| @@ -64,9 +64,12 @@ | ||
| 64 | 64 | } |
| 65 | 65 | |
| 66 | 66 | public function prepare_rules( array &$rules ) { |
| 67 | 67 | foreach ( $rules as &$rule ) { |
| 68 | - $rule['value'] = jet_fb_parse_dynamic( $rule['value'] ?? '' ); | |
| 68 | + // Rules live in the form's own blocks (post_content), writable only | |
| 69 | + // with `edit_post` - never taken from the request, even on the REST | |
| 70 | + // validation route, which reloads them via Block_Helper::get_blocks_by_post(). | |
| 71 | + $rule['value'] = jet_fb_parse_dynamic_trusted( $rule['value'] ?? '' ); | |
| 69 | 72 | } |
| 70 | 73 | } |
| 71 | 74 | |
| 72 | 75 | /** |