) can't nest in // a

, so the browser splits the paragraph and the live element's text is // truncated. The fingerprint is then only a prefix of the stored block; // recover to the unique block it prefixes. public function test_fingerprint_recovers_via_prefix_when_render_truncates_the_paragraph() { $this->loginAsAdmin(); $content = '

oane[products]new line

' . '

another text entirely

' . '

small

'; $postId = self::factory()->post->create(['post_content' => $content]); // The live element was truncated to "oane"; the stored block is the full // "oane[products]new line". $res = SaveController::handleSave($this->jsonRequest([ 'source' => ['kind' => 'post', 'id' => $postId], 'blockId' => 1, 'blockType' => 'core/paragraph', 'fingerprint' => ['text' => 'oane'], 'rawBlock' => '

oane[products]new line and more

', ])); $this->assertSame(200, $res->get_status()); $this->assertStringContainsString('oane[products]new line and more', get_post($postId)->post_content); $this->assertStringContainsString('

small

', get_post($postId)->post_content); } // A truncated (prefix) fingerprint that prefixes two blocks can't be // resolved — refuse rather than guess. public function test_prefix_match_ambiguous_returns_409() { $this->loginAsAdmin(); $content = '

oane first variant

' . '

oane second variant

'; $postId = self::factory()->post->create(['post_content' => $content]); $res = SaveController::handleSave($this->jsonRequest([ 'source' => ['kind' => 'post', 'id' => $postId], 'blockId' => 1, 'blockType' => 'core/paragraph', 'fingerprint' => ['text' => 'oane'], 'patches' => [['fieldKey' => 'content', 'value' => 'corrupted']], ])); $this->assertSame(409, $res->get_status()); $this->assertSame($content, get_post($postId)->post_content); } // The general fingerprint recovery resolves social-links by their unique // `service` attr when the count misses — the same job the old social-link // special-case did, now covered by findBlocksByFingerprint. public function test_social_link_recovers_by_service_when_count_misses() { $this->loginAsAdmin(); $content = ''; $postId = self::factory()->post->create(['post_content' => $content]); // blockId past the end forces a count miss; service identifies the item. $res = SaveController::handleSave($this->jsonRequest([ 'source' => ['kind' => 'post', 'id' => $postId], 'blockId' => 99, 'blockType' => 'core/social-link', 'fingerprint' => ['service' => 'twitter'], 'patches' => [['fieldKey' => 'url', 'value' => 'https://x.com/updated']], ])); $this->assertSame(200, $res->get_status()); $stored = get_post($postId)->post_content; $this->assertStringContainsString('https://x.com/updated', $stored); $this->assertStringContainsString('https://fb.com/x', $stored); } public function test_matching_fingerprint_allows_save() { $this->loginAsAdmin(); $content = '

alpha

' . '

bravo

alpha

', $stored); $this->assertStringContainsString('

updated

', $stored); } // Recovery applies to the rawBlock (text-editor) path too: the count points // at the wrong block, the fingerprint identifies the right one, and the // whole-block rawBlock lands there. public function test_rawBlock_save_recovers_to_matching_block() { $this->loginAsAdmin(); $content = '

alpha

' . '

bravo

'; $postId = self::factory()->post->create(['post_content' => $content]); // blockId 2 counts to "bravo"; the user clicked "alpha". $res = SaveController::handleSave($this->jsonRequest([ 'source' => ['kind' => 'post', 'id' => $postId], 'blockId' => 2, 'blockType' => 'core/paragraph', 'fingerprint' => ['text' => 'alpha'], 'rawBlock' => '

alpha rewritten

', ])); $this->assertSame(200, $res->get_status()); $stored = get_post($postId)->post_content; $this->assertStringContainsString('

alpha rewritten

', $stored); $this->assertStringContainsString('

bravo

', $stored); $this->assertStringNotContainsString('

alpha

', $stored); } // The client reads a block's text from the rendered DOM, where the_content // has run wptexturize (straight apostrophe -> curly). The fingerprint of // that rendered text must still match the straight-quote markup the server // parses, or every prose block with an apostrophe false-409s. (Field // report: editing a paragraph containing "Woody's".) public function test_fingerprint_matches_wptexturized_rendered_text() { $this->loginAsAdmin(); $content = "

Welcome to Woody's shop, the best deals

"; $postId = self::factory()->post->create(['post_content' => $content]); // Mimic the browser: wptexturize emits ’ in the HTML, and the // client reads the live node's textContent, which decodes it to a // curly apostrophe. $rendered = apply_filters('the_content', get_post($postId)->post_content); $renderedText = trim(html_entity_decode(wp_strip_all_tags($rendered), ENT_QUOTES)); $this->assertStringContainsString( "\u{2019}", $renderedText, 'sanity: wptexturize should have curled the apostrophe in the rendered text' ); $res = SaveController::handleSave($this->jsonRequest([ 'source' => ['kind' => 'post', 'id' => $postId], 'blockId' => 1, 'blockType' => 'core/paragraph', 'fingerprint' => ['text' => $renderedText], 'patches' => [['fieldKey' => 'content', 'value' => 'updated']], ])); $this->assertSame(200, $res->get_status()); $this->assertStringContainsString('updated', get_post($postId)->post_content); } // A shortcode (or any the_content transform) renders to different text than // the raw stored markup, so the client's rendered-DOM fingerprint can't // match the parsed markup. The gate must render the block the same way the // page does and retry before refusing. (Field report: a paragraph with a // shortcode became permanently uneditable.) public function test_fingerprint_falls_back_to_rendered_text_for_shortcodes() { $this->loginAsAdmin(); add_shortcode('ext_fp_probe', static fn () => 'EXPANDED'); $content = '

Hello [ext_fp_probe] world

'; $postId = self::factory()->post->create(['post_content' => $content]); // Client reads "Hello EXPANDED world" from the DOM; raw markup still has // the literal "[ext_fp_probe]". $res = SaveController::handleSave($this->jsonRequest([ 'source' => ['kind' => 'post', 'id' => $postId], 'blockId' => 1, 'blockType' => 'core/paragraph', 'fingerprint' => ['text' => 'Hello EXPANDED world'], 'patches' => [['fieldKey' => 'content', 'value' => 'updated']], ])); remove_shortcode('ext_fp_probe'); $this->assertSame(200, $res->get_status()); $this->assertStringContainsString('updated', get_post($postId)->post_content); } // The re-render echo sets $GLOBALS['post'] to the source, but in a REST // request wp_reset_postdata() can't restore it (the main query has no // post), so a template-part save would leave global $post dangling. The // save must snapshot and restore it. public function test_global_post_is_restored_after_save() { $this->loginAsAdmin(); $sentinelId = self::factory()->post->create([ 'post_content' => '

sentinel

', ]); $targetId = self::factory()->post->create([ 'post_content' => '

', ]); $GLOBALS['post'] = get_post($sentinelId); $before = $GLOBALS['post']; $res = SaveController::handleSave($this->jsonRequest([ 'source' => ['kind' => 'post', 'id' => $targetId], 'blockId' => 1, 'blockType' => 'core/paragraph', 'patches' => [['fieldKey' => 'content', 'value' => 'updated']], ])); $this->assertSame(200, $res->get_status()); $after = $GLOBALS['post'] ?? null; $this->assertSame($before, $after); $this->assertInstanceOf(\WP_Post::class, $after); $this->assertSame($sentinelId, $after->ID); } // --- Translated-content guard --- // The corruption hole this closes: a text save with no fingerprint would // otherwise pass the count gate and overwrite the source post_content. On a // translated render (client-forwarded context) the rawBlock save is refused // even without a fingerprint, and nothing is written. public function test_rawBlock_text_save_on_translated_render_is_refused_without_fingerprint() { $this->loginAsAdmin(); $content = '

hola

overwritten

', 'translatedContext' => ['isTranslated' => true, 'plugin' => 'translatepress'], ])); $this->assertSame(409, $res->get_status()); $this->assertSame('translated_content', $res->get_data()['error']); $this->assertSame($content, get_post($postId)->post_content); } // Server-side detection is the backstop when the client doesn't forward // context: a TranslatePress non-default render (default en_US, current // es_ES) refuses the text save on its own. public function test_rawBlock_text_save_refused_when_server_detects_translatepress() { $this->loginAsAdmin(); update_option('trp_settings', ['default-language' => 'en_US']); $GLOBALS['TRP_LANGUAGE'] = 'es_ES'; $content = '

hola

overwritten

', ])); $this->assertSame(409, $res->get_status()); $this->assertSame('translated_content', $res->get_data()['error']); $this->assertSame($content, get_post($postId)->post_content); } // The text guard also covers the schema-patch path (content / text fields), // not just the rawBlock text editor. public function test_content_patch_on_translated_render_is_refused() { $this->loginAsAdmin(); $content = '

hola

old

', ]); $res = SaveController::handleSave($this->jsonRequest([ 'source' => ['kind' => 'post', 'id' => $postId], 'blockId' => 1, 'blockType' => 'core/paragraph', 'rawBlock' => '

new

', 'translatedContext' => ['isTranslated' => false, 'plugin' => null], ])); $this->assertSame(200, $res->get_status()); $this->assertStringContainsString('

new

', get_post($postId)->post_content); } private function jsonRequest(array $body): \WP_REST_Request { $req = new \WP_REST_Request('POST', '/extendify/v1/quick-edit/save'); $req->set_header('Content-Type', 'application/json'); $req->set_body(wp_json_encode($body)); return $req; } private function loginAsAdmin(): void { $admin = self::factory()->user->create(['role' => 'administrator']); wp_set_current_user($admin); } private function resetRegistry(): void { $reflection = new ReflectionClass(Registry::class); $prop = $reflection->getProperty('schemas'); $prop->setAccessible(true); $prop->setValue(null, []); } }

x

middle

new-middle

old

Safe title

Safe title

hola

overwritten