Changeset 61947 for trunk/tests/phpunit/tests/rest-api/rest-attachments-controller.php

Timestamp:

03/11/2026 11:38:35 PM (4 months ago)

Author:

adamsilverstein

Message:

Editor: Skip cross-origin isolation for third-party page builders.

Document-Isolation-Policy (DIP) isolates the document and blocks same-origin iframe access that page builders rely on. Skip DIP setup when a third-party page builder overrides the block editor via a custom action query parameter.

Also gates wp_is_client_side_media_processing_enabled() on a secure context check, since SharedArrayBuffer requires a secure context (HTTPS or localhost).

Props adamsilverstein, westonruter, mukesh27, louiswol94, manhar, illuminea.
Fixes #64803.

File:

• trunk/tests/phpunit/tests/rest-api/rest-attachments-controller.php (modified) (5 diffs)

trunk/tests/phpunit/tests/rest-api/rest-attachments-controller.php

@@ -3163 +3163 @@
          */
         public function test_sideload_scaled_image() {
+                add_filter( 'wp_client_side_media_processing_enabled', '__return_true' );
+                // Reinitialize REST server so the sideload route is registered.
+                global $wp_rest_server;
+                $wp_rest_server = new Spy_REST_Server();
+                do_action( 'rest_api_init', $wp_rest_server );
+
                 wp_set_current_user( self::$author_id );
 
@@ -3216 +3222 @@
          */
         public function test_sideload_scaled_image_requires_auth() {
+                add_filter( 'wp_client_side_media_processing_enabled', '__return_true' );
+                // Reinitialize REST server so the sideload route is registered.
+                global $wp_rest_server;
+                $wp_rest_server = new Spy_REST_Server();
+                do_action( 'rest_api_init', $wp_rest_server );
+
                 wp_set_current_user( self::$author_id );
 
@@ -3245 +3257 @@
          */
         public function test_sideload_route_includes_scaled_enum() {
+                add_filter( 'wp_client_side_media_processing_enabled', '__return_true' );
+                // Reinitialize REST server so the sideload route is registered.
+                global $wp_rest_server;
+                $wp_rest_server = new Spy_REST_Server();
+                do_action( 'rest_api_init', $wp_rest_server );
+
                 $server = rest_get_server();
                 $routes = $server->get_routes();
@@ -3267 +3285 @@
          */
         public function test_sideload_scaled_unique_filename() {
+                add_filter( 'wp_client_side_media_processing_enabled', '__return_true' );
+                // Reinitialize REST server so the sideload route is registered.
+                global $wp_rest_server;
+                $wp_rest_server = new Spy_REST_Server();
+                do_action( 'rest_api_init', $wp_rest_server );
+
                 wp_set_current_user( self::$author_id );
 
@@ -3301 +3325 @@
          */
         public function test_sideload_scaled_unique_filename_conflict() {
+                add_filter( 'wp_client_side_media_processing_enabled', '__return_true' );
+                // Reinitialize REST server so the sideload route is registered.
+                global $wp_rest_server;
+                $wp_rest_server = new Spy_REST_Server();
+                do_action( 'rest_api_init', $wp_rest_server );
+
                 wp_set_current_user( self::$author_id );