Changeset 60836 for branches/5.0/src/wp-includes/rest-api/endpoints/class-wp-rest-terms-controller.php

Timestamp:

09/30/2025 05:05:42 PM (11 months ago)

Author:

desrosj

Message:

Grouped backports for the 5.0 branch.

• REST API: Increase the specificity of capability checks for collections when the edit context is in use.
• Menus: Prevent HTML in menu item titles from being rendered unexpectedly.

Merges [60814], [60815], [60816] to the 5.0 branch.

Props andraganescu, desrosj, ehti, hurayraiit, iandunn, joehoyle, johnbillion, jorbin, mnelson4, noisysocks, peterwilsoncc, phillsav, rmccue, timothyblynjacobs, vortfu, westonruter , whyisjake, zieladam.

Location:

branches/5.0

Files:

• . (modified) (1 prop)
• src/wp-includes/rest-api/endpoints/class-wp-rest-terms-controller.php (modified) (1 diff)

branches/5.0/src/wp-includes/rest-api/endpoints/class-wp-rest-terms-controller.php

@@ -319 +319 @@
 
                 foreach ( $query_result as $term ) {
+                        if ( 'edit' === $request['context'] && ! current_user_can( 'edit_term', $term->term_id ) ) {
+                                continue;
+                        }
                         $data = $this->prepare_item_for_response( $term, $request );
                         $response[] = $this->prepare_response_for_collection( $data );