Changeset 12685

Timestamp:

07/22/2020 10:43:29 AM (4 years ago)

Author:

imath

Message:

Activity: add a permission_callback to the BP Activity Embed route

Since version 5.5, WordPress is requiring REST routes to have a permission callback. As Activity Embeds are public content and can be seen by any user, we are using the __return_true function as the permission callback for the oembed/1.0/embed/activity route.

See #8334 (trunk)

File:

• trunk/src/bp-core/classes/class-bp-core-oembed-extension.php (modified) (1 diff)

trunk/src/bp-core/classes/class-bp-core-oembed-extension.php

@@ -231 +231 @@
         register_rest_route( 'oembed/1.0', "/embed/{$this->slug_endpoint}", array(
             array(
-                'methods'  => WP_REST_Server::READABLE,
-                'callback' => array( $this, 'get_item' ),
-                'args'     => $args
+                'methods'             => WP_REST_Server::READABLE,
+                'callback'            => array( $this, 'get_item' ),
+                'permission_callback' => '__return_true',
+                'args'                => $args
             ),
         ) );