Changeset 7548

Timestamp:

07/31/2018 02:29:30 AM (8 years ago)

Author:

obenland

Message:

Gutenberg: Bulletproofing endpoint checks.

Props noisysocks.
See #3703.

File:

• sites/trunk/wordpress.org/public_html/wp-content/themes/pub/gutenberg/functions.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/themes/pub/gutenberg/functions.php

@@ -35 +35 @@
                         sprintf(
                                 'wp.apiFetch.use( function( options, next ) {
-                                        var is_whitelisted_endpoint = options.path.startsWith( "/oembed/1.0/proxy" ) || options.path.startsWith( "/gutenberg/v1/block-renderer" );
-
-                                        if ( options.method !== "GET" && ! is_whitelisted_endpoint ) {
+                                        var isWhitelistedEndpoint = (
+                                                lodash.startsWith( options.path, "/oembed/1.0/proxy" ) ||
+                                                lodash.startsWith( options.path, "/gutenberg/v1/block-renderer" )
+                                        );
+
+                                        if ( options.method !== "GET" && ! isWhitelistedEndpoint ) {
                                                 return Promise.resolve( options.data ); //not sure what this actually should be, etc.
                                         }