Changeset 60913 for trunk/src/wp-includes/embed.php

Timestamp:

10/07/2025 11:32:04 PM (5 months ago)

Author:

westonruter

Message:

Bundled Themes: Use wp_print_inline_script_tag() when available and include sourceURL for JS.

Instead of manually constructing the markup for SCRIPT tags, leverage wp_print_inline_script_tag() when available to do the construction while also ensuring filters may inject additional attributes on the SCRIPT tags, such as nonce for CSP. When the function is not available (prior to WP 5.7), fall back to the manual markup construction.

This also adds the sourceURL comments to the inline scripts to facilitate debugging, per #63887.

Developed in ​https://github.com/WordPress/wordpress-develop/pull/9416.

Follow-up to [60909], [60899].

Props debarghyabanerjee, westonruter, hbhalodia, peterwilsoncc, sabernhardt, poena.
See #63887, #59446.
Fixes #63806.

File:

• trunk/src/wp-includes/embed.php (modified) (2 diffs)

trunk/src/wp-includes/embed.php

@@ -521 +521 @@
     $js_path = '/js/wp-embed' . wp_scripts_get_suffix() . '.js';
     $output .= wp_get_inline_script_tag(
-        trim( file_get_contents( ABSPATH . WPINC . $js_path ) ) . "\n//# sourceURL=" . includes_url( $js_path )
+        trim( file_get_contents( ABSPATH . WPINC . $js_path ) ) . "\n//# sourceURL=" . esc_url_raw( includes_url( $js_path ) )
     );
 
@@ -1094 +1094 @@
     $js_path = '/js/wp-embed-template' . wp_scripts_get_suffix() . '.js';
     wp_print_inline_script_tag(
-        trim( file_get_contents( ABSPATH . WPINC . $js_path ) ) . "\n//# sourceURL=" . includes_url( $js_path )
+        trim( file_get_contents( ABSPATH . WPINC . $js_path ) ) . "\n//# sourceURL=" . esc_url_raw( includes_url( $js_path ) )
     );
 }