Both a defect and an enhancement.
Attached:
- Remove wp_clean_ajax_input() from admin-ajax.php. I can't remember why it's there. It may have been necessary at one point, but now it just urldecodes strings that are already udecoded. To test, try adding the category "no amp here: %26" via ajax cat. Pre-patch, you'll see: "no amp here: &". Post-patch you'll see "no amp here: %26".
- Allow plugins to use admin-ajax.php by firing 'wp_ajax_$action' if there's no hardcoded case.
- Use full path for AJAX response handler to avoid nastiness.
- Allow plugins to use listMan library with their own AJAX response handler.
- Make listMan object a little more usable to plugin JS.
- Step toward getting rid of nasty eval()s.