Context Navigation

← Previous Change
Next Change →

class-wp-rest-posts-controller.php

Timestamp:

09/30/2025 04:59:37 PM (10 months ago)

Author:

desrosj

Message:

Grouped backports for the 6.7 branch.

REST API: Increase the specificity of capability checks for collections when the edit context is in use.
Menus: Prevent HTML in menu item titles from being rendered unexpectedly.

Merges [60814], [60815], [60816] to the 6.7 branch.

Props andraganescu, desrosj, ehti, hurayraiit, iandunn, joehoyle, johnbillion, jorbin, mnelson4, noisysocks, peterwilsoncc, phillsav, rmccue, timothyblynjacobs, vortfu, westonruter , whyisjake, zieladam.

Location:

branches/6.7

Files:

: 2 edited

. (modified) (1 prop)
src/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php (modified) (1 diff)

Legend:

: Unmodified
: Added
: Removed

branches/6.7
- Property svn:mergeinfo changed
  /trunk merged: 60814-60816

branches/6.7/src/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php

-              r59744
+              r60819
                 foreach ( $query_result as $post ) {
+                        if ( ! $this->check_read_permission( $post ) ) {
+                        if ( 'edit' === $request['context'] ) {
+                                $permission = $this->check_update_permission( $post );
+                        } else {
+                                $permission = $this->check_read_permission( $post );
+                        }
+                        if ( ! $permission ) {
                                 continue;
+                        }

Note: See TracChangeset for help on using the changeset viewer.

Make WordPress Core

Context Navigation

Changeset 60819 for branches/6.7/src/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php

Legend:

branches/6.7

branches/6.7/src/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php

Download in other formats: