From e7150ae5c784bb9ddabd1e45230448b1cdf657de Mon Sep 17 00:00:00 2001 From: whyisjake Date: Fri, 22 May 2020 20:48:08 +0000 Subject: [PATCH] REST API: Ensure proper namespacing when registering routes. The PR will corerce routes that have a leading slash and throwing a `_doing_it_wrong` notice while ensuring a proper namespace. Fixes #49749. Props TimothyBlynJacobs, skarabeq, afercia. Built from https://develop.svn.wordpress.org/trunk@47842 git-svn-id: http://core.svn.wordpress.org/trunk@47618 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-includes/rest-api.php | 10 ++++++++-- wp-includes/version.php | 2 +- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/wp-includes/rest-api.php b/wp-includes/rest-api.php index 8b385f63be..11eb2b71ad 100644 --- a/wp-includes/rest-api.php +++ b/wp-includes/rest-api.php @@ -44,6 +44,12 @@ function register_rest_route( $namespace, $route, $args = array(), $override = f return false; } + $clean_namespace = trim( $namespace, '/' ); + + if ( $clean_namespace !== $namespace ) { + _doing_it_wrong( __FUNCTION__, __( 'Namespace must not start or end with a slash.' ), '5.4.2' ); + } + if ( ! did_action( 'rest_api_init' ) ) { _doing_it_wrong( 'register_rest_route', @@ -84,8 +90,8 @@ function register_rest_route( $namespace, $route, $args = array(), $override = f $arg_group['args'] = array_merge( $common_args, $arg_group['args'] ); } - $full_route = '/' . trim( $namespace, '/' ) . '/' . trim( $route, '/' ); - rest_get_server()->register_route( $namespace, $full_route, $args, $override ); + $full_route = '/' . $clean_namespace . '/' . trim( $route, '/' ); + rest_get_server()->register_route( $clean_namespace, $full_route, $args, $override ); return true; } diff --git a/wp-includes/version.php b/wp-includes/version.php index 5faa345052..33fbfba5ce 100644 --- a/wp-includes/version.php +++ b/wp-includes/version.php @@ -13,7 +13,7 @@ * * @global string $wp_version */ -$wp_version = '5.5-alpha-47841'; +$wp_version = '5.5-alpha-47842'; /** * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.