1<?php
  2/**
  3 * Sets up the default filters and actions for most
  4 * of the WordPress hooks.
  5 *
  6 * This file is loaded very early in the bootstrap which
  7 * means many functions are not yet available and site
  8 * information such as if this is multisite is unknown.
  9 * Before using functions besides `add_filter` and
 10 * `add_action`, verify things will work as expected.
 11 *
 12 * If you need to remove a default hook, this file will
 13 * give you the priority to use for removing the hook.
 14 *
 15 * Not all of the default hooks are found in this file.
 16 * For instance, administration-related hooks are located in
 17 * wp-admin/includes/admin-filters.php.
 18 *
 19 * If a hook should only be called from a specific context
 20 * (admin area, multisite environment…), please move it
 21 * to a more appropriate file instead.
 22 *
 23 * @package WordPress
 24 */
 25
 26// Don't load directly.
 27if ( ! defined( 'ABSPATH' ) ) {
 28	die( '-1' );
 29}
 30
 31// Strip, trim, kses, special chars for string saves.
 32foreach ( array( 'pre_term_name', 'pre_comment_author_name', 'pre_link_name', 'pre_link_target', 'pre_link_rel', 'pre_user_display_name', 'pre_user_first_name', 'pre_user_last_name', 'pre_user_nickname' ) as $filter ) {
 33	add_filter( $filter, 'sanitize_text_field' );
 34	add_filter( $filter, 'wp_filter_kses' );
 35	add_filter( $filter, '_wp_specialchars', 30 );
 36}
 37
 38// Strip, kses, special chars for string display.
 39foreach ( array( 'term_name', 'comment_author_name', 'link_name', 'link_target', 'link_rel', 'user_display_name', 'user_first_name', 'user_last_name', 'user_nickname' ) as $filter ) {
 40	if ( is_admin() ) {
 41		// These are expensive. Run only on admin pages for defense in depth.
 42		add_filter( $filter, 'sanitize_text_field' );
 43		add_filter( $filter, 'wp_kses_data' );
 44	}
 45	add_filter( $filter, '_wp_specialchars', 30 );
 46}
 47
 48// Kses only for textarea saves.
 49foreach ( array( 'pre_term_description', 'pre_link_description', 'pre_link_notes', 'pre_user_description' ) as $filter ) {
 50	add_filter( $filter, 'wp_filter_kses' );
 51}
 52
 53// Kses only for textarea admin displays.
 54if ( is_admin() ) {
 55	foreach ( array( 'term_description', 'link_description', 'link_notes', 'user_description' ) as $filter ) {
 56		add_filter( $filter, 'wp_kses_data' );
 57	}
 58	add_filter( 'comment_text', 'wp_kses_post' );
 59}
 60
 61// Email saves.
 62foreach ( array( 'pre_comment_author_email', 'pre_user_email' ) as $filter ) {
 63	add_filter( $filter, 'trim' );
 64	add_filter( $filter, 'sanitize_email' );
 65	add_filter( $filter, 'wp_filter_kses' );
 66}
 67
 68// Email admin display.
 69foreach ( array( 'comment_author_email', 'user_email' ) as $filter ) {
 70	add_filter( $filter, 'sanitize_email' );
 71	if ( is_admin() ) {
 72		add_filter( $filter, 'wp_kses_data' );
 73	}
 74}
 75
 76// Save URL.
 77foreach ( array(
 78	'pre_comment_author_url',
 79	'pre_user_url',
 80	'pre_link_url',
 81	'pre_link_image',
 82	'pre_link_rss',
 83	'pre_post_guid',
 84) as $filter ) {
 85	add_filter( $filter, 'wp_strip_all_tags' );
 86	add_filter( $filter, 'sanitize_url' );
 87	add_filter( $filter, 'wp_filter_kses' );
 88}
 89
 90// Display URL.
 91foreach ( array( 'user_url', 'link_url', 'link_image', 'link_rss', 'comment_url', 'post_guid' ) as $filter ) {
 92	if ( is_admin() ) {
 93		add_filter( $filter, 'wp_strip_all_tags' );
 94	}
 95	add_filter( $filter, 'esc_url' );
 96	if ( is_admin() ) {
 97		add_filter( $filter, 'wp_kses_data' );
 98	}
 99}
100
101// Slugs.
102add_filter( 'pre_term_slug', 'sanitize_title' );
103add_filter( 'wp_insert_post_data', '_wp_customize_changeset_filter_insert_post_data', 10, 2 );
104
105// Keys.
106foreach ( array( 'pre_post_type', 'pre_post_status', 'pre_post_comment_status', 'pre_post_ping_status' ) as $filter ) {
107	add_filter( $filter, 'sanitize_key' );
108}
109
110// Mime types.
111add_filter( 'pre_post_mime_type', 'sanitize_mime_type' );
112add_filter( 'post_mime_type', 'sanitize_mime_type' );
113
114// Meta.
115add_filter( 'register_meta_args', '_wp_register_meta_args_allowed_list', 10, 2 );
116
117// Counts.
118add_action( 'admin_init', 'wp_schedule_update_user_counts' );
119add_action( 'wp_update_user_counts', 'wp_schedule_update_user_counts', 10, 0 );
120foreach ( array( 'user_register', 'deleted_user' ) as $action ) {
121	add_action( $action, 'wp_maybe_update_user_counts', 10, 0 );
122}
123
124// Post meta.
125add_action( 'added_post_meta', 'wp_cache_set_posts_last_changed' );
126add_action( 'updated_post_meta', 'wp_cache_set_posts_last_changed' );
127add_action( 'deleted_post_meta', 'wp_cache_set_posts_last_changed' );
128
129// User meta.
130add_action( 'added_user_meta', 'wp_cache_set_users_last_changed' );
131add_action( 'updated_user_meta', 'wp_cache_set_users_last_changed' );
132add_action( 'deleted_user_meta', 'wp_cache_set_users_last_changed' );
133add_action( 'add_user_role', 'wp_cache_set_users_last_changed' );
134add_action( 'set_user_role', 'wp_cache_set_users_last_changed' );
135add_action( 'remove_user_role', 'wp_cache_set_users_last_changed' );
136
137// Term meta.
138add_action( 'added_term_meta', 'wp_cache_set_terms_last_changed' );
139add_action( 'updated_term_meta', 'wp_cache_set_terms_last_changed' );
140add_action( 'deleted_term_meta', 'wp_cache_set_terms_last_changed' );
141add_filter( 'get_term_metadata', 'wp_check_term_meta_support_prefilter' );
142add_filter( 'add_term_metadata', 'wp_check_term_meta_support_prefilter' );
143add_filter( 'update_term_metadata', 'wp_check_term_meta_support_prefilter' );
144add_filter( 'delete_term_metadata', 'wp_check_term_meta_support_prefilter' );
145add_filter( 'get_term_metadata_by_mid', 'wp_check_term_meta_support_prefilter' );
146add_filter( 'update_term_metadata_by_mid', 'wp_check_term_meta_support_prefilter' );
147add_filter( 'delete_term_metadata_by_mid', 'wp_check_term_meta_support_prefilter' );
148add_filter( 'update_term_metadata_cache', 'wp_check_term_meta_support_prefilter' );
149
150// Comment meta.
151add_action( 'added_comment_meta', 'wp_cache_set_comments_last_changed' );
152add_action( 'updated_comment_meta', 'wp_cache_set_comments_last_changed' );
153add_action( 'deleted_comment_meta', 'wp_cache_set_comments_last_changed' );
154add_action( 'init', 'wp_create_initial_comment_meta' );
155
156// Places to balance tags on input.
157foreach ( array( 'content_save_pre', 'excerpt_save_pre', 'comment_save_pre', 'pre_comment_content' ) as $filter ) {
158	add_filter( $filter, 'convert_invalid_entities' );
159	add_filter( $filter, 'balanceTags', 50 );
160}
161
162// Format strings for display.
163foreach ( array( 'comment_author', 'term_name', 'link_name', 'link_description', 'link_notes', 'bloginfo', 'wp_title', 'document_title', 'widget_title' ) as $filter ) {
164	add_filter( $filter, 'wptexturize' );
165	add_filter( $filter, 'convert_chars' );
166	add_filter( $filter, 'esc_html' );
167}
168
169// Format WordPress.
170foreach ( array( 'the_content', 'the_title', 'wp_title', 'document_title' ) as $filter ) {
171	add_filter( $filter, 'capital_P_dangit', 11 );
172}
173add_filter( 'comment_text', 'capital_P_dangit', 31 );
174
175// Format titles.
176foreach ( array( 'single_post_title', 'single_cat_title', 'single_tag_title', 'single_month_title', 'nav_menu_attr_title', 'nav_menu_description' ) as $filter ) {
177	add_filter( $filter, 'wptexturize' );
178	add_filter( $filter, 'strip_tags' );
179}
180
181// Format text area for display.
182foreach ( array( 'term_description', 'get_the_post_type_description' ) as $filter ) {
183	add_filter( $filter, 'wptexturize' );
184	add_filter( $filter, 'convert_chars' );
185	add_filter( $filter, 'wpautop' );
186	add_filter( $filter, 'shortcode_unautop' );
187}
188
189// Format for RSS.
190add_filter( 'term_name_rss', 'convert_chars' );
191
192// Pre save hierarchy.
193add_filter( 'wp_insert_post_parent', 'wp_check_post_hierarchy_for_loops', 10, 2 );
194add_filter( 'wp_update_term_parent', 'wp_check_term_hierarchy_for_loops', 10, 3 );
195
196// Display filters.
197add_filter( 'the_title', 'wptexturize' );
198add_filter( 'the_title', 'convert_chars' );
199add_filter( 'the_title', 'trim' );
200
201add_filter( 'the_content', 'apply_block_hooks_to_content_from_post_object', 8 ); // BEFORE do_blocks().
202add_filter( 'the_content', 'do_blocks', 9 );
203add_filter( 'the_content', 'wptexturize' );
204add_filter( 'the_content', 'convert_smilies', 20 );
205add_filter( 'the_content', 'wpautop' );
206add_filter( 'the_content', 'shortcode_unautop' );
207add_filter( 'the_content', 'prepend_attachment' );
208add_filter( 'the_content', 'wp_replace_insecure_home_url' );
209add_filter( 'the_content', 'do_shortcode', 11 ); // AFTER wpautop().
210add_filter( 'the_content', 'wp_filter_content_tags', 12 ); // Runs after do_shortcode().
211
212add_filter( 'the_excerpt', 'wptexturize' );
213add_filter( 'the_excerpt', 'convert_smilies' );
214add_filter( 'the_excerpt', 'convert_chars' );
215add_filter( 'the_excerpt', 'wpautop' );
216add_filter( 'the_excerpt', 'shortcode_unautop' );
217add_filter( 'the_excerpt', 'wp_replace_insecure_home_url' );
218add_filter( 'the_excerpt', 'wp_filter_content_tags', 12 );
219add_filter( 'get_the_excerpt', 'wp_trim_excerpt', 10, 2 );
220
221add_filter( 'the_post_thumbnail_caption', 'wptexturize' );
222add_filter( 'the_post_thumbnail_caption', 'convert_smilies' );
223add_filter( 'the_post_thumbnail_caption', 'convert_chars' );
224
225add_filter( 'comment_text', 'wptexturize' );
226add_filter( 'comment_text', 'convert_chars' );
227add_filter( 'comment_text', 'make_clickable', 9 );
228add_filter( 'comment_text', 'force_balance_tags', 25 );
229add_filter( 'comment_text', 'convert_smilies', 20 );
230add_filter( 'comment_text', 'wpautop', 30 );
231
232add_filter( 'comment_excerpt', 'convert_chars' );
233
234add_filter( 'list_cats', 'wptexturize' );
235
236add_filter( 'wp_sprintf', 'wp_sprintf_l', 10, 2 );
237
238add_filter( 'widget_text', 'balanceTags' );
239add_filter( 'widget_text_content', 'capital_P_dangit', 11 );
240add_filter( 'widget_text_content', 'wptexturize' );
241add_filter( 'widget_text_content', 'convert_smilies', 20 );
242add_filter( 'widget_text_content', 'wpautop' );
243add_filter( 'widget_text_content', 'shortcode_unautop' );
244add_filter( 'widget_text_content', 'wp_replace_insecure_home_url' );
245add_filter( 'widget_text_content', 'do_shortcode', 11 ); // Runs after wpautop(); note that $post global will be null when shortcodes run.
246add_filter( 'widget_text_content', 'wp_filter_content_tags', 12 ); // Runs after do_shortcode().
247
248add_filter( 'widget_block_content', 'do_blocks', 9 );
249add_filter( 'widget_block_content', 'do_shortcode', 11 );
250add_filter( 'widget_block_content', 'wp_filter_content_tags', 12 ); // Runs after do_shortcode().
251
252add_filter( 'block_type_metadata', 'wp_migrate_old_typography_shape' );
253
254add_filter( 'wp_get_custom_css', 'wp_replace_insecure_home_url' );
255
256// RSS filters.
257add_filter( 'the_title_rss', 'strip_tags' );
258add_filter( 'the_title_rss', 'ent2ncr', 8 );
259add_filter( 'the_title_rss', 'esc_html' );
260add_filter( 'the_content_rss', 'ent2ncr', 8 );
261add_filter( 'the_content_feed', 'wp_staticize_emoji' );
262add_filter( 'the_content_feed', '_oembed_filter_feed_content' );
263add_filter( 'the_excerpt_rss', 'convert_chars' );
264add_filter( 'the_excerpt_rss', 'ent2ncr', 8 );
265add_filter( 'comment_author_rss', 'ent2ncr', 8 );
266add_filter( 'comment_text_rss', 'ent2ncr', 8 );
267add_filter( 'comment_text_rss', 'esc_html' );
268add_filter( 'comment_text_rss', 'wp_staticize_emoji' );
269add_filter( 'bloginfo_rss', 'ent2ncr', 8 );
270add_filter( 'the_author', 'ent2ncr', 8 );
271add_filter( 'the_guid', 'esc_url' );
272
273// Email filters.
274add_filter( 'wp_mail', 'wp_staticize_emoji_for_email' );
275
276// Robots filters.
277add_filter( 'wp_robots', 'wp_robots_noindex' );
278add_filter( 'wp_robots', 'wp_robots_noindex_embeds' );
279add_filter( 'wp_robots', 'wp_robots_noindex_search' );
280add_filter( 'wp_robots', 'wp_robots_max_image_preview_large' );
281
282// Mark site as no longer fresh.
283foreach (
284	array(
285		'publish_post',
286		'publish_page',
287		'wp_ajax_save-widget',
288		'wp_ajax_widgets-order',
289		'customize_save_after',
290		'rest_after_save_widget',
291		'rest_delete_widget',
292		'rest_save_sidebar',
293	) as $action
294) {
295	add_action( $action, '_delete_option_fresh_site', 0 );
296}
297
298// Misc filters.
299add_filter( 'wp_default_autoload_value', 'wp_filter_default_autoload_value_via_option_size', 5, 4 ); // Allow the value to be overridden at the default priority.
300add_filter( 'option_ping_sites', 'privacy_ping_filter' );
301add_filter( 'option_blog_charset', '_wp_specialchars' ); // IMPORTANT: This must not be wp_specialchars() or esc_html() or it'll cause an infinite loop.
302add_filter( 'option_blog_charset', '_canonical_charset' );
303add_filter( 'option_home', '_config_wp_home' );
304add_filter( 'option_siteurl', '_config_wp_siteurl' );
305add_filter( 'tiny_mce_before_init', '_mce_set_direction' );
306add_filter( 'teeny_mce_before_init', '_mce_set_direction' );
307add_filter( 'pre_kses', 'wp_pre_kses_less_than' );
308add_filter( 'pre_kses', 'wp_pre_kses_block_attributes', 10, 3 );
309add_filter( 'sanitize_title', 'sanitize_title_with_dashes', 10, 3 );
310add_action( 'check_comment_flood', 'check_comment_flood_db', 10, 4 );
311add_filter( 'comment_flood_filter', 'wp_throttle_comment_flood', 10, 3 );
312add_filter( 'pre_comment_content', 'wp_rel_ugc', 15 );
313add_filter( 'comment_email', 'antispambot' );
314add_filter( 'option_tag_base', '_wp_filter_taxonomy_base' );
315add_filter( 'option_category_base', '_wp_filter_taxonomy_base' );
316add_filter( 'the_posts', '_close_comments_for_old_posts', 10, 2 );
317add_filter( 'comments_open', '_close_comments_for_old_post', 10, 2 );
318add_filter( 'pings_open', '_close_comments_for_old_post', 10, 2 );
319add_filter( 'editable_slug', 'urldecode' );
320add_filter( 'editable_slug', 'esc_textarea' );
321add_filter( 'pingback_ping_source_uri', 'pingback_ping_source_uri' );
322add_filter( 'xmlrpc_pingback_error', 'xmlrpc_pingback_error' );
323add_filter( 'title_save_pre', 'trim' );
324
325add_action( 'transition_comment_status', '_clear_modified_cache_on_transition_comment_status', 10, 2 );
326
327add_filter( 'http_request_host_is_external', 'allowed_http_request_hosts', 10, 2 );
328
329// REST API filters.
330add_action( 'xmlrpc_rsd_apis', 'rest_output_rsd' );
331add_action( 'wp_head', 'rest_output_link_wp_head', 10, 0 );
332add_action( 'template_redirect', 'rest_output_link_header', 11, 0 );
333add_action( 'auth_cookie_malformed', 'rest_cookie_collect_status' );
334add_action( 'auth_cookie_expired', 'rest_cookie_collect_status' );
335add_action( 'auth_cookie_bad_username', 'rest_cookie_collect_status' );
336add_action( 'auth_cookie_bad_hash', 'rest_cookie_collect_status' );
337add_action( 'auth_cookie_valid', 'rest_cookie_collect_status' );
338add_action( 'application_password_failed_authentication', 'rest_application_password_collect_status' );
339add_action( 'application_password_did_authenticate', 'rest_application_password_collect_status', 10, 2 );
340add_filter( 'rest_authentication_errors', 'rest_application_password_check_errors', 90 );
341add_filter( 'rest_authentication_errors', 'rest_cookie_check_errors', 100 );
342
343// Actions.
344add_action( 'wp_head', '_wp_render_title_tag', 1 );
345add_action( 'wp_head', 'wp_enqueue_scripts', 1 );
346add_action( 'wp_head', 'wp_resource_hints', 2 );
347add_action( 'wp_head', 'wp_preload_resources', 1 );
348add_action( 'wp_head', 'feed_links', 2 );
349add_action( 'wp_head', 'feed_links_extra', 3 );
350add_action( 'wp_head', 'rsd_link' );
351add_action( 'wp_head', 'locale_stylesheet' );
352add_action( 'publish_future_post', 'check_and_publish_future_post', 10, 1 );
353add_action( 'wp_head', 'wp_robots', 1 );
354add_action( 'wp_head', 'print_emoji_detection_script', 7 );
355add_action( 'wp_head', 'wp_print_styles', 8 );
356add_action( 'wp_head', 'wp_print_head_scripts', 9 );
357add_action( 'wp_head', 'wp_generator' );
358add_action( 'wp_head', 'rel_canonical' );
359add_action( 'wp_head', 'wp_shortlink_wp_head', 10, 0 );
360add_action( 'wp_head', 'wp_custom_css_cb', 101 );
361add_action( 'wp_head', 'wp_site_icon', 99 );
362add_action( 'wp_footer', 'wp_print_speculation_rules' );
363add_action( 'wp_footer', 'wp_print_footer_scripts', 20 );
364add_action( 'template_redirect', 'wp_shortlink_header', 11, 0 );
365add_action( 'wp_print_footer_scripts', '_wp_footer_scripts' );
366add_action( 'init', '_register_core_block_patterns_and_categories' );
367add_action( 'init', 'check_theme_switched', 99 );
368add_action( 'init', array( 'WP_Block_Supports', 'init' ), 22 );
369add_action( 'switch_theme', 'wp_clean_theme_json_cache' );
370add_action( 'start_previewing_theme', 'wp_clean_theme_json_cache' );
371add_action( 'after_switch_theme', '_wp_menus_changed' );
372add_action( 'after_switch_theme', '_wp_sidebars_changed' );
373add_action( 'wp_enqueue_scripts', 'wp_enqueue_emoji_styles' );
374add_action( 'wp_print_styles', 'print_emoji_styles' ); // Retained for backwards-compatibility. Unhooked by wp_enqueue_emoji_styles().
375
376if (
377	// Comment reply link.
378	isset( $_GET['replytocom'] )
379	||
380	// Unapproved comment preview.
381	( isset( $_GET['unapproved'] ) && isset( $_GET['moderation-hash'] ) )
382) {
383	add_filter( 'wp_robots', 'wp_robots_no_robots' );
384}
385
386// Login actions.
387add_action( 'login_head', 'wp_robots', 1 );
388add_filter( 'login_head', 'wp_resource_hints', 8 );
389add_action( 'login_head', 'wp_print_head_scripts', 9 );
390add_action( 'login_head', 'print_admin_styles', 9 );
391add_action( 'login_head', 'wp_site_icon', 99 );
392add_action( 'login_footer', 'wp_print_footer_scripts', 20 );
393add_action( 'login_init', 'send_frame_options_header', 10, 0 );
394add_action( 'login_init', 'wp_admin_headers' );
395
396// Feed generator tags.
397foreach ( array( 'rss2_head', 'commentsrss2_head', 'rss_head', 'rdf_header', 'atom_head', 'comments_atom_head', 'opml_head', 'app_head' ) as $action ) {
398	add_action( $action, 'the_generator' );
399}
400
401// Feed Site Icon.
402add_action( 'atom_head', 'atom_site_icon' );
403add_action( 'rss2_head', 'rss2_site_icon' );
404
405
406// WP Cron.
407if ( ! defined( 'DOING_CRON' ) ) {
408	add_action( 'init', 'wp_cron' );
409}
410
411// HTTPS migration.
412add_action( 'update_option_home', 'wp_update_https_migration_required', 10, 2 );
413
414// 2 Actions 2 Furious.
415add_action( 'do_feed_rdf', 'do_feed_rdf', 10, 0 );
416add_action( 'do_feed_rss', 'do_feed_rss', 10, 0 );
417add_action( 'do_feed_rss2', 'do_feed_rss2', 10, 1 );
418add_action( 'do_feed_atom', 'do_feed_atom', 10, 1 );
419add_action( 'do_pings', 'do_all_pings', 10, 0 );
420add_action( 'do_all_pings', 'do_all_pingbacks', 10, 0 );
421add_action( 'do_all_pings', 'do_all_enclosures', 10, 0 );
422add_action( 'do_all_pings', 'do_all_trackbacks', 10, 0 );
423add_action( 'do_all_pings', 'generic_ping', 10, 0 );
424add_action( 'do_robots', 'do_robots' );
425add_action( 'do_favicon', 'do_favicon' );
426add_action( 'wp_before_include_template', 'wp_start_template_enhancement_output_buffer', 1000 ); // Late priority to let `wp_template_enhancement_output_buffer` filters and `wp_finalized_template_enhancement_output_buffer` actions be registered.
427add_action( 'set_comment_cookies', 'wp_set_comment_cookies', 10, 3 );
428add_action( 'sanitize_comment_cookies', 'sanitize_comment_cookies' );
429add_action( 'init', 'smilies_init', 5 );
430add_action( 'plugins_loaded', 'wp_maybe_load_widgets', 0 );
431add_action( 'plugins_loaded', 'wp_maybe_load_embeds', 0 );
432add_action( 'shutdown', 'wp_ob_end_flush_all', 1 );
433// Create a revision whenever a post is updated.
434add_action( 'wp_after_insert_post', 'wp_save_post_revision_on_insert', 9, 3 );
435add_action( 'post_updated', 'wp_save_post_revision', 10, 1 );
436add_action( 'publish_post', '_publish_post_hook', 5, 1 );
437add_action( 'transition_post_status', '_transition_post_status', 5, 3 );
438add_action( 'transition_post_status', '_update_term_count_on_transition_post_status', 10, 3 );
439add_action( 'comment_form', 'wp_comment_form_unfiltered_html_nonce' );
440
441// Privacy.
442add_action( 'user_request_action_confirmed', '_wp_privacy_account_request_confirmed' );
443add_action( 'user_request_action_confirmed', '_wp_privacy_send_request_confirmation_notification', 12 ); // After request marked as completed.
444add_filter( 'wp_privacy_personal_data_exporters', 'wp_register_comment_personal_data_exporter' );
445add_filter( 'wp_privacy_personal_data_exporters', 'wp_register_media_personal_data_exporter' );
446add_filter( 'wp_privacy_personal_data_exporters', 'wp_register_user_personal_data_exporter', 1 );
447add_filter( 'wp_privacy_personal_data_erasers', 'wp_register_comment_personal_data_eraser' );
448add_action( 'init', 'wp_schedule_delete_old_privacy_export_files' );
449add_action( 'wp_privacy_delete_old_export_files', 'wp_privacy_delete_old_export_files' );
450
451// Cron tasks.
452add_action( 'wp_scheduled_delete', 'wp_scheduled_delete' );
453add_action( 'wp_scheduled_auto_draft_delete', 'wp_delete_auto_drafts' );
454add_action( 'importer_scheduled_cleanup', 'wp_delete_attachment' );
455add_action( 'upgrader_scheduled_cleanup', 'wp_delete_attachment' );
456add_action( 'delete_expired_transients', 'delete_expired_transients' );
457
458// Navigation menu actions.
459add_action( 'delete_post', '_wp_delete_post_menu_item' );
460add_action( 'delete_term', '_wp_delete_tax_menu_item', 10, 3 );
461add_action( 'transition_post_status', '_wp_auto_add_pages_to_menu', 10, 3 );
462add_action( 'delete_post', '_wp_delete_customize_changeset_dependent_auto_drafts' );
463
464// Post Thumbnail specific image filtering.
465add_action( 'begin_fetch_post_thumbnail_html', '_wp_post_thumbnail_class_filter_add' );
466add_action( 'end_fetch_post_thumbnail_html', '_wp_post_thumbnail_class_filter_remove' );
467add_action( 'begin_fetch_post_thumbnail_html', '_wp_post_thumbnail_context_filter_add' );
468add_action( 'end_fetch_post_thumbnail_html', '_wp_post_thumbnail_context_filter_remove' );
469
470// Redirect old slugs.
471add_action( 'template_redirect', 'wp_old_slug_redirect' );
472add_action( 'post_updated', 'wp_check_for_changed_slugs', 12, 3 );
473add_action( 'attachment_updated', 'wp_check_for_changed_slugs', 12, 3 );
474
475// Redirect old dates.
476add_action( 'post_updated', 'wp_check_for_changed_dates', 12, 3 );
477add_action( 'attachment_updated', 'wp_check_for_changed_dates', 12, 3 );
478
479// Nonce check for post previews.
480add_action( 'init', '_show_post_preview' );
481
482// Output JS to reset window.name for previews.
483add_action( 'wp_head', 'wp_post_preview_js', 1 );
484
485// Timezone.
486add_filter( 'pre_option_gmt_offset', 'wp_timezone_override_offset' );
487
488// If the upgrade hasn't run yet, assume link manager is used.
489add_filter( 'default_option_link_manager_enabled', '__return_true' );
490
491// This option no longer exists; tell plugins we always support auto-embedding.
492add_filter( 'pre_option_embed_autourls', '__return_true' );
493
494// Default settings for heartbeat.
495add_filter( 'heartbeat_settings', 'wp_heartbeat_settings' );
496
497// Check if the user is logged out.
498add_action( 'admin_enqueue_scripts', 'wp_auth_check_load' );
499add_filter( 'heartbeat_send', 'wp_auth_check' );
500add_filter( 'heartbeat_nopriv_send', 'wp_auth_check' );
501
502// Default authentication filters.
503add_filter( 'authenticate', 'wp_authenticate_username_password', 20, 3 );
504add_filter( 'authenticate', 'wp_authenticate_email_password', 20, 3 );
505add_filter( 'authenticate', 'wp_authenticate_application_password', 20, 3 );
506add_filter( 'authenticate', 'wp_authenticate_spam_check', 99 );
507add_filter( 'determine_current_user', 'wp_validate_auth_cookie' );
508add_filter( 'determine_current_user', 'wp_validate_logged_in_cookie', 20 );
509add_filter( 'determine_current_user', 'wp_validate_application_password', 20 );
510
511// Split term updates.
512add_action( 'admin_init', '_wp_check_for_scheduled_split_terms' );
513add_action( 'split_shared_term', '_wp_check_split_default_terms', 10, 4 );
514add_action( 'split_shared_term', '_wp_check_split_terms_in_menus', 10, 4 );
515add_action( 'split_shared_term', '_wp_check_split_nav_menu_terms', 10, 4 );
516add_action( 'wp_split_shared_term_batch', '_wp_batch_split_terms' );
517
518// Comment type updates.
519add_action( 'admin_init', '_wp_check_for_scheduled_update_comment_type' );
520add_action( 'wp_update_comment_type_batch', '_wp_batch_update_comment_type' );
521
522// Email notifications.
523add_action( 'comment_post', 'wp_new_comment_notify_moderator' );
524add_action( 'comment_post', 'wp_new_comment_notify_postauthor' );
525add_action( 'rest_insert_comment', 'wp_new_comment_via_rest_notify_postauthor' );
526add_action( 'after_password_reset', 'wp_password_change_notification' );
527add_action( 'register_new_user', 'wp_send_new_user_notifications' );
528add_action( 'edit_user_created_user', 'wp_send_new_user_notifications', 10, 2 );
529
530// REST API actions.
531add_action( 'init', 'rest_api_init' );
532add_action( 'rest_api_init', 'rest_api_default_filters', 10, 1 );
533add_action( 'rest_api_init', 'register_initial_settings', 10 );
534add_action( 'rest_api_init', 'create_initial_rest_routes', 99 );
535add_action( 'parse_request', 'rest_api_loaded' );
536
537// Abilities API.
538add_action( 'wp_abilities_api_categories_init', 'wp_register_core_ability_categories' );
539add_action( 'wp_abilities_api_init', 'wp_register_core_abilities' );
540
541// Sitemaps actions.
542add_action( 'init', 'wp_sitemaps_get_server' );
543
544/**
545 * Filters formerly mixed into wp-includes.
546 */
547// Theme.
548add_action( 'setup_theme', 'create_initial_theme_features', 0 );
549add_action( 'after_setup_theme', '_add_default_theme_supports', 1 );
550add_action( 'wp_loaded', '_custom_header_background_just_in_time' );
551add_action( 'wp_head', '_custom_logo_header_styles' );
552add_action( 'plugins_loaded', '_wp_customize_include' );
553add_action( 'transition_post_status', '_wp_customize_publish_changeset', 10, 3 );
554add_action( 'admin_enqueue_scripts', '_wp_customize_loader_settings' );
555add_action( 'delete_attachment', '_delete_attachment_theme_mod' );
556add_action( 'transition_post_status', '_wp_keep_alive_customize_changeset_dependent_auto_drafts', 20, 3 );
557
558// Block Theme Previews.
559add_action( 'plugins_loaded', 'wp_initialize_theme_preview_hooks', 1 );
560
561// Site preview for Classic Theme.
562add_action( 'init', 'wp_initialize_site_preview_hooks', 1 );
563
564// Calendar widget cache.
565add_action( 'save_post', 'delete_get_calendar_cache' );
566add_action( 'delete_post', 'delete_get_calendar_cache' );
567add_action( 'update_option_start_of_week', 'delete_get_calendar_cache' );
568add_action( 'update_option_gmt_offset', 'delete_get_calendar_cache' );
569
570// Author.
571add_action( 'transition_post_status', '__clear_multi_author_cache' );
572
573// Post.
574add_action( 'init', 'create_initial_post_types', 0 ); // Highest priority.
575add_action( 'admin_menu', '_add_post_type_submenus' );
576add_action( 'before_delete_post', '_reset_front_page_settings_for_post' );
577add_action( 'wp_trash_post', '_reset_front_page_settings_for_post' );
578add_action( 'change_locale', 'create_initial_post_types' );
579
580// Post Formats.
581add_filter( 'request', '_post_format_request' );
582add_filter( 'term_link', '_post_format_link', 10, 3 );
583add_filter( 'get_post_format', '_post_format_get_term' );
584add_filter( 'get_terms', '_post_format_get_terms', 10, 3 );
585add_filter( 'wp_get_object_terms', '_post_format_wp_get_object_terms' );
586
587// KSES.
588add_action( 'init', 'kses_init' );
589add_action( 'set_current_user', 'kses_init' );
590
591// Script Loader.
592add_action( 'wp_default_scripts', 'wp_default_scripts' );
593add_action( 'wp_default_scripts', 'wp_default_packages' );
594add_action( 'wp_default_scripts', 'wp_default_script_modules' );
595
596add_action( 'wp_enqueue_scripts', 'wp_localize_jquery_ui_datepicker', 1000 );
597add_action( 'wp_enqueue_scripts', 'wp_common_block_scripts_and_styles' );
598add_action( 'wp_enqueue_scripts', 'wp_enqueue_classic_theme_styles' );
599add_action( 'admin_enqueue_scripts', 'wp_localize_jquery_ui_datepicker', 1000 );
600add_action( 'admin_enqueue_scripts', 'wp_common_block_scripts_and_styles' );
601add_action( 'admin_enqueue_scripts', 'wp_enqueue_command_palette_assets' );
602add_action( 'enqueue_block_assets', 'wp_enqueue_classic_theme_styles' );
603add_action( 'enqueue_block_assets', 'wp_enqueue_registered_block_scripts_and_styles' );
604add_action( 'enqueue_block_assets', 'enqueue_block_styles_assets', 30 );
605add_action( 'init', 'wp_load_classic_theme_block_styles_on_demand', 8 ); // Must happen before register_core_block_style_handles() at priority 9.
606/*
607 * `wp_enqueue_registered_block_scripts_and_styles` is bound to both
608 * `enqueue_block_editor_assets` and `enqueue_block_assets` hooks
609 * since the introduction of the block editor in WordPress 5.0.
610 *
611 * The way this works is that the block assets are loaded before any other assets.
612 * For example, this is the order of styles for the editor:
613 *
614 * - front styles registered for blocks, via `styles` handle (block.json)
615 * - editor styles registered for blocks, via `editorStyles` handle (block.json)
616 * - editor styles enqueued via `enqueue_block_editor_assets` hook
617 * - front styles enqueued via `enqueue_block_assets` hook
618 */
619add_action( 'enqueue_block_editor_assets', 'wp_enqueue_registered_block_scripts_and_styles' );
620add_action( 'enqueue_block_editor_assets', 'enqueue_editor_block_styles_assets' );
621add_action( 'enqueue_block_editor_assets', 'wp_enqueue_editor_block_directory_assets' );
622add_action( 'enqueue_block_editor_assets', 'wp_enqueue_editor_format_library_assets' );
623add_action( 'enqueue_block_editor_assets', 'wp_enqueue_global_styles_css_custom_properties' );
624add_action( 'wp_print_scripts', 'wp_just_in_time_script_localization' );
625add_filter( 'print_scripts_array', 'wp_prototype_before_jquery' );
626add_action( 'customize_controls_print_styles', 'wp_resource_hints', 1 );
627add_action( 'admin_head', 'wp_check_widget_editor_deps' );
628
629// Global styles can be enqueued in both the header and the footer. See https://core.trac.wordpress.org/ticket/53494.
630add_action( 'wp_enqueue_scripts', 'wp_enqueue_global_styles' );
631add_action( 'wp_footer', 'wp_enqueue_global_styles', 1 );
632
633// Block supports, and other styles parsed and stored in the Style Engine.
634add_action( 'wp_enqueue_scripts', 'wp_enqueue_stored_styles' );
635add_action( 'wp_footer', 'wp_enqueue_stored_styles', 1 );
636
637add_action( 'wp_default_styles', 'wp_default_styles' );
638add_filter( 'style_loader_src', 'wp_style_loader_src', 10, 2 );
639
640add_action( 'wp_head', 'wp_enqueue_img_auto_sizes_contain_css_fix', 0 ); // Must run before wp_print_auto_sizes_contain_css_fix().
641add_action( 'wp_head', 'wp_print_auto_sizes_contain_css_fix', 1 ); // Retained for backwards-compatibility. Unhooked by wp_enqueue_img_auto_sizes_contain_css_fix().
642add_action( 'wp_head', 'wp_maybe_inline_styles', 1 ); // Run for styles enqueued in <head>.
643add_action( 'wp_footer', 'wp_maybe_inline_styles', 1 ); // Run for late-loaded styles in the footer.
644
645/*
646 * Block specific actions and filters.
647 */
648
649// Footnotes Block.
650add_action( 'init', '_wp_footnotes_kses_init' );
651add_action( 'set_current_user', '_wp_footnotes_kses_init' );
652add_filter( 'force_filtered_html_on_import', '_wp_footnotes_force_filtered_html_on_import_filter', 999 );
653
654/*
655 * Disable "Post Attributes" for wp_navigation post type. The attributes are
656 * also conditionally enabled when a site has custom templates. Block Theme
657 * templates can be available for every post type.
658 */
659add_filter( 'theme_wp_navigation_templates', '__return_empty_array' );
660
661// Taxonomy.
662add_action( 'init', 'create_initial_taxonomies', 0 ); // Highest priority.
663add_action( 'change_locale', 'create_initial_taxonomies' );
664
665// Canonical.
666add_action( 'template_redirect', 'redirect_canonical' );
667add_action( 'template_redirect', 'wp_redirect_admin_locations', 1000 );
668
669// Media.
670add_action( 'wp_playlist_scripts', 'wp_playlist_scripts' );
671add_action( 'customize_controls_enqueue_scripts', 'wp_plupload_default_settings' );
672add_action( 'plugins_loaded', '_wp_add_additional_image_sizes', 0 );
673add_filter( 'plupload_default_settings', 'wp_show_heic_upload_error' );
674
675// Nav menu.
676add_filter( 'nav_menu_item_id', '_nav_menu_item_id_use_once', 10, 2 );
677add_filter( 'nav_menu_css_class', 'wp_nav_menu_remove_menu_item_has_children_class', 10, 4 );
678
679// Widgets.
680add_action( 'after_setup_theme', 'wp_setup_widgets_block_editor', 1 );
681add_action( 'init', 'wp_widgets_init', 1 );
682add_action( 'change_locale', array( 'WP_Widget_Media', 'reset_default_labels' ) );
683add_action( 'widgets_init', '_wp_block_theme_register_classic_sidebars', 1 );
684
685// Admin Bar.
686// Don't remove. Wrong way to disable.
687add_action( 'template_redirect', '_wp_admin_bar_init', 0 );
688add_action( 'admin_init', '_wp_admin_bar_init' );
689add_action( 'wp_enqueue_scripts', 'wp_enqueue_admin_bar_bump_styles' );
690add_action( 'wp_enqueue_scripts', 'wp_enqueue_admin_bar_header_styles' );
691add_action( 'admin_enqueue_scripts', 'wp_enqueue_admin_bar_header_styles' );
692add_action( 'before_signup_header', '_wp_admin_bar_init' );
693add_action( 'activate_header', '_wp_admin_bar_init' );
694add_action( 'wp_body_open', 'wp_admin_bar_render', 0 );
695add_action( 'wp_footer', 'wp_admin_bar_render', 1000 ); // Back-compat for themes not using `wp_body_open`.
696add_action( 'in_admin_header', 'wp_admin_bar_render', 0 );
697
698// Former admin filters that can also be hooked on the front end.
699add_action( 'media_buttons', 'media_buttons' );
700add_filter( 'image_send_to_editor', 'image_add_caption', 20, 8 );
701add_filter( 'media_send_to_editor', 'image_media_send_to_editor', 10, 3 );
702
703// Embeds.
704add_action( 'rest_api_init', 'wp_oembed_register_route' );
705add_filter( 'rest_pre_serve_request', '_oembed_rest_pre_serve_request', 10, 4 );
706
707add_action( 'wp_head', 'wp_oembed_add_discovery_links', 4 ); // Printed after feed_links() and feed_links_extra().
708add_action( 'wp_head', 'wp_oembed_add_discovery_links' ); // Unhooked the first time that wp_oembed_add_discovery_links() runs for back-compat.
709add_action( 'wp_head', 'wp_oembed_add_host_js' ); // Back-compat for sites disabling oEmbed host JS by removing action.
710add_filter( 'embed_oembed_html', 'wp_maybe_enqueue_oembed_host_js' );
711
712add_action( 'embed_head', 'enqueue_embed_scripts', 1 );
713add_action( 'embed_head', 'print_emoji_detection_script' );
714add_action( 'embed_head', 'wp_enqueue_embed_styles', 9 );
715add_action( 'embed_head', 'print_embed_styles' ); // Retained for backwards-compatibility. Unhooked by wp_enqueue_embed_styles().
716add_action( 'embed_head', 'wp_print_head_scripts', 20 );
717add_action( 'embed_head', 'wp_print_styles', 20 );
718add_action( 'embed_head', 'wp_robots' );
719add_action( 'embed_head', 'rel_canonical' );
720add_action( 'embed_head', 'locale_stylesheet', 30 );
721add_action( 'enqueue_embed_scripts', 'wp_enqueue_emoji_styles' );
722
723add_action( 'embed_content_meta', 'print_embed_comments_button' );
724add_action( 'embed_content_meta', 'print_embed_sharing_button' );
725
726add_action( 'embed_footer', 'print_embed_sharing_dialog' );
727add_action( 'embed_footer', 'print_embed_scripts' );
728add_action( 'embed_footer', 'wp_print_footer_scripts', 20 );
729
730add_filter( 'excerpt_more', 'wp_embed_excerpt_more', 20 );
731add_filter( 'the_excerpt_embed', 'wptexturize' );
732add_filter( 'the_excerpt_embed', 'convert_chars' );
733add_filter( 'the_excerpt_embed', 'wpautop' );
734add_filter( 'the_excerpt_embed', 'shortcode_unautop' );
735add_filter( 'the_excerpt_embed', 'wp_embed_excerpt_attachment' );
736
737add_filter( 'oembed_dataparse', 'wp_filter_oembed_iframe_title_attribute', 5, 3 );
738add_filter( 'oembed_dataparse', 'wp_filter_oembed_result', 10, 3 );
739add_filter( 'oembed_response_data', 'get_oembed_response_data_rich', 10, 4 );
740add_filter( 'pre_oembed_result', 'wp_filter_pre_oembed_result', 10, 3 );
741
742// Capabilities.
743add_filter( 'user_has_cap', 'wp_maybe_grant_install_languages_cap', 1 );
744add_filter( 'user_has_cap', 'wp_maybe_grant_resume_extensions_caps', 1 );
745add_filter( 'user_has_cap', 'wp_maybe_grant_site_health_caps', 1, 4 );
746
747// Block templates post type and rendering.
748add_filter( 'render_block_context', '_block_template_render_without_post_block_context' );
749add_filter( 'pre_wp_unique_post_slug', 'wp_filter_wp_template_unique_post_slug', 10, 5 );
750add_action( 'save_post_wp_template_part', 'wp_set_unique_slug_on_create_template_part' );
751add_action( 'wp_enqueue_scripts', 'wp_enqueue_block_template_skip_link' );
752add_action( 'wp_footer', 'the_block_template_skip_link' ); // Retained for backwards-compatibility. Unhooked by wp_enqueue_block_template_skip_link().
753add_action( 'after_setup_theme', 'wp_enable_block_templates', 1 );
754add_action( 'wp_loaded', '_add_template_loader_filters' );
755
756// wp_navigation post type.
757add_filter( 'rest_wp_navigation_item_schema', array( 'WP_Navigation_Fallback', 'update_wp_navigation_post_schema' ) );
758
759// Fluid typography.
760add_filter( 'render_block', 'wp_render_typography_support', 10, 2 );
761
762// User preferences.
763add_action( 'init', 'wp_register_persisted_preferences_meta' );
764
765// CPT wp_block custom postmeta field.
766add_action( 'init', 'wp_create_initial_post_meta' );
767
768// Include revisioned meta when considering whether a post revision has changed.
769add_filter( 'wp_save_post_revision_post_has_changed', 'wp_check_revisioned_meta_fields_have_changed', 10, 3 );
770
771// Save revisioned post meta immediately after a revision is saved
772add_action( '_wp_put_post_revision', 'wp_save_revisioned_meta_fields', 10, 2 );
773
774// Include revisioned meta when creating or updating an autosave revision.
775add_action( 'wp_creating_autosave', 'wp_autosave_post_revisioned_meta_fields' );
776
777// When restoring revisions, also restore revisioned meta.
778add_action( 'wp_restore_post_revision', 'wp_restore_post_revision_meta', 10, 2 );
779
780// Font management.
781add_action( 'wp_head', 'wp_print_font_faces', 50 );
782add_action( 'deleted_post', '_wp_after_delete_font_family', 10, 2 );
783add_action( 'before_delete_post', '_wp_before_delete_font_face', 10, 2 );
784add_action( 'init', '_wp_register_default_font_collections' );
785
786// Add ignoredHookedBlocks metadata attribute to the template and template part post types.
787add_filter( 'rest_pre_insert_wp_template', 'inject_ignored_hooked_blocks_metadata_attributes' );
788add_filter( 'rest_pre_insert_wp_template_part', 'inject_ignored_hooked_blocks_metadata_attributes' );
789
790// Update ignoredHookedBlocks postmeta for some post types.
791add_filter( 'rest_pre_insert_page', 'update_ignored_hooked_blocks_postmeta' );
792add_filter( 'rest_pre_insert_post', 'update_ignored_hooked_blocks_postmeta' );
793add_filter( 'rest_pre_insert_wp_block', 'update_ignored_hooked_blocks_postmeta' );
794add_filter( 'rest_pre_insert_wp_navigation', 'update_ignored_hooked_blocks_postmeta' );
795
796// Inject hooked blocks into the Posts endpoint REST response for some given post types.
797add_filter( 'rest_prepare_page', 'insert_hooked_blocks_into_rest_response', 10, 2 );
798add_filter( 'rest_prepare_post', 'insert_hooked_blocks_into_rest_response', 10, 2 );
799add_filter( 'rest_prepare_wp_block', 'insert_hooked_blocks_into_rest_response', 10, 2 );
800add_filter( 'rest_prepare_wp_navigation', 'insert_hooked_blocks_into_rest_response', 10, 2 );
801
802unset( $filter, $action );
803