[wp-trac] [WordPress Trac] #41159: REST API: Add a way to determine if a request is an embedded "sub-request"

WordPress Trac noreply at wordpress.org
Sun Oct 25 04:02:12 UTC 2020


#41159: REST API: Add a way to determine if a request is an embedded "sub-request"
------------------------------------------+-----------------------
 Reporter:  jnylen0                       |       Owner:  (none)
     Type:  enhancement                   |      Status:  closed
 Priority:  normal                        |   Milestone:
Component:  REST API                      |     Version:  4.4
 Severity:  normal                        |  Resolution:  wontfix
 Keywords:  needs-patch needs-unit-tests  |     Focuses:  rest-api
------------------------------------------+-----------------------
Changes (by TimothyBlynJacobs):

 * status:  new => closed
 * resolution:   => wontfix
 * milestone:  Future Release =>


Comment:

 I agree with @rmccue that each of these requests should be context free.
 The variation is entirely controlled by setting `context=embed`. I also
 don't think we should encourage users to use the fact that the given
 request is an embed in lieu of proper permission checks. It also breaks
 the contract that you should be able to follow an embedded link and get
 results if the results are only accessible when doing an `?_embed`
 request.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/41159#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list