Themes API: Validate actions and protocol input, document trusted output paths - #801

Open

obenland wants to merge 8 commits into

WordPress:trunkfrom

obenland:api/security-themes

Commits on Aug 13, 2026

Themes API: Validate actions and protocol input, document trusted output paths.

obenland
and
claude
committed
fe7ccd6
Themes API: Address review feedback on callback and action validation.

obenland
and
claude
committed
6e028d5
Themes API: Fold the phpcs justification comments into the file docblocks.

obenland
and
claude
committed
81ed94b
Themes API: Validate JSONP callbacks in a single pass.

obenland
and
claude
committed
45ff222
Themes API: Add a file docblock to the 1.0 endpoint carrying the phpcs justification.

obenland
and
claude
committed
dff704c
Themes API: Reject invalid theme slugs instead of storing empty favorites.

obenland
and
claude
committed
f6e0f97
Themes API: Compact the bad_request response to one line.

obenland
and
claude
committed
98bb3b1
Themes API: Anchor validation regexes with \z.

obenland
and
claude
committed
6f2ae8e