[wp-trac] [WordPress Trac] #62140: Consider allowing themes to register block metadata collections

WordPress Trac noreply at wordpress.org
Thu Oct 24 14:47:40 UTC 2024


#62140: Consider allowing themes to register block metadata collections
--------------------------+---------------------
 Reporter:  flixos90      |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  6.7.1
Component:  Editor        |     Version:
 Severity:  normal        |  Resolution:
 Keywords:  needs-patch   |     Focuses:
--------------------------+---------------------

Comment (by dougwollison):

 Replying to [comment:10 flixos90]:
 > Replying to [comment:9 dougwollison]:
 > > Wait, how is that so disasterous? I'm looking at the source again and
 I'm confused.
 >
 > We wouldn't want to allow someone to tamper with how other plugins'
 blocks are registered, it could be used to override the block
 configuration data by other plugins. That might make sense for a project
 you manage, but it would open up lots of doors for malicious intent to any
 plugin modifying another plugin's behavior.

 But... core literally provides two separate filters to allow messing with
 how blocks are registered. The entire premise of the hook system is to
 allow plugins to modify each other's behaviour, not just core's behaviour.
 I sincerely can't grasp how this is a uniquely dangerous scenario.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/62140#comment:11>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list