Changeset 11297 for sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/api/routes/class-popular-tags.php

Timestamp:

10/26/2021 04:05:15 AM (3 years ago)

Author:

dd32

Message:

Plugin Directory: API: Add permission_callback to all the public API endpoints, to avoid _doing_it_wrong().

'register_rest_route was called <strong>incorrectly</strong>. The REST API route definition for <code>plugins/v1/query-plugins/?</code> is missing the required <code>permission_callback</code> argument. For REST API routes that are intended to be public, use <code>return_true</code> as the permission callback.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/api/routes/class-popular-tags.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/api/routes/class-popular-tags.php

@@ -14 +14 @@
     function __construct() {
         register_rest_route( 'plugins/v1', '/popular-tags/?', array(
-            'methods'  => WP_REST_Server::READABLE,
-            'callback' => array( $this, 'popular_tags' ),
+            'methods'             => WP_REST_Server::READABLE,
+            'callback'            => array( $this, 'popular_tags' ),
+            'permission_callback' => '__return_true',
         ) );
     }