[wp-trac] [WordPress Trac] #41159: REST API: Add a way to determine if a request is an embedded "sub-request"
WordPress Trac
noreply at wordpress.org
Sun Oct 25 04:02:12 UTC 2020
#41159: REST API: Add a way to determine if a request is an embedded "sub-request"
------------------------------------------+-----------------------
Reporter: jnylen0 | Owner: (none)
Type: enhancement | Status: closed
Priority: normal | Milestone:
Component: REST API | Version: 4.4
Severity: normal | Resolution: wontfix
Keywords: needs-patch needs-unit-tests | Focuses: rest-api
------------------------------------------+-----------------------
Changes (by TimothyBlynJacobs):
* status: new => closed
* resolution: => wontfix
* milestone: Future Release =>
Comment:
I agree with @rmccue that each of these requests should be context free.
The variation is entirely controlled by setting `context=embed`. I also
don't think we should encourage users to use the fact that the given
request is an embed in lieu of proper permission checks. It also breaks
the contract that you should be able to follow an embedded link and get
results if the results are only accessible when doing an `?_embed`
request.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/41159#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list