  add_action( 'wp_enqueue_scripts', 'wp_enqueue_global_styles' );
 619  add_action( 'wp_footer', 'wp_enqueue_global_styles', 1 );
 620  
 621  // Block supports, and other styles parsed and stored in the Style Engine.
 622  add_action( 'wp_enqueue_scripts', 'wp_enqueue_stored_styles' );
 623  add_action( 'wp_footer', 'wp_enqueue_stored_styles', 1 );
 624  
 625  add_action( 'wp_default_styles', 'wp_default_styles' );
 626  add_filter( 'style_loader_src', 'wp_style_loader_src', 10, 2 );
 627  
 628  add_action( 'wp_head', 'wp_print_auto_sizes_contain_css_fix', 1 );
 629  add_action( 'wp_head', 'wp_maybe_inline_styles', 1 ); // Run for styles enqueued in <head>.
 630  add_action( 'wp_footer', 'wp_maybe_inline_styles', 1 ); // Run for late-loaded styles in the footer.
 631  
 632  /*
 633   * Block specific actions and filters.
 634   */
 635  
 636  // Footnotes Block.
 637  add_action( 'init', '_wp_footnotes_kses_init' );
 638  add_action( 'set_current_user', '_wp_footnotes_kses_init' );
 639  add_filter( 'force_filtered_html_on_import', '_wp_footnotes_force_filtered_html_on_import_filter', 999 );
 640  
 641  /*
 642   * Disable "Post Attributes" for wp_navigation post type. The attributes are
 643   * also conditionally enabled when a site has custom templates. Block Theme
 644   * templates can be available for every post type.
 645   */
 646  add_filter( 'theme_wp_navigation_templates', '__return_empty_array' );
 647  
 648  // Taxonomy.
 649  add_action( 'init', 'create_initial_taxonomies', 0 ); // Highest priority.
 650  add_action( 'change_locale', 'create_initial_taxonomies' );
 651  
 652  // Canonical.
 653  add_action( 'template_redirect', 'redirect_canonical' );
 654  add_action( 'template_redirect', 'wp_redirect_admin_locations', 1000 );
 655  
 656  // Media.
 657  add_action( 'wp_playlist_scripts', 'wp_playlist_scripts' );
 658  add_action( 'customize_controls_enqueue_scripts', 'wp_plupload_default_settings' );
 659  add_action( 'plugins_loaded', '_wp_add_additional_image_sizes', 0 );
 660  add_filter( 'plupload_default_settings', 'wp_show_heic_upload_error' );
 661  
 662  // Nav menu.
 663  add_filter( 'nav_menu_item_id', '_nav_menu_item_id_use_once', 10, 2 );
 664  add_filter( 'nav_menu_css_class', 'wp_nav_menu_remove_menu_item_has_children_class', 10, 4 );
 665  
 666  // Widgets.
 667  add_action( 'after_setup_theme', 'wp_setup_widgets_block_editor', 1 );
 668  add_action( 'init', 'wp_widgets_init', 1 );
 669  add_action( 'change_locale', array( 'WP_Widget_Media', 'reset_default_labels' ) );
 670  add_action( 'widgets_init', '_wp_block_theme_register_classic_sidebars', 1 );
 671  
 672  // Admin Bar.
 673  // Don't remove. Wrong way to disable.
 674  add_action( 'template_redirect', '_wp_admin_bar_init', 0 );
 675  add_action( 'admin_init', '_wp_admin_bar_init' );
 676  add_action( 'wp_enqueue_scripts', 'wp_enqueue_admin_bar_bump_styles' );
 677  add_action( 'wp_enqueue_scripts', 'wp_enqueue_admin_bar_header_styles' );
 678  add_action( 'admin_enqueue_scripts', 'wp_enqueue_admin_bar_header_styles' );
 679  add_action( 'before_signup_header', '_wp_admin_bar_init' );
 680  add_action( 'activate_header', '_wp_admin_bar_init' );
 681  add_action( 'wp_body_open', 'wp_admin_bar_render', 0 );
 682  add_action( 'wp_footer', 'wp_admin_bar_render', 1000 ); // Back-compat for themes not using `wp_body_open`.
 683  add_action( 'in_admin_header', 'wp_admin_bar_render', 0 );
 684  
 685  // Former admin filters that can also be hooked on the front end.
 686  add_action( 'media_buttons', 'media_buttons' );
 687  add_filter( 'image_send_to_editor', 'image_add_caption', 20, 8 );
 688  add_filter( 'media_send_to_editor', 'image_media_send_to_editor', 10, 3 );
 689  
 690  // Embeds.
 691  add_action( 'rest_api_init', 'wp_oembed_register_route' );
 692  add_filter( 'rest_pre_serve_request', '_oembed_rest_pre_serve_request', 10, 4 );
 693  
 694  add_action( 'wp_head', 'wp_oembed_add_discovery_links' );
 695  add_action( 'wp_head', 'wp_oembed_add_host_js' ); // Back-compat for sites disabling oEmbed host JS by removing action.
 696  add_filter( 'embed_oembed_html', 'wp_maybe_enqueue_oembed_host_js' );
 697  
 698  add_action( 'embed_head', 'enqueue_embed_scripts', 1 );
 699  add_action( 'embed_head', 'print_emoji_detection_script' );
 700  add_action( 'embed_head', 'wp_enqueue_embed_styles', 9 );
 701  add_action( 'embed_head', 'print_embed_styles' ); // Retained for backwards-compatibility. Unhooked by wp_enqueue_embed_styles().
 702  add_action( 'embed_head', 'wp_print_head_scripts', 20 );
 703  add_action( 'embed_head', 'wp_print_styles', 20 );
 704  add_action( 'embed_head', 'wp_robots' );
 705  add_action( 'embed_head', 'rel_canonical' );
 706  add_action( 'embed_head', 'locale_stylesheet', 30 );
 707  add_action( 'enqueue_embed_scripts', 'wp_enqueue_emoji_styles' );
 708  
 709  add_action( 'embed_content_meta', 'print_embed_comments_button' );
 710  add_action( 'embed_content_meta', 'print_embed_sharing_button' );
 711  
 712  add_action( 'embed_footer', 'print_embed_sharing_dialog' );
 713  add_action( 'embed_footer', 'print_embed_scripts' );
 714  add_action( 'embed_footer', 'wp_print_footer_scripts', 20 );
 715  
 716  add_filter( 'excerpt_more', 'wp_embed_excerpt_more', 20 );
 717  add_filter( 'the_excerpt_embed', 'wptexturize' );
 718  add_filter( 'the_excerpt_embed', 'convert_chars' );
 719  add_filter( 'the_excerpt_embed', 'wpautop' );
 720  add_filter( 'the_excerpt_embed', 'shortcode_unautop' );
 721  add_filter( 'the_excerpt_embed', 'wp_embed_excerpt_attachment' );
 722  
 723  add_filter( 'oembed_dataparse', 'wp_filter_oembed_iframe_title_attribute', 5, 3 );
 724  add_filter( 'oembed_dataparse', 'wp_filter_oembed_result', 10, 3 );
 725  add_filter( 'oembed_response_data', 'get_oembed_response_data_rich', 10, 4 );
 726  add_filter( 'pre_oembed_result', 'wp_filter_pre_oembed_result', 10, 3 );
 727  
 728  // Capabilities.
 729  add_filter( 'user_has_cap', 'wp_maybe_grant_install_languages_cap', 1 );
 730  add_filter( 'user_has_cap', 'wp_maybe_grant_resume_extensions_caps', 1 );
 731  add_filter( 'user_has_cap', 'wp_maybe_grant_site_health_caps', 1, 4 );
 732  
 733  // Block templates post type and rendering.
 734  add_filter( 'render_block_context', '_block_template_render_without_post_block_context' );
 735  add_filter( 'pre_wp_unique_post_slug', 'wp_filter_wp_template_unique_post_slug', 10, 5 );
 736  add_action( 'save_post_wp_template_part', 'wp_set_unique_slug_on_create_template_part' );
 737  add_action( 'wp_enqueue_scripts', 'wp_enqueue_block_template_skip_link' );
 738  add_action( 'wp_footer', 'the_block_template_skip_link' ); // Retained for backwards-compatibility. Unhooked by wp_enqueue_block_template_skip_link().
 739  add_action( 'after_setup_theme', 'wp_enable_block_templates', 1 );
 740  add_action( 'wp_loaded', '_add_template_loader_filters' );
 741  
 742  // wp_navigation post type.
 743  add_filter( 'rest_wp_navigation_item_schema', array( 'WP_Navigation_Fallback', 'update_wp_navigation_post_schema' ) );
 744  
 745  // Fluid typography.
 746  add_filter( 'render_block', 'wp_render_typography_support', 10, 2 );
 747  
 748  // User preferences.
 749  add_action( 'init', 'wp_register_persisted_preferences_meta' );
 750  
 751  // CPT wp_block custom postmeta field.
 752  add_action( 'init', 'wp_create_initial_post_meta' );
 753  
 754  // Include revisioned meta when considering whether a post revision has changed.
 755  add_filter( 'wp_save_post_revision_post_has_changed', 'wp_check_revisioned_meta_fields_have_changed', 10, 3 );
 756  
 757  // Save revisioned post meta immediately after a revision is saved
 758  add_action( '_wp_put_post_revision', 'wp_save_revisioned_meta_fields', 10, 2 );
 759  
 760  // Include revisioned meta when creating or updating an autosave revision.
 761  add_action( 'wp_creating_autosave', 'wp_autosave_post_revisioned_meta_fields' );
 762  
 763  // When restoring revisions, also restore revisioned meta.
 764  add_action( 'wp_restore_post_revision', 'wp_restore_post_revision_meta', 10, 2 );
 765  
 766  // Font management.
 767  add_action( 'wp_head', 'wp_print_font_faces', 50 );
 768  add_action( 'deleted_post', '_wp_after_delete_font_family', 10, 2 );
 769  add_action( 'before_delete_post', '_wp_before_delete_font_face', 10, 2 );
 770  add_action( 'init', '_wp_register_default_font_collections' );
 771  
 772  // Add ignoredHookedBlocks metadata attribute to the template and template part post types.
 773  add_filter( 'rest_pre_insert_wp_template', 'inject_ignored_hooked_blocks_metadata_attributes' );
 774  add_filter( 'rest_pre_insert_wp_template_part', 'inject_ignored_hooked_blocks_metadata_attributes' );
 775  
 776  // Update ignoredHookedBlocks postmeta for some post types.
 777  add_filter( 'rest_pre_insert_page', 'update_ignored_hooked_blocks_postmeta' );
 778  add_filter( 'rest_pre_insert_post', 'update_ignored_hooked_blocks_postmeta' );
 779  add_filter( 'rest_pre_insert_wp_block', 'update_ignored_hooked_blocks_postmeta' );
 780  add_filter( 'rest_pre_insert_wp_navigation', 'update_ignored_hooked_blocks_postmeta' );
 781  
 782  // Inject hooked blocks into the Posts endpoint REST response for some given post types.
 783  add_filter( 'rest_prepare_page', 'insert_hooked_blocks_into_rest_response', 10, 2 );
 784  add_filter( 'rest_prepare_post', 'insert_hooked_blocks_into_rest_response', 10, 2 );
 785  add_filter( 'rest_prepare_wp_block', 'insert_hooked_blocks_into_rest_response', 10, 2 );
 786  add_filter( 'rest_prepare_wp_navigation', 'insert_hooked_blocks_into_rest_response', 10, 2 );
 787  
 788  unset( $filter, $action );