[wp-trac] [WordPress Trac] #38820: REST API: Clients should not be allowed to set arbitrary comment_type's
WordPress Trac
noreply at wordpress.org
Fri Nov 18 18:35:25 UTC 2016
#38820: REST API: Clients should not be allowed to set arbitrary comment_type's
--------------------------+--------------------------
Reporter: dd32 | Owner: rachelbaker
Type: defect (bug) | Status: reviewing
Priority: normal | Milestone: 4.7
Component: Comments | Version:
Severity: normal | Resolution:
Keywords: has-patch | Focuses: rest-api
--------------------------+--------------------------
Comment (by rachelbaker):
In [attachment:38820.3.diff] only a comment type of `comment` is allowed
during comment create. Otherwise, a `WP_Error` is returned.
Also includes a test for `comment` being the default value in the schema
for the `type` property.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/38820#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list