Changeset 61602 for trunk/src/wp-includes/abilities-api/class-wp-abilities-registry.php

Timestamp:

02/09/2026 04:59:52 PM (2 months ago)

Author:

jorgefilipecosta

Message:

Abilities API: Allow nested namespace ability names (2-4 segments).

Expand ability name validation from exactly 2 segments (namespace/ability) to 2-4 segments, enabling names like my-plugin/resource/find and my-plugin/resource/sub/find.
This allows plugins to organize abilities into logical resource groups. The validation regex changes from /^[a-z0-9-]+\/[a-z0-9-]+$/ to /^[a-z0-9-]+(?:\/[a-z0-9-]+){1,3}$/, which accepts the first segment plus 1-3 additional slash-delimited segments.
Updates the validation regex, error messages, docblocks, and adds corresponding unit and REST API tests.

Props jorgefilipecosta, justlevine, jorbin.
Fixes #64596.

File:

• trunk/src/wp-includes/abilities-api/class-wp-abilities-registry.php (modified) (2 diffs)

trunk/src/wp-includes/abilities-api/class-wp-abilities-registry.php

@@ -44 +44 @@
      * @see wp_register_ability()
      *
-     * @param string               $name The name of the ability. The name must be a string containing a namespace
-     *                                   prefix, i.e. `my-plugin/my-ability`. It can only contain lowercase
-     *                                   alphanumeric characters, dashes and the forward slash.
+     * @param string               $name The name of the ability. Must be the fully-namespaced
+ *                                       string identifier, e.g. `my-plugin/my-ability` or `my-plugin/resource/my-ability`.
      * @param array<string, mixed> $args {
      *     An associative array of arguments for the ability.
@@ -79 +78 @@
      */
     public function register( string $name, array $args ): ?WP_Ability {
-        if ( ! preg_match( '/^[a-z0-9-]+\/[a-z0-9-]+$/', $name ) ) {
+        if ( ! preg_match( '/^[a-z0-9-]+(?:\/[a-z0-9-]+){1,3}$/', $name ) ) {
             _doing_it_wrong(
                 __METHOD__,
                 __(
-                    'Ability name must be a string containing a namespace prefix, i.e. "my-plugin/my-ability". It can only contain lowercase alphanumeric characters, dashes and the forward slash.'
+                    'Ability name must contain 2 to 4 segments separated by forward slashes, e.g. "my-plugin/my-ability" or "my-plugin/resource/my-ability". It can only contain lowercase alphanumeric characters, dashes, and forward slashes.'
                 ),
                 '6.9.0'