Changeset 43682 for branches/5.0/src/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php

Timestamp:

10/08/2018 10:44:05 PM (6 years ago)

Author:

danielbachhuber

Message:

REST API: Declare unfiltered_html capability in links.

Because user capabilities can be modified at runtime, the REST API needs to expose them in some evaluated but declarative manner for clients to interpret. JSON Hyper Schema targetSchema provides an appropriate paradigm for doing so.

Props timothyblynjacobs.
Fixes #45014.

File:

• branches/5.0/src/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php (modified) (2 diffs)

branches/5.0/src/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php

@@ -1769 +1769 @@
         if ( 'attachment' !== $this->post_type && current_user_can( $post_type->cap->publish_posts ) ) {
             $rels[] = 'https://api.w.org/action-publish';
+        }
+
+        if ( current_user_can( 'unfiltered_html' ) ) {
+            $rels[] = 'https://api.w.org/action-unfiltered-html';
         }
 
@@ -2180 +2184 @@
         }
 
+        $links[] = array(
+            'rel'          => 'https://api.w.org/action-unfiltered-html',
+            'title'        => __( 'The current user can post unfiltered HTML markup and JavaScript.' ),
+            'href'         => $href,
+            'targetSchema' => array(
+                'type'        => 'object',
+                'properties'  => array(
+                    'content' => array(
+                        'raw' => array(
+                            'type' => 'string',
+                        ),
+                    ),
+                ),
+            ),
+        );
+
         if ( 'post' === $this->post_type ) {
             $links[] = array(