id,summary,reporter,owner,description,type,status,priority,milestone,component,version,severity,resolution,keywords,cc,focuses 38420,API Post status parameter does not accept multiple values,kadamwhite,joehoyle,"In the schema for the posts parameter we specify, ""Limit result set to posts assigned a specific status; can be comma-delimited list of status types."" However, the actual sanitization function we are using is `sanitize_key`, which does not properly parse array or comma-delimited values. This improper sanitization contributes to #38417 The change in the attached path switches this parameter to use `wp_parse_slug_list` to properly interpret and sanitize arrays of stati, whether provided `comma,separated` or `status[]=array&status[]=syntax` (or plain string values). I'm not sure how to best update the validation function to handle this input.",defect (bug),closed,normal,4.7,REST API,4.7,normal,fixed,has-patch has-unit-tests,,