[wp-trac] [WordPress Trac] #44702: Lack of validation for the REST request method

WordPress Trac noreply at wordpress.org
Thu Jun 13 04:40:55 UTC 2019


#44702: Lack of validation for the REST request method
-------------------------------------------------+-------------------------
 Reporter:  andizer                              |       Owner:  (none)
     Type:  enhancement                          |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
                                                 |  Review
Component:  REST API                             |     Version:  4.4
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch has-unit-tests close       |     Focuses:  rest-api
  reporter-feedback                              |
-------------------------------------------------+-------------------------
Changes (by TimothyBlynJacobs):

 * keywords:  has-patch has-unit-tests => has-patch has-unit-tests close
     reporter-feedback


Comment:

 What would be the benefit of this validation? The REST API server doesn't
 enforce any semantics about the HTTP method chosen. It'll happily match to
 any HTTP method and pass on a request body if it exists.

 I don't think people should be stopped from using a custom HTTP method if
 they want to. Additionally, I'm not sure we could even enforce this at
 this point without breaking BC.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44702#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list