Timothy Jacobs 74cc64d74e REST API: Issue a _doing_it_wrong when registering a route without a permission callback. ... The REST API treats routes without a permission_callback as public. Because this happens without any warning to the user, if the permission callback is unintentionally omitted or misspelled, the endpoint can end up being available to the public. Such a scenario has happened multiple times in the wild, and the results can be catostrophic when it occurs. For REST API routes that are intended to be public, it is recommended to set the permission callback to the `__return_true` built in function. Fixes #50075. Props rmccue, sorenbronsted, whyisjake, SergeyBiryukov, TimothyBlynJacobs. git-svn-id: https://develop.svn.wordpress.org/trunk@48526 602fd350-edb4-49c9-b593-d223f7449a82		2020-07-21 12:01:10 +00:00
..
e2e	Editor: update JavaScript packages	2020-06-26 13:31:11 +00:00
gutenberg	Block Editor: Add a script to run Gutenberg end 2 end tests on Core.	2020-07-07 16:06:43 +00:00
phpunit	REST API: Issue a _doing_it_wrong when registering a route without a permission callback.	2020-07-21 12:01:10 +00:00
qunit	REST API: Prevent attachment ID/image source mismatch when editing an image.	2020-07-16 21:54:37 +00:00