[wp-trac] [WordPress Trac] #38583: Support for objects in schema validation and sanitization

WordPress Trac noreply at wordpress.org
Tue Oct 24 21:04:52 UTC 2017


#38583: Support for objects in schema validation and sanitization
---------------------------------------------+-----------------------
 Reporter:  rachelbaker                      |       Owner:  joehoyle
     Type:  enhancement                      |      Status:  assigned
 Priority:  high                             |   Milestone:  4.9
Component:  REST API                         |     Version:  4.7
 Severity:  major                            |  Resolution:
 Keywords:  has-unit-tests has-patch commit  |     Focuses:
---------------------------------------------+-----------------------

Comment (by joehoyle):

 In [changeset:"42000"]:
 {{{
 #!CommitTicketReference repository="" revision="42000"
 REST API: Don’t remove unregistered properties from objects in schema.

 In r41727 the ability to sanitise and validate objects from JSON schema
 was added, with a whitelist approach. It was decided we should pass
 through all non-registered properties to reflect the behaviour of the root
 object in register_rest_route. To prevent arbitrary extra data via setting
 objects, we force additionalProperties to false in the settings endpoint.

 See #38583.
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/38583#comment:49>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list