Changeset 39222 for trunk/src/wp-includes/rest-api.php

Timestamp:

11/14/2016 04:35:35 PM (10 years ago)

Author:

joehoyle

Message:

REST API: Validate and Sanitize registered meta based off the schema.

With the addition of Array support in our schema validation functions, it's now possible to use these in the meta validation and sanitization steps. Also, this increases the test coverage of using registered via meta the API significantly.

Fixes #38531.
Props rachelbaker, tharsheblows.

File:

• trunk/src/wp-includes/rest-api.php (modified) (3 diffs)

trunk/src/wp-includes/rest-api.php

@@ -998 +998 @@
                 if ( ! is_array( $value ) ) {
                         $value = preg_split( '/[\s,]+/', $value );
+                }
+                if ( ! wp_is_numeric_array( $value ) ) {
+                        return new WP_Error( 'rest_invalid_param', sprintf( /* translators: 1: parameter, 2: type name */ __( '%1$s is not of type %2$s.' ), $param, 'array' ) );
                 }
                 foreach ( $value as $index => $v ) {
@@ -1108 +1111 @@
                         $value[ $index ] = rest_sanitize_value_from_schema( $v, $args['items'] );
                 }
+                // Normalize to numeric array so nothing unexpected
+                // is in the keys.
+                $value = array_values( $value );
                 return $value;
         }
@@ -1141 +1147 @@
         }
 
+        if ( 'string' === $args['type'] ) {
+                return strval( $value );
+        }
+
         return $value;
 }