PluginProbe
Jetpack – WP Security, Backup, Speed, & Growth / 16.3-a.1
Jetpack – WP Security, Backup, Speed, & Growth v16.3-a.1
16.3-a.3 16.3-a.1 16.2 16.2-beta 12.0.3 12.1.3 12.2.3 12.3.2 12.4.2 12.5.2 12.6.4 12.7.3 12.8.3 12.9.5 13.0.2 13.1.5 13.2.4 13.3.3 13.4.5 13.5.2 13.6.2 13.7.2 13.8.3 13.9.2 14.0.1 All 504 releases
← All changes | _inc/lib/class.core-rest-api-endpoints.php +662 -495 12.2.3 → 16.3-a.1 View file →
@@ -8,8 +8,10 @@
8 8 use Automattic\Jetpack\Connection\Client;
9 9 use Automattic\Jetpack\Connection\Manager as Connection_Manager;
10 10 use Automattic\Jetpack\Connection\Rest_Authentication;
11 11 use Automattic\Jetpack\Connection\REST_Connector;
12 +use Automattic\Jetpack\Connection\REST_Jetpack_AI_JWT;
13 +use Automattic\Jetpack\Connection\SSO;
12 14 use Automattic\Jetpack\Jetpack_CRM_Data;
13 15 use Automattic\Jetpack\Plugins_Installer;
14 16 use Automattic\Jetpack\Stats\Options as Stats_Options;
15 17 use Automattic\Jetpack\Status\Host;
@@ -16,13 +18,11 @@
16 18 use Automattic\Jetpack\Status\Visitor;
17 19 use Automattic\Jetpack\Waf\Brute_Force_Protection\Brute_Force_Protection_Shared_Functions;
18 20 use Automattic\Jetpack\Waf\Waf_Compatibility;
19 21
20 -/**
21 - * Disable direct access.
22 - */
22 +// Disable direct access.
23 23 if ( ! defined( 'ABSPATH' ) ) {
24 - exit;
24 + exit( 0 );
25 25 }
26 26
27 27 // Load WP_Error for error messages.
28 28 require_once ABSPATH . '/wp-includes/class-wp-error.php';
@@ -32,8 +32,10 @@
32 32 // Load API endpoints that are synced with WP.com
33 33 // Each of these is a class that will register its own routes on 'rest_api_init'.
34 34 require_once JETPACK__PLUGIN_DIR . '_inc/lib/core-api/load-wpcom-endpoints.php';
35 35
36 +require_once JETPACK__PLUGIN_DIR . 'modules/subscriptions/class-settings.php';
37 +
36 38 /**
37 39 * Class Jetpack_Core_Json_Api_Endpoints
38 40 *
39 41 * @since 4.3.0
@@ -70,23 +72,10 @@
70 72 $module_toggle_endpoint = new Jetpack_Core_API_Module_Toggle_Endpoint( new Jetpack_IXR_Client() );
71 73 $site_endpoint = new Jetpack_Core_API_Site_Endpoint();
72 74 $widget_endpoint = new Jetpack_Core_API_Widget_Endpoint();
73 75
74 - /**
75 - * TODO: Move me somewhere that makes more sense.
76 - * Also give me permissions that aren't awful.
77 - */
78 - register_rest_route(
79 - 'jetpack/v4',
80 - 'jetpack-ai-jwt',
81 - array(
82 - 'methods' => WP_REST_Server::EDITABLE,
83 - 'callback' => __CLASS__ . '::get_openai_jwt',
84 - 'permission_callback' => function () {
85 - return ( new Connection_Manager( 'jetpack' ) )->is_user_connected() && current_user_can( 'edit_posts' );
86 - },
87 - )
88 - );
76 + // My Jetpack and Agents Manager register the same controller; its guard keeps the route registered once.
77 + ( new REST_Jetpack_AI_JWT() )->register_rest_route();
89 78
90 79 register_rest_route(
91 80 'jetpack/v4',
92 81 'plans',
@@ -116,32 +105,10 @@
116 105 'permission_callback' => __CLASS__ . '::disconnect_site_permission_callback',
117 106 )
118 107 );
119 108
120 - // Test current connection status of Jetpack.
121 109 register_rest_route(
122 110 'jetpack/v4',
123 - '/connection/test',
124 - array(
125 - 'methods' => WP_REST_Server::READABLE,
126 - 'callback' => __CLASS__ . '::jetpack_connection_test',
127 - 'permission_callback' => __CLASS__ . '::manage_modules_permission_check',
128 - )
129 - );
130 -
131 - // Endpoint specific for privileged servers to request detailed debug information.
132 - register_rest_route(
133 - 'jetpack/v4',
134 - '/connection/test-wpcom/',
135 - array(
136 - 'methods' => WP_REST_Server::READABLE,
137 - 'callback' => __CLASS__ . '::jetpack_connection_test_for_external',
138 - 'permission_callback' => __CLASS__ . '::view_jetpack_connection_test_check',
139 - )
140 - );
141 -
142 - register_rest_route(
143 - 'jetpack/v4',
144 111 '/rewind',
145 112 array(
146 113 'methods' => WP_REST_Server::READABLE,
147 114 'callback' => __CLASS__ . '::get_rewind_data',
@@ -194,33 +161,11 @@
194 161 ),
195 162 )
196 163 );
197 164
198 - // Disconnect/unlink user from WordPress.com servers.
165 + // Get current site features.
199 166 register_rest_route(
200 167 'jetpack/v4',
201 - '/connection/user',
202 - array(
203 - 'methods' => WP_REST_Server::EDITABLE,
204 - 'callback' => __CLASS__ . '::unlink_user',
205 - 'permission_callback' => __CLASS__ . '::unlink_user_permission_callback',
206 - )
207 - );
208 -
209 - // Get current site data.
210 - register_rest_route(
211 - 'jetpack/v4',
212 - '/site',
213 - array(
214 - 'methods' => WP_REST_Server::READABLE,
215 - 'callback' => __CLASS__ . '::get_site_data',
216 - 'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
217 - )
218 - );
219 -
220 - // Get current site data.
221 - register_rest_route(
222 - 'jetpack/v4',
223 168 '/site/features',
224 169 array(
225 170 'methods' => WP_REST_Server::READABLE,
226 171 'callback' => array( $site_endpoint, 'get_features' ),
@@ -765,42 +710,108 @@
765 710 'callback' => __CLASS__ . '::get_intro_offers',
766 711 'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
767 712 )
768 713 );
714 +
715 + // Save subscriber token and redirect
716 + register_rest_route(
717 + 'jetpack/v4',
718 + '/subscribers/auth',
719 + array(
720 + 'methods' => WP_REST_Server::READABLE,
721 + 'callback' => __CLASS__ . '::set_subscriber_cookie_and_redirect',
722 + 'permission_callback' => '__return_true',
723 + 'args' => array(
724 + 'redirect_url' => array(
725 + 'required' => true,
726 + 'description' => __( 'The URL to redirect to.', 'jetpack' ),
727 + 'validate_callback' => 'wp_http_validate_url',
728 + 'sanitize_callback' => 'sanitize_url',
729 + 'type' => 'string',
730 + 'format' => 'uri',
731 + ),
732 + ),
733 + )
734 + );
735 +
736 + /**
737 + * Get the list of available Jetpack features.
738 + *
739 + * @since 13.9
740 + */
741 + register_rest_route(
742 + 'jetpack/v4',
743 + '/features/available',
744 + array(
745 + 'methods' => WP_REST_Server::READABLE,
746 + 'callback' => array( static::class, 'get_features_available' ),
747 + 'permission_callback' => array( static::class, 'get_features_permission_check' ),
748 + )
749 + );
750 +
751 + /**
752 + * Get the list of enabled Jetpack features.
753 + *
754 + * @since 13.9
755 + */
756 + register_rest_route(
757 + 'jetpack/v4',
758 + '/features/enabled',
759 + array(
760 + 'methods' => WP_REST_Server::READABLE,
761 + 'callback' => array( static::class, 'get_features_enabled' ),
762 + 'permission_callback' => array( static::class, 'get_features_permission_check' ),
763 + )
764 + );
769 765 }
770 766
771 767 /**
772 768 * Ask WPCOM for a JWT token to use for OpenAI conversations.
773 - * TODO: Clean me up. This is ugly hack code.
769 + *
770 + * @deprecated since 16.2
771 + * @see Automattic\Jetpack\Connection\REST_Jetpack_AI_JWT::get_jwt()
772 + *
773 + * @return array|WP_Error The token and blog ID, or the error from WPCOM.
774 774 */
775 775 public static function get_openai_jwt() {
776 - $blog_id = \Jetpack_Options::get_option( 'id' );
776 + _deprecated_function( __METHOD__, 'jetpack-16.2', '\Automattic\Jetpack\Connection\REST_Jetpack_AI_JWT::get_jwt' );
777 777
778 - $response = \Automattic\Jetpack\Connection\Client::wpcom_json_api_request_as_blog(
779 - "/sites/$blog_id/jetpack-openai-query/jwt",
780 - '2',
781 - array(
782 - 'method' => 'POST',
783 - 'headers' => array( 'Content-Type' => 'application/json; charset=utf-8' ),
784 - ),
785 - wp_json_encode( array() ),
786 - 'wpcom'
787 - );
778 + $response = ( new REST_Jetpack_AI_JWT() )->get_jwt();
788 779
789 780 if ( is_wp_error( $response ) ) {
790 781 return $response;
791 782 }
792 783
793 - $json = json_decode( wp_remote_retrieve_body( $response ) );
784 + // Pre-deprecation callers expect the raw array, not a WP_REST_Response.
785 + return $response->get_data();
786 + }
794 787
795 - if ( ! isset( $json->token ) ) {
796 - return new WP_Error( 'no-token', 'No token returned from WPCOM' );
788 + /**
789 + * Set subscriber cookie and redirect
790 + *
791 + * @param \WP_Rest_Request $request The URL to redirect to.
792 + *
793 + * @return WP_Error|WP_REST_Response
794 + */
795 + public static function set_subscriber_cookie_and_redirect( $request ) {
796 + require_once JETPACK__PLUGIN_DIR . 'extensions/blocks/premium-content/_inc/subscription-service/include.php';
797 + $subscription_service = \Automattic\Jetpack\Extensions\Premium_Content\subscription_service();
798 + // Note: get_and_set_token_from_request() sets the subscriber cookie as a side effect.
799 + // The cookie is set regardless of the redirect target below; only the redirect is gated.
800 + $token = $subscription_service->get_and_set_token_from_request();
801 + $payload = $subscription_service->decode_token( $token );
802 + $is_valid_token = ! empty( $payload );
803 + if ( ! $is_valid_token ) {
804 + return new WP_Error( 'invalid-token', 'Invalid Token', array( 'status' => 403 ) );
797 805 }
798 806
799 - return array(
800 - 'token' => $json->token,
801 - 'blog_id' => $blog_id,
802 - );
807 + // Only redirect to the current site, not to an arbitrary host.
808 + $redirect_url = wp_validate_redirect( $request['redirect_url'], '' );
809 + if ( ! $redirect_url ) {
810 + return new WP_Error( 'invalid-redirect', 'Invalid Redirect URL', array( 'status' => 400 ) );
811 + }
812 +
813 + return new WP_REST_Response( null, 302, array( 'location' => $redirect_url ) );
803 814 }
804 815
805 816 /**
806 817 * Get the data for the recommendations
@@ -860,9 +871,9 @@
860 871 }
861 872
862 873 $user_connected = ( new Connection_Manager( 'jetpack' ) )->is_user_connected( get_current_user_id() );
863 874 if ( ! $user_connected ) {
864 - return wp_json_encode( array() );
875 + return wp_json_encode( array(), JSON_UNESCAPED_SLASHES );
865 876 }
866 877
867 878 $request_path = sprintf( '/sites/%s/jetpack-recommendations/product-suggestions?locale=' . get_user_locale(), $blog_id );
868 879 $wpcom_request = Client::wpcom_json_api_request_as_user(
@@ -1103,9 +1114,9 @@
1103 1114 * @since 6.6.0
1104 1115 *
1105 1116 * @param WP_REST_Request $request The request sent to the WP REST API.
1106 1117 *
1107 - * @return array|wp-error
1118 + * @return array|WP_Error
1108 1119 */
1109 1120 public static function is_site_verified_and_token( $request ) {
1110 1121 /**
1111 1122 * Return an error if the site uses a Maintenance / Coming Soon plugin
@@ -1131,8 +1142,9 @@
1131 1142 || Jetpack::is_plugin_active( 'mojo-under-construction/mojo-contruction.php' ) && 1 == $under_construction_activation_status // phpcs:ignore Universal.Operators.StrictComparisons.LooseEqual
1132 1143 || ( Jetpack::is_plugin_active( 'under-construction-page/under-construction.php' ) && isset( $ucp_options['status'] ) && 1 == $ucp_options['status'] ) // phpcs:ignore Universal.Operators.StrictComparisons.LooseEqual
1133 1144 || ( Jetpack::is_plugin_active( 'ultimate-under-construction/ultimate-under-construction.php' ) && isset( $uuc_settings['enable'] ) && 1 == $uuc_settings['enable'] ) // phpcs:ignore Universal.Operators.StrictComparisons.LooseEqual
1134 1145 || ( Jetpack::is_plugin_active( 'coming-soon/coming-soon.php' ) && isset( $csp4['status'] ) && ( 1 == $csp4['status'] || 2 == $csp4['status'] ) ) // phpcs:ignore Universal.Operators.StrictComparisons.LooseEqual
1146 + ||
1135 1147 /**
1136 1148 * Allow plugins to mark a site as "under construction".
1137 1149 *
1138 1150 * @since 6.7.0
@@ -1138,9 +1150,9 @@
1138 1150 * @since 6.7.0
1139 1151 *
1140 1152 * @param false bool Is the site under construction? Default to false.
1141 1153 */
1142 - || true === apply_filters( 'jetpack_is_under_construction_plugin', false )
1154 + true === apply_filters( 'jetpack_is_under_construction_plugin', false )
1143 1155 ) {
1144 1156 return new WP_Error( 'forbidden', __( 'Site is under construction and cannot be verified', 'jetpack' ) );
1145 1157 }
1146 1158
@@ -1212,9 +1224,9 @@
1212 1224 * @since 4.3.0
1213 1225 *
1214 1226 * @param WP_REST_Request $request The request sent to the WP REST API.
1215 1227 *
1216 - * @return array|wp-error
1228 + * @return array|WP_Error
1217 1229 */
1218 1230 public static function dismiss_notice( $request ) {
1219 1231 $notice = $request['notice'];
1220 1232
@@ -1279,24 +1291,20 @@
1279 1291
1280 1292 /**
1281 1293 * Verify that a user can use the /connection/user endpoint. Has to be a registered user and be currently linked.
1282 1294 *
1295 + * @uses Automattic\Jetpack\Connection\Manager::is_user_connected();)
1296 + *
1297 + * @deprecated since Jetpack 14.4.0
1298 + * @see Automattic\Jetpack\Connection\REST_Connector::unlink_user_permission_callback()
1299 + *
1283 1300 * @since 4.3.0
1284 1301 *
1285 - * @uses Automattic\Jetpack\Connection\Manager::is_user_connected();)
1286 - *
1287 1302 * @return bool|WP_Error True if user is able to unlink.
1288 1303 */
1289 1304 public static function unlink_user_permission_callback() {
1290 - if ( current_user_can( 'jetpack_connect_user' ) && ( new Connection_Manager( 'jetpack' ) )->is_user_connected( get_current_user_id() ) ) {
1291 - return true;
1292 - }
1293 -
1294 - return new WP_Error(
1295 - 'invalid_user_permission_unlink_user',
1296 - REST_Connector::get_user_permissions_error_msg(),
1297 - array( 'status' => rest_authorization_required_code() )
1298 - );
1305 + _deprecated_function( __METHOD__, 'jetpack-14.4.0', 'Automattic\Jetpack\Connection\REST_Connector::unlink_user_permission_callback()' );
1306 + return REST_Connector::unlink_user_permission_callback();
1299 1307 }
1300 1308
1301 1309 /**
1302 1310 * Verify that user can manage Jetpack modules.
@@ -1431,139 +1439,8 @@
1431 1439 );
1432 1440 }
1433 1441
1434 1442 /**
1435 - * Test connection status for this Jetpack site.
1436 - *
1437 - * @since 6.8.0
1438 - *
1439 - * @return array|WP_Error WP_Error returned if connection test does not succeed.
1440 - */
1441 - public static function jetpack_connection_test() {
1442 - require_once JETPACK__PLUGIN_DIR . '_inc/lib/debugger.php';
1443 - $cxntests = new Jetpack_Cxn_Tests();
1444 -
1445 - if ( $cxntests->pass() ) {
1446 - return rest_ensure_response(
1447 - array(
1448 - 'code' => 'success',
1449 - 'message' => __( 'All connection tests passed.', 'jetpack' ),
1450 - )
1451 - );
1452 - } else {
1453 - return $cxntests->output_fails_as_wp_error();
1454 - }
1455 - }
1456 -
1457 - /**
1458 - * Test connection permission check method.
1459 - *
1460 - * @since 7.1.0
1461 - *
1462 - * @return bool
1463 - */
1464 - public static function view_jetpack_connection_test_check() {
1465 - // phpcs:disable WordPress.Security.NonceVerification.Recommended -- This is verifying the trusted caller via a shared private key and timestamp.
1466 - if ( ! isset( $_GET['signature'] ) || ! isset( $_GET['timestamp'] ) || ! isset( $_GET['url'] ) ) {
1467 - return false;
1468 - }
1469 - $signature = base64_decode( wp_unslash( $_GET['signature'] ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
1470 -
1471 - $signature_data = wp_json_encode(
1472 - array(
1473 - 'rest_route' => isset( $_GET['rest_route'] ) ? filter_var( wp_unslash( $_GET['rest_route'] ) ) : null,
1474 - 'timestamp' => (int) $_GET['timestamp'],
1475 - 'url' => esc_url_raw( wp_unslash( $_GET['url'] ) ),
1476 - )
1477 - );
1478 -
1479 - if (
1480 - ! function_exists( 'openssl_verify' )
1481 - || 1 !== openssl_verify(
1482 - $signature_data,
1483 - $signature,
1484 - JETPACK__DEBUGGER_PUBLIC_KEY
1485 - )
1486 - ) {
1487 - return false;
1488 - }
1489 -
1490 - // signature timestamp must be within 5min of current time.
1491 - if ( abs( time() - (int) $_GET['timestamp'] ) > 300 ) {
1492 - return false;
1493 - }
1494 -
1495 - // phpcs:enable WordPress.Security.NonceVerification.Recommended
1496 -
1497 - return true;
1498 - }
1499 -
1500 - /**
1501 - * Test connection status for this Jetpack site, encrypt the results for decryption by a third-party.
1502 - *
1503 - * @since 7.1.0
1504 - *
1505 - * @return array|mixed|object|WP_Error
1506 - */
1507 - public static function jetpack_connection_test_for_external() {
1508 - // Since we are running this test for inclusion in the WP.com testing suite, let's not try to run them as part of these results.
1509 - add_filter( 'jetpack_debugger_run_self_test', '__return_false' );
1510 - require_once JETPACK__PLUGIN_DIR . '_inc/lib/debugger.php';
1511 - $cxntests = new Jetpack_Cxn_Tests();
1512 -
1513 - if ( $cxntests->pass() ) {
1514 - $result = array(
1515 - 'code' => 'success',
1516 - 'message' => __( 'All connection tests passed.', 'jetpack' ),
1517 - );
1518 - } else {
1519 - $error = $cxntests->output_fails_as_wp_error(); // Using this so the output is similar both ways.
1520 - $errors = array();
1521 -
1522 - // Borrowed from WP_REST_Server::error_to_response().
1523 - foreach ( (array) $error->errors as $code => $messages ) {
1524 - foreach ( (array) $messages as $message ) {
1525 - $errors[] = array(
1526 - 'code' => $code,
1527 - 'message' => $message,
1528 - 'data' => $error->get_error_data( $code ),
1529 - );
1530 - }
1531 - }
1532 -
1533 - $result = ( ! empty( $errors ) ) ? $errors[0] : null;
1534 - if ( count( $errors ) > 1 ) {
1535 - // Remove the primary error.
1536 - array_shift( $errors );
1537 - $result['additional_errors'] = $errors;
1538 - }
1539 - }
1540 -
1541 - $result = wp_json_encode( $result );
1542 -
1543 - $encrypted = $cxntests->encrypt_string_for_wpcom( $result );
1544 -
1545 - if ( ! $encrypted || ! is_array( $encrypted ) ) {
1546 - return rest_ensure_response(
1547 - array(
1548 - 'code' => 'action_required',
1549 - 'message' => 'Please request results from the in-plugin debugger',
1550 - )
1551 - );
1552 - }
1553 -
1554 - return rest_ensure_response(
1555 - array(
1556 - 'code' => 'response',
1557 - 'debug' => array(
1558 - 'data' => $encrypted['data'],
1559 - 'key' => $encrypted['key'],
1560 - ),
1561 - )
1562 - );
1563 - }
1564 -
1565 - /**
1566 1443 * Fetch information about the Rewind status of the site.
1567 1444 */
1568 1445 public static function rewind_data() {
1569 1446 $site_id = Jetpack_Options::get_option( 'id' );
@@ -1606,9 +1483,9 @@
1606 1483 return rest_ensure_response(
1607 1484 array(
1608 1485 'code' => 'success',
1609 1486 'message' => esc_html__( 'Backup & Scan data correctly received.', 'jetpack' ),
1610 - 'data' => wp_json_encode( $rewind_data ),
1487 + 'data' => wp_json_encode( $rewind_data, JSON_UNESCAPED_SLASHES ),
1611 1488 )
1612 1489 );
1613 1490 }
1614 1491
@@ -1689,9 +1566,9 @@
1689 1566 return rest_ensure_response(
1690 1567 array(
1691 1568 'code' => 'success',
1692 1569 'message' => esc_html__( 'Scan state correctly received.', 'jetpack' ),
1693 - 'data' => wp_json_encode( $scan_state ),
1570 + 'data' => wp_json_encode( $scan_state, JSON_UNESCAPED_SLASHES ),
1694 1571 )
1695 1572 );
1696 1573 }
1697 1574
@@ -1738,41 +1615,8 @@
1738 1615 return new WP_Error( 'disconnect_failed', esc_html__( 'Was not able to disconnect the site. Please try again.', 'jetpack' ), array( 'status' => 400 ) );
1739 1616 }
1740 1617
1741 1618 /**
1742 - * Registers the Jetpack site
1743 - *
1744 - * @deprecated since Jetpack 9.7.0
1745 - * @see Automattic\Jetpack\Connection\REST_Connector::connection_register()
1746 - *
1747 - * @param WP_REST_Request $request The request sent to the WP REST API.
1748 - *
1749 - * @return bool|WP_Error True if Jetpack successfully registered
1750 - */
1751 - public static function register_site( $request ) {
1752 - _deprecated_function( __METHOD__, 'jetpack-9.7.0', '\Automattic\Jetpack\Connection\REST_Connector::connection_register' );
1753 -
1754 - if ( ! wp_verify_nonce( $request->get_param( 'registration_nonce' ), 'jetpack-registration-nonce' ) ) {
1755 - return new WP_Error( 'invalid_nonce', __( 'Unable to verify your request.', 'jetpack' ), array( 'status' => 403 ) );
1756 - }
1757 -
1758 - if ( isset( $request['from'] ) ) {
1759 - Jetpack::connection()->add_register_request_param( 'from', (string) $request['from'] );
1760 - }
1761 - $response = Jetpack::connection()->try_registration();
1762 -
1763 - if ( is_wp_error( $response ) ) {
1764 - return $response;
1765 - }
1766 -
1767 - return rest_ensure_response(
1768 - array(
1769 - 'authorizeUrl' => Jetpack::build_authorize_url( false ),
1770 - )
1771 - );
1772 - }
1773 -
1774 - /**
1775 1619 * Gets a new connect raw URL with fresh nonce.
1776 1620 *
1777 1621 * @uses Jetpack::disconnect();
1778 1622 * @since 4.3.0
@@ -1781,10 +1625,10 @@
1781 1625 *
1782 1626 * @return string|WP_Error A raw URL if the connection URL could be built; error message otherwise.
1783 1627 */
1784 1628 public static function build_connect_url( $request = array() ) {
1785 - $from = isset( $request['from'] ) ? $request['from'] : false;
1786 - $redirect = isset( $request['redirect'] ) ? $request['redirect'] : false;
1629 + $from = $request['from'] ?? false;
1630 + $redirect = $request['redirect'] ?? false;
1787 1631
1788 1632 $url = Jetpack::init()->build_connect_url( true, $redirect, $from );
1789 1633 if ( $url ) {
1790 1634 return rest_ensure_response( $url );
@@ -1822,30 +1666,21 @@
1822 1666
1823 1667 /**
1824 1668 * Unlinks current user from the WordPress.com Servers.
1825 1669 *
1826 - * @since 4.3.0
1670 + * @param WP_REST_Request $request The request sent to the WP REST API.
1827 1671 * @uses Automattic\Jetpack\Connection\Manager->disconnect_user
1828 1672 *
1829 - * @param WP_REST_Request $request The request sent to the WP REST API.
1673 + * @deprecated since Jetpack 14.4.0
1674 + * @see Automattic\Jetpack\Connection\REST_Connector::unlink_user()
1830 1675 *
1676 + * @since 4.3.0
1677 + *
1831 1678 * @return bool|WP_Error True if user successfully unlinked.
1832 1679 */
1833 1680 public static function unlink_user( $request ) {
1834 -
1835 - if ( ! isset( $request['linked'] ) || false !== $request['linked'] ) {
1836 - return new WP_Error( 'invalid_param', esc_html__( 'Invalid Parameter', 'jetpack' ), array( 'status' => 404 ) );
1837 - }
1838 -
1839 - if ( ( new Connection_Manager( 'jetpack' ) )->disconnect_user() ) {
1840 - return rest_ensure_response(
1841 - array(
1842 - 'code' => 'success',
1843 - )
1844 - );
1845 - }
1846 -
1847 - return new WP_Error( 'unlink_user_failed', esc_html__( 'Was not able to unlink the user. Please try again.', 'jetpack' ), array( 'status' => 400 ) );
1681 + _deprecated_function( __METHOD__, 'jetpack-14.4.0', 'Automattic\Jetpack\Connection\REST_Connector::unlink_user()' );
1682 + return REST_Connector::unlink_user( $request );
1848 1683 }
1849 1684
1850 1685 /**
1851 1686 * Gets current user's tracking settings.
@@ -1904,9 +1739,9 @@
1904 1739 'Content-Type' => 'application/json',
1905 1740 'X-Forwarded-For' => ( new Visitor() )->get_ip( true ),
1906 1741 ),
1907 1742 ),
1908 - wp_json_encode( $request->get_params() )
1743 + wp_json_encode( $request->get_params(), JSON_UNESCAPED_SLASHES )
1909 1744 );
1910 1745 if ( ! is_wp_error( $response ) ) {
1911 1746 $response = json_decode( wp_remote_retrieve_body( $response ), true );
1912 1747 }
@@ -1918,93 +1753,30 @@
1918 1753 /**
1919 1754 * Fetch site data from .com including the site's current plan and the site's products.
1920 1755 *
1921 1756 * @since 5.5.0
1757 + * @deprecated 16.2 Use Automattic\Jetpack\Connection\Manager::get_connected_site_data().
1922 1758 *
1923 1759 * @return stdClass|WP_Error
1924 1760 */
1925 1761 public static function site_data() {
1926 - $site_id = Jetpack_Options::get_option( 'id' );
1762 + _deprecated_function( __METHOD__, 'jetpack-16.2', 'Automattic\Jetpack\Connection\Manager::get_connected_site_data' );
1927 1763
1928 - if ( ! $site_id ) {
1929 - return new WP_Error( 'site_id_missing', '', array( 'api_error_code' => __( 'site_id_missing', 'jetpack' ) ) );
1930 - }
1764 + return ( new Connection_Manager() )->get_connected_site_data();
1765 + }
1931 1766
1932 - $args = array( 'headers' => array() );
1933 -
1934 - // Allow use a store sandbox. Internal ref: PCYsg-IA-p2.
1935 - if ( isset( $_COOKIE ) && isset( $_COOKIE['store_sandbox'] ) ) {
1936 - $secret = filter_var( wp_unslash( $_COOKIE['store_sandbox'] ) );
1937 - $args['headers']['Cookie'] = "store_sandbox=$secret;";
1938 - }
1939 -
1940 - $response = Client::wpcom_json_api_request_as_blog( sprintf( '/sites/%d', $site_id ) . '?force=wpcom', '1.1', $args );
1941 - $body = wp_remote_retrieve_body( $response );
1942 - $data = $body ? json_decode( $body ) : null;
1943 -
1944 - if ( 200 !== wp_remote_retrieve_response_code( $response ) ) {
1945 - $error_info = array(
1946 - 'api_error_code' => null,
1947 - 'api_http_code' => wp_remote_retrieve_response_code( $response ),
1948 - );
1949 -
1950 - if ( is_wp_error( $response ) ) {
1951 - $error_info['api_error_code'] = $response->get_error_code() ? wp_strip_all_tags( $response->get_error_code() ) : null;
1952 - } elseif ( $data && ! empty( $data->error ) ) {
1953 - $error_info['api_error_code'] = $data->error;
1954 - }
1955 -
1956 - return new WP_Error( 'site_data_fetch_failed', '', $error_info );
1957 - }
1958 -
1959 - Jetpack_Plan::update_from_sites_response( $response );
1960 -
1961 - return $data;
1962 - }
1963 1767 /**
1964 1768 * Get site data, including for example, the site's current plan.
1965 1769 *
1770 + * @since 4.3.0
1771 + * @deprecated 16.2 Use Automattic\Jetpack\Connection\REST_Connector::site_data_response().
1772 + *
1966 1773 * @return WP_Error|WP_HTTP_Response|WP_REST_Response
1967 - * @since 4.3.0
1968 1774 */
1969 1775 public static function get_site_data() {
1970 - $site_data = self::site_data();
1776 + _deprecated_function( __METHOD__, 'jetpack-16.2', 'Automattic\Jetpack\Connection\REST_Connector::site_data_response' );
1971 1777
1972 - if ( ! is_wp_error( $site_data ) ) {
1973 -
1974 - /**
1975 - * Fires when the site data was successfully returned from the /sites/%d wpcom endpoint.
1976 - *
1977 - * @since 8.7.0
1978 - */
1979 - do_action( 'jetpack_get_site_data_success' );
1980 - return rest_ensure_response(
1981 - array(
1982 - 'code' => 'success',
1983 - 'message' => esc_html__( 'Site data correctly received.', 'jetpack' ),
1984 - 'data' => wp_json_encode( $site_data ),
1985 - )
1986 - );
1987 - }
1988 -
1989 - $error_data = $site_data->get_error_data();
1990 -
1991 - if ( empty( $error_data['api_error_code'] ) ) {
1992 - $error_message = esc_html__( 'Failed fetching site data from WordPress.com. If the problem persists, try reconnecting Jetpack.', 'jetpack' );
1993 - } else {
1994 - /* translators: %s is an error code (e.g. `token_mismatch`) */
1995 - $error_message = sprintf( esc_html__( 'Failed fetching site data from WordPress.com (%s). If the problem persists, try reconnecting Jetpack.', 'jetpack' ), $error_data['api_error_code'] );
1996 - }
1997 -
1998 - return new WP_Error(
1999 - $site_data->get_error_code(),
2000 - $error_message,
2001 - array(
2002 - 'status' => 400,
2003 - 'api_error_code' => empty( $error_data['api_error_code'] ) ? null : $error_data['api_error_code'],
2004 - 'api_http_code' => empty( $error_data['api_http_code'] ) ? null : $error_data['api_http_code'],
2005 - )
2006 - );
1778 + return REST_Connector::site_data_response();
2007 1779 }
2008 1780
2009 1781 /**
2010 1782 * Fetch AL data for this site and return it.
@@ -2219,9 +1991,9 @@
2219 1991 public static function get_updateable_data_list( $selector = '' ) {
2220 1992
2221 1993 $options = array(
2222 1994 // Blocks.
2223 - 'jetpack_blocks_disabled' => array(
1995 + 'jetpack_blocks_disabled' => array(
2224 1996 'description' => esc_html__( 'Jetpack Blocks disabled.', 'jetpack' ),
2225 1997 'type' => 'boolean',
2226 1998 'default' => false,
2227 1999 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2228,9 +2000,9 @@
2228 2000 'jp_group' => 'settings',
2229 2001 ),
2230 2002
2231 2003 // Carousel
2232 - 'carousel_background_color' => array(
2004 + 'carousel_background_color' => array(
2233 2005 'description' => esc_html__( 'Color scheme.', 'jetpack' ),
2234 2006 'type' => 'string',
2235 2007 'default' => 'black',
2236 2008 'enum' => array(
@@ -2243,9 +2015,9 @@
2243 2015 ),
2244 2016 'validate_callback' => __CLASS__ . '::validate_list_item',
2245 2017 'jp_group' => 'carousel',
2246 2018 ),
2247 - 'carousel_display_exif' => array(
2019 + 'carousel_display_exif' => array(
2248 2020 'description' => wp_kses(
2249 2021 sprintf( __( 'Show photo metadata (<a href="https://en.wikipedia.org/wiki/Exchangeable_image_file_format" target="_blank">Exif</a>) in carousel, when available.', 'jetpack' ) ),
2250 2022 array(
2251 2023 'a' => array(
@@ -2258,9 +2030,9 @@
2258 2030 'default' => 0,
2259 2031 'validate_callback' => __CLASS__ . '::validate_boolean',
2260 2032 'jp_group' => 'carousel',
2261 2033 ),
2262 - 'carousel_display_comments' => array(
2034 + 'carousel_display_comments' => array(
2263 2035 'description' => esc_html__( 'Show comments area in carousel', 'jetpack' ),
2264 2036 'type' => 'boolean',
2265 2037 'default' => 1,
2266 2038 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2267,9 +2039,9 @@
2267 2039 'jp_group' => 'carousel',
2268 2040 ),
2269 2041
2270 2042 // Comments.
2271 - 'highlander_comment_form_prompt' => array(
2043 + 'highlander_comment_form_prompt' => array(
2272 2044 'description' => esc_html__( 'Greeting Text', 'jetpack' ),
2273 2045 'type' => 'string',
2274 2046 'default' => esc_html__( 'Leave a Reply', 'jetpack' ),
2275 2047 'sanitize_callback' => 'sanitize_text_field',
@@ -2274,9 +2046,9 @@
2274 2046 'default' => esc_html__( 'Leave a Reply', 'jetpack' ),
2275 2047 'sanitize_callback' => 'sanitize_text_field',
2276 2048 'jp_group' => 'comments',
2277 2049 ),
2278 - 'jetpack_comment_form_color_scheme' => array(
2050 + 'jetpack_comment_form_color_scheme' => array(
2279 2051 'description' => esc_html__( 'Color scheme', 'jetpack' ),
2280 2052 'type' => 'string',
2281 2053 'default' => 'light',
2282 2054 'enum' => array(
@@ -2293,39 +2065,38 @@
2293 2065 'jp_group' => 'comments',
2294 2066 ),
2295 2067
2296 2068 // Custom Content Types.
2297 - 'jetpack_portfolio' => array(
2069 + 'jetpack_portfolio' => array(
2298 2070 'description' => esc_html__( 'Enable or disable Jetpack portfolio post type.', 'jetpack' ),
2299 2071 'type' => 'boolean',
2300 2072 'default' => 0,
2301 2073 'validate_callback' => __CLASS__ . '::validate_boolean',
2302 - 'jp_group' => 'custom-content-types',
2074 + 'jp_group' => 'settings',
2303 2075 ),
2304 - 'jetpack_portfolio_posts_per_page' => array(
2076 + 'jetpack_portfolio_posts_per_page' => array(
2305 2077 'description' => esc_html__( 'Number of entries to show at most in Portfolio pages.', 'jetpack' ),
2306 2078 'type' => 'integer',
2307 2079 'default' => 10,
2308 2080 'validate_callback' => __CLASS__ . '::validate_posint',
2309 - 'jp_group' => 'custom-content-types',
2081 + 'jp_group' => 'settings',
2310 2082 ),
2311 - 'jetpack_testimonial' => array(
2083 + 'jetpack_testimonial' => array(
2312 2084 'description' => esc_html__( 'Enable or disable Jetpack testimonial post type.', 'jetpack' ),
2313 2085 'type' => 'boolean',
2314 2086 'default' => 0,
2315 2087 'validate_callback' => __CLASS__ . '::validate_boolean',
2316 - 'jp_group' => 'custom-content-types',
2088 + 'jp_group' => 'settings',
2317 2089 ),
2318 - 'jetpack_testimonial_posts_per_page' => array(
2090 + 'jetpack_testimonial_posts_per_page' => array(
2319 2091 'description' => esc_html__( 'Number of entries to show at most in Testimonial pages.', 'jetpack' ),
2320 2092 'type' => 'integer',
2321 2093 'default' => 10,
2322 2094 'validate_callback' => __CLASS__ . '::validate_posint',
2323 - 'jp_group' => 'custom-content-types',
2095 + 'jp_group' => 'settings',
2324 2096 ),
2325 -
2326 2097 // WAF.
2327 - 'jetpack_waf_automatic_rules' => array(
2098 + 'jetpack_waf_automatic_rules' => array(
2328 2099 'description' => esc_html__( 'Enable automatic rules - Protect your site against untrusted traffic sources with automatic security rules.', 'jetpack' ),
2329 2100 'type' => 'boolean',
2330 2101 'default' => Waf_Compatibility::get_default_automatic_rules_option(),
2331 2102 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2330,16 +2101,16 @@
2330 2101 'default' => Waf_Compatibility::get_default_automatic_rules_option(),
2331 2102 'validate_callback' => __CLASS__ . '::validate_boolean',
2332 2103 'jp_group' => 'waf',
2333 2104 ),
2334 - 'jetpack_waf_ip_list' => array(
2335 - 'description' => esc_html__( 'Allow / Block list - Block or allow a specific request IP.', 'jetpack' ),
2105 + 'jetpack_waf_ip_block_list_enabled' => array(
2106 + 'description' => esc_html__( 'Block list - Block a specific request IP.', 'jetpack' ),
2336 2107 'type' => 'boolean',
2337 2108 'default' => 0,
2338 2109 'validate_callback' => __CLASS__ . '::validate_boolean',
2339 2110 'jp_group' => 'waf',
2340 2111 ),
2341 - 'jetpack_waf_ip_block_list' => array(
2112 + 'jetpack_waf_ip_block_list' => array(
2342 2113 'description' => esc_html__( 'Blocked IP addresses', 'jetpack' ),
2343 2114 'type' => 'string',
2344 2115 'default' => '',
2345 2116 'validate_callback' => __CLASS__ . '::validate_string',
@@ -2345,9 +2116,16 @@
2345 2116 'validate_callback' => __CLASS__ . '::validate_string',
2346 2117 'sanitize_callback' => 'esc_textarea',
2347 2118 'jp_group' => 'waf',
2348 2119 ),
2349 - 'jetpack_waf_ip_allow_list' => array(
2120 + 'jetpack_waf_ip_allow_list_enabled' => array(
2121 + 'description' => esc_html__( 'Allow list - Allow a specific request IP.', 'jetpack' ),
2122 + 'type' => 'boolean',
2123 + 'default' => 0,
2124 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2125 + 'jp_group' => 'settings',
2126 + ),
2127 + 'jetpack_waf_ip_allow_list' => array(
2350 2128 'description' => esc_html__( 'Always allowed IP addresses', 'jetpack' ),
2351 2129 'type' => 'string',
2352 2130 'default' => '',
2353 2131 'validate_callback' => __CLASS__ . '::validate_string',
@@ -2353,17 +2131,24 @@
2353 2131 'validate_callback' => __CLASS__ . '::validate_string',
2354 2132 'sanitize_callback' => 'esc_textarea',
2355 2133 'jp_group' => 'settings',
2356 2134 ),
2357 - 'jetpack_waf_share_data' => array(
2358 - 'description' => esc_html__( 'Share data with Jetpack.', 'jetpack' ),
2135 + 'jetpack_waf_share_data' => array(
2136 + 'description' => esc_html__( 'Share basic data with Jetpack.', 'jetpack' ),
2359 2137 'type' => 'boolean',
2360 2138 'default' => 0,
2361 2139 'validate_callback' => __CLASS__ . '::validate_boolean',
2362 2140 'jp_group' => 'waf',
2363 2141 ),
2142 + 'jetpack_waf_share_debug_data' => array(
2143 + 'description' => esc_html__( 'Share detailed data with Jetpack.', 'jetpack' ),
2144 + 'type' => 'boolean',
2145 + 'default' => 0,
2146 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2147 + 'jp_group' => 'waf',
2148 + ),
2364 2149 // Galleries.
2365 - 'tiled_galleries' => array(
2150 + 'tiled_galleries' => array(
2366 2151 'description' => esc_html__( 'Display all your gallery pictures in a cool mosaic.', 'jetpack' ),
2367 2152 'type' => 'boolean',
2368 2153 'default' => 0,
2369 2154 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2369,9 +2154,9 @@
2369 2154 'validate_callback' => __CLASS__ . '::validate_boolean',
2370 2155 'jp_group' => 'tiled-gallery',
2371 2156 ),
2372 2157
2373 - 'gravatar_disable_hovercards' => array(
2158 + 'gravatar_disable_hovercards' => array(
2374 2159 'description' => esc_html__( "View people's profiles when you mouse over their Gravatars", 'jetpack' ),
2375 2160 'type' => 'string',
2376 2161 'default' => 'enabled',
2377 2162 // Not visible. This is used as the checkbox value.
@@ -2387,9 +2172,9 @@
2387 2172 'jp_group' => 'gravatar-hovercards',
2388 2173 ),
2389 2174
2390 2175 // Infinite Scroll.
2391 - 'infinite_scroll' => array(
2176 + 'infinite_scroll' => array(
2392 2177 'description' => esc_html__( 'To infinity and beyond', 'jetpack' ),
2393 2178 'type' => 'boolean',
2394 2179 'default' => 1,
2395 2180 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2394,9 +2179,9 @@
2394 2179 'default' => 1,
2395 2180 'validate_callback' => __CLASS__ . '::validate_boolean',
2396 2181 'jp_group' => 'infinite-scroll',
2397 2182 ),
2398 - 'infinite_scroll_google_analytics' => array(
2183 + 'infinite_scroll_google_analytics' => array(
2399 2184 'description' => esc_html__( 'Use Google Analytics with Infinite Scroll', 'jetpack' ),
2400 2185 'type' => 'boolean',
2401 2186 'default' => 0,
2402 2187 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2403,9 +2188,9 @@
2403 2188 'jp_group' => 'infinite-scroll',
2404 2189 ),
2405 2190
2406 2191 // Likes.
2407 - 'wpl_default' => array(
2192 + 'wpl_default' => array(
2408 2193 'description' => esc_html__( 'WordPress.com Likes are', 'jetpack' ),
2409 2194 'type' => 'string',
2410 2195 'default' => 'on',
2411 2196 'enum' => array(
@@ -2418,9 +2203,9 @@
2418 2203 ),
2419 2204 'validate_callback' => __CLASS__ . '::validate_list_item',
2420 2205 'jp_group' => 'likes',
2421 2206 ),
2422 - 'social_notifications_like' => array(
2207 + 'social_notifications_like' => array(
2423 2208 'description' => esc_html__( 'Send email notification when someone likes a post', 'jetpack' ),
2424 2209 'type' => 'boolean',
2425 2210 'default' => 1,
2426 2211 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2427,9 +2212,9 @@
2427 2212 'jp_group' => 'likes',
2428 2213 ),
2429 2214
2430 2215 // Markdown.
2431 - 'wpcom_publish_comments_with_markdown' => array(
2216 + 'wpcom_publish_comments_with_markdown' => array(
2432 2217 'description' => esc_html__( 'Use Markdown for comments.', 'jetpack' ),
2433 2218 'type' => 'boolean',
2434 2219 'default' => 0,
2435 2220 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2434,9 +2219,9 @@
2434 2219 'default' => 0,
2435 2220 'validate_callback' => __CLASS__ . '::validate_boolean',
2436 2221 'jp_group' => 'markdown',
2437 2222 ),
2438 - 'wpcom_publish_posts_with_markdown' => array(
2223 + 'wpcom_publish_posts_with_markdown' => array(
2439 2224 'description' => esc_html__( 'Use Markdown for posts.', 'jetpack' ),
2440 2225 'type' => 'boolean',
2441 2226 'default' => 0,
2442 2227 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2443,9 +2228,9 @@
2443 2228 'jp_group' => 'markdown',
2444 2229 ),
2445 2230
2446 2231 // Monitor.
2447 - 'monitor_receive_notifications' => array(
2232 + 'monitor_receive_notifications' => array(
2448 2233 'description' => esc_html__( 'Receive Monitor Email Notifications.', 'jetpack' ),
2449 2234 'type' => 'boolean',
2450 2235 'default' => 0,
2451 2236 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2452,9 +2237,9 @@
2452 2237 'jp_group' => 'monitor',
2453 2238 ),
2454 2239
2455 2240 // Post by Email.
2456 - 'post_by_email_address' => array(
2241 + 'post_by_email_address' => array(
2457 2242 'description' => esc_html__( 'Email Address', 'jetpack' ),
2458 2243 'type' => 'string',
2459 2244 'default' => 'noop',
2460 2245 'enum' => array(
@@ -2473,9 +2258,9 @@
2473 2258 'jp_group' => 'post-by-email',
2474 2259 ),
2475 2260
2476 2261 // Protect.
2477 - 'jetpack_protect_key' => array(
2262 + 'jetpack_protect_key' => array(
2478 2263 'description' => esc_html__( 'Protect API key', 'jetpack' ),
2479 2264 'type' => 'string',
2480 2265 'default' => '',
2481 2266 'validate_callback' => __CLASS__ . '::validate_alphanum',
@@ -2480,9 +2265,9 @@
2480 2265 'default' => '',
2481 2266 'validate_callback' => __CLASS__ . '::validate_alphanum',
2482 2267 'jp_group' => 'protect',
2483 2268 ),
2484 - 'jetpack_protect_global_whitelist' => array(
2269 + 'jetpack_protect_global_whitelist' => array(
2485 2270 'description' => esc_html__( 'Protect global IP allow list', 'jetpack' ),
2486 2271 'type' => 'string',
2487 2272 'default' => '',
2488 2273 'validate_callback' => __CLASS__ . '::validate_string',
@@ -2490,19 +2275,19 @@
2490 2275 'jp_group' => 'protect',
2491 2276 ),
2492 2277
2493 2278 // Sharing.
2494 - 'sharing_services' => array(
2279 + 'sharing_services' => array(
2495 2280 'description' => esc_html__( 'Enabled Services and those hidden behind a button', 'jetpack' ),
2496 2281 'type' => 'object',
2497 2282 'default' => array(
2498 - 'visible' => array( 'twitter', 'facebook' ),
2283 + 'visible' => array( 'facebook', 'x' ),
2499 2284 'hidden' => array(),
2500 2285 ),
2501 2286 'validate_callback' => __CLASS__ . '::validate_services',
2502 2287 'jp_group' => 'sharedaddy',
2503 2288 ),
2504 - 'button_style' => array(
2289 + 'button_style' => array(
2505 2290 'description' => esc_html__( 'Button Style', 'jetpack' ),
2506 2291 'type' => 'string',
2507 2292 'default' => 'icon',
2508 2293 'enum' => array(
@@ -2519,9 +2304,9 @@
2519 2304 ),
2520 2305 'validate_callback' => __CLASS__ . '::validate_list_item',
2521 2306 'jp_group' => 'sharedaddy',
2522 2307 ),
2523 - 'sharing_label' => array(
2308 + 'sharing_label' => array(
2524 2309 'description' => esc_html__( 'Sharing Label', 'jetpack' ),
2525 2310 'type' => 'string',
2526 2311 'default' => '',
2527 2312 'validate_callback' => __CLASS__ . '::validate_string',
@@ -2527,9 +2312,9 @@
2527 2312 'validate_callback' => __CLASS__ . '::validate_string',
2528 2313 'sanitize_callback' => 'esc_html',
2529 2314 'jp_group' => 'sharedaddy',
2530 2315 ),
2531 - 'show' => array(
2316 + 'show' => array(
2532 2317 'description' => esc_html__( 'Views where buttons are shown', 'jetpack' ),
2533 2318 'type' => 'array',
2534 2319 'items' => array(
2535 2320 'type' => 'string',
@@ -2537,9 +2322,9 @@
2537 2322 'default' => array( 'post' ),
2538 2323 'validate_callback' => __CLASS__ . '::validate_sharing_show',
2539 2324 'jp_group' => 'sharedaddy',
2540 2325 ),
2541 - 'jetpack-twitter-cards-site-tag' => array(
2326 + 'jetpack-twitter-cards-site-tag' => array(
2542 2327 'description' => esc_html__( "The Twitter username of the owner of this site's domain.", 'jetpack' ),
2543 2328 'type' => 'string',
2544 2329 'default' => '',
2545 2330 'validate_callback' => __CLASS__ . '::validate_twitter_username',
@@ -2545,9 +2330,9 @@
2545 2330 'validate_callback' => __CLASS__ . '::validate_twitter_username',
2546 2331 'sanitize_callback' => 'esc_html',
2547 2332 'jp_group' => 'sharedaddy',
2548 2333 ),
2549 - 'sharedaddy_disable_resources' => array(
2334 + 'sharedaddy_disable_resources' => array(
2550 2335 'description' => esc_html__( 'Disable CSS and JS', 'jetpack' ),
2551 2336 'type' => 'boolean',
2552 2337 'default' => 0,
2553 2338 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2552,9 +2337,9 @@
2552 2337 'default' => 0,
2553 2338 'validate_callback' => __CLASS__ . '::validate_boolean',
2554 2339 'jp_group' => 'sharedaddy',
2555 2340 ),
2556 - 'custom' => array(
2341 + 'custom' => array(
2557 2342 'description' => esc_html__( 'Custom sharing services added by user.', 'jetpack' ),
2558 2343 'type' => 'object',
2559 2344 'default' => array(
2560 2345 'sharing_name' => '',
@@ -2563,10 +2348,10 @@
2563 2348 ),
2564 2349 'validate_callback' => __CLASS__ . '::validate_custom_service',
2565 2350 'jp_group' => 'sharedaddy',
2566 2351 ),
2567 - // Not an option, but an action that can be perfomed on the list of custom services passing the service ID.
2568 - 'sharing_delete_service' => array(
2352 + // Not an option, but an action that can be performed on the list of custom services passing the service ID.
2353 + 'sharing_delete_service' => array(
2569 2354 'description' => esc_html__( 'Delete custom sharing service.', 'jetpack' ),
2570 2355 'type' => 'string',
2571 2356 'default' => '',
2572 2357 'validate_callback' => __CLASS__ . '::validate_custom_service_id',
@@ -2573,25 +2358,25 @@
2573 2358 'jp_group' => 'sharedaddy',
2574 2359 ),
2575 2360
2576 2361 // SSO.
2577 - 'jetpack_sso_require_two_step' => array(
2362 + 'jetpack_sso_require_two_step' => array(
2578 2363 'description' => esc_html__( 'Require Two-Step Authentication', 'jetpack' ),
2579 2364 'type' => 'boolean',
2580 - 'default' => 0,
2365 + 'default' => SSO\Helpers::is_require_two_step_checkbox_disabled(),
2581 2366 'validate_callback' => __CLASS__ . '::validate_boolean',
2582 2367 'jp_group' => 'sso',
2583 2368 ),
2584 - 'jetpack_sso_match_by_email' => array(
2369 + 'jetpack_sso_match_by_email' => array(
2585 2370 'description' => esc_html__( 'Match by Email', 'jetpack' ),
2586 2371 'type' => 'boolean',
2587 - 'default' => 0,
2372 + 'default' => 1,
2588 2373 'validate_callback' => __CLASS__ . '::validate_boolean',
2589 2374 'jp_group' => 'sso',
2590 2375 ),
2591 2376
2592 2377 // Subscriptions.
2593 - 'stb_enabled' => array(
2378 + 'stb_enabled' => array(
2594 2379 'description' => esc_html__( "Show a <em>'follow blog'</em> option in the comment form", 'jetpack' ),
2595 2380 'type' => 'boolean',
2596 2381 'default' => 1,
2597 2382 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2596,9 +2381,9 @@
2596 2381 'default' => 1,
2597 2382 'validate_callback' => __CLASS__ . '::validate_boolean',
2598 2383 'jp_group' => 'subscriptions',
2599 2384 ),
2600 - 'stc_enabled' => array(
2385 + 'stc_enabled' => array(
2601 2386 'description' => esc_html__( "Show a <em>'follow comments'</em> option in the comment form", 'jetpack' ),
2602 2387 'type' => 'boolean',
2603 2388 'default' => 1,
2604 2389 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2603,18 +2388,144 @@
2603 2388 'default' => 1,
2604 2389 'validate_callback' => __CLASS__ . '::validate_boolean',
2605 2390 'jp_group' => 'subscriptions',
2606 2391 ),
2607 - 'social_notifications_subscribe' => array(
2608 - 'description' => esc_html__( 'Send email notification when someone follows my blog', 'jetpack' ),
2392 + 'wpcom_newsletter_categories' => array(
2393 + 'description' => esc_html__( 'Array of post category ids that are marked as newsletter categories', 'jetpack' ),
2394 + 'type' => 'array',
2395 + 'default' => array(),
2396 + 'validate_callback' => __CLASS__ . '::validate_array',
2397 + 'jp_group' => 'subscriptions',
2398 + ),
2399 + 'wpcom_newsletter_categories_enabled' => array(
2400 + 'description' => esc_html__( 'Whether the newsletter categories are enabled or not', 'jetpack' ),
2609 2401 'type' => 'boolean',
2610 2402 'default' => 0,
2611 2403 'validate_callback' => __CLASS__ . '::validate_boolean',
2612 2404 'jp_group' => 'subscriptions',
2613 2405 ),
2406 + 'wpcom_newsletter_send_default' => array(
2407 + 'description' => esc_html__( 'Whether to send newsletter emails by default when publishing a post', 'jetpack' ),
2408 + 'type' => 'boolean',
2409 + 'default' => 1,
2410 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2411 + 'jp_group' => 'subscriptions',
2412 + ),
2413 + 'wpcom_featured_image_in_email' => array(
2414 + 'description' => esc_html__( 'Whether to include the featured image in the email or not', 'jetpack' ),
2415 + 'type' => 'boolean',
2416 + 'default' => 0,
2417 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2418 + 'jp_group' => 'subscriptions',
2419 + ),
2420 + 'jetpack_gravatar_in_email' => array(
2421 + 'description' => esc_html__( 'Whether to show author avatar in the email byline', 'jetpack' ),
2422 + 'type' => 'boolean',
2423 + 'default' => 1,
2424 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2425 + 'jp_group' => 'subscriptions',
2426 + ),
2427 + 'jetpack_author_in_email' => array(
2428 + 'description' => esc_html__( 'Whether to show author display name in the email byline', 'jetpack' ),
2429 + 'type' => 'boolean',
2430 + 'default' => 1,
2431 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2432 + 'jp_group' => 'subscriptions',
2433 + ),
2434 + 'jetpack_post_date_in_email' => array(
2435 + 'description' => esc_html__( 'Whether to show date in the email byline', 'jetpack' ),
2436 + 'type' => 'boolean',
2437 + 'default' => 1,
2438 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2439 + 'jp_group' => 'subscriptions',
2440 + ),
2441 + 'wpcom_subscription_emails_use_excerpt' => array(
2442 + 'description' => esc_html__( 'Whether to use the excerpt in the email or not', 'jetpack' ),
2443 + 'type' => 'boolean',
2444 + 'default' => 0,
2445 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2446 + 'jp_group' => 'subscriptions',
2447 + ),
2448 + 'jetpack_subscriptions_reply_to' => array(
2449 + 'description' => esc_html__( 'Reply to email behaviour for newsletters emails', 'jetpack' ),
2450 + 'type' => 'string',
2451 + 'default' => Automattic\Jetpack\Modules\Subscriptions\Settings::$default_reply_to,
2452 + 'validate_callback' => __CLASS__ . '::validate_subscriptions_reply_to',
2453 + 'jp_group' => 'subscriptions',
2454 + ),
2455 + 'jetpack_subscriptions_from_name' => array(
2456 + 'description' => esc_html__( 'From name for newsletters emails', 'jetpack' ),
2457 + 'type' => 'string',
2458 + 'default' => '',
2459 + 'validate_callback' => __CLASS__ . '::validate_subscriptions_reply_to_name',
2460 + 'jp_group' => 'subscriptions',
2461 + ),
2462 + 'sm_enabled' => array(
2463 + 'description' => esc_html__( 'Show popup Subscribe modal to readers.', 'jetpack' ),
2464 + 'type' => 'boolean',
2465 + 'default' => 0,
2466 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2467 + 'jp_group' => 'subscriptions',
2468 + ),
2469 + 'jetpack_subscribe_overlay_enabled' => array(
2470 + 'description' => esc_html__( 'Show subscribe overlay on homepage.', 'jetpack' ),
2471 + 'type' => 'boolean',
2472 + 'default' => 0,
2473 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2474 + 'jp_group' => 'subscriptions',
2475 + ),
2476 + 'jetpack_subscribe_floating_button_enabled' => array(
2477 + 'description' => esc_html__( 'Show a floating subscribe button.', 'jetpack' ),
2478 + 'type' => 'boolean',
2479 + 'default' => 0,
2480 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2481 + 'jp_group' => 'subscriptions',
2482 + ),
2483 + 'jetpack_subscriptions_subscribe_post_end_enabled' => array(
2484 + 'description' => esc_html__( 'Add Subscribe block at the end of each post.', 'jetpack' ),
2485 + 'type' => 'boolean',
2486 + 'default' => 0,
2487 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2488 + 'jp_group' => 'subscriptions',
2489 + ),
2490 + 'jetpack_subscriptions_login_navigation_enabled' => array(
2491 + 'description' => esc_html__( 'Add Subscriber Login block to the navigation.', 'jetpack' ),
2492 + 'type' => 'boolean',
2493 + 'default' => 0,
2494 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2495 + 'jp_group' => 'subscriptions',
2496 + ),
2497 + 'jetpack_subscriptions_subscribe_navigation_enabled' => array(
2498 + 'description' => esc_html__( 'Add Subscribe block to the navigation.', 'jetpack' ),
2499 + 'type' => 'boolean',
2500 + 'default' => 0,
2501 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2502 + 'jp_group' => 'subscriptions',
2503 + ),
2504 + 'social_notifications_subscribe' => array(
2505 + 'description' => esc_html__( 'Send email notification when someone subscribes to my blog', 'jetpack' ),
2506 + 'type' => 'boolean',
2507 + 'default' => 0,
2508 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2509 + 'jp_group' => 'subscriptions',
2510 + ),
2511 + 'subscription_options' => array(
2512 + 'description' => esc_html__( 'Options used in subscription email templates and the Subscribe block: \'invitation\', \'welcome\', \'comment_follow\', \'subscribe_modal_heading\', \'free_tier_description\' and \'hide_free_tier\'.', 'jetpack' ),
2513 + 'type' => 'object',
2514 + 'default' => array(
2515 + 'invitation' => '',
2516 + 'welcome' => '',
2517 + 'comment_follow' => '',
2518 + 'subscribe_modal_heading' => '',
2519 + 'free_tier_description' => '',
2520 + 'hide_free_tier' => false,
2521 + ),
2522 + 'validate_callback' => __CLASS__ . '::validate_subscription_options',
2523 + 'jp_group' => 'subscriptions',
2524 + ),
2614 2525
2615 2526 // Related Posts.
2616 - 'show_headline' => array(
2527 + 'show_headline' => array(
2617 2528 'description' => esc_html__( 'Highlight related content with a heading', 'jetpack' ),
2618 2529 'type' => 'boolean',
2619 2530 'default' => 1,
2620 2531 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2619,9 +2530,9 @@
2619 2530 'default' => 1,
2620 2531 'validate_callback' => __CLASS__ . '::validate_boolean',
2621 2532 'jp_group' => 'related-posts',
2622 2533 ),
2623 - 'show_thumbnails' => array(
2534 + 'show_thumbnails' => array(
2624 2535 'description' => esc_html__( 'Show a thumbnail image where available', 'jetpack' ),
2625 2536 'type' => 'boolean',
2626 2537 'default' => 0,
2627 2538 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2628,9 +2539,9 @@
2628 2539 'jp_group' => 'related-posts',
2629 2540 ),
2630 2541
2631 2542 // Search.
2632 - 'instant_search_enabled' => array(
2543 + 'instant_search_enabled' => array(
2633 2544 'description' => esc_html__( 'Enable Instant Search', 'jetpack' ),
2634 2545 'type' => 'boolean',
2635 2546 'default' => 0,
2636 2547 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2636,9 +2547,9 @@
2636 2547 'validate_callback' => __CLASS__ . '::validate_boolean',
2637 2548 'jp_group' => 'search',
2638 2549 ),
2639 2550
2640 - 'has_jetpack_search_product' => array(
2551 + 'has_jetpack_search_product' => array(
2641 2552 'description' => esc_html__( 'Has an active Jetpack Search product purchase', 'jetpack' ),
2642 2553 'type' => 'boolean',
2643 2554 'default' => 0,
2644 2555 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2644,9 +2555,9 @@
2644 2555 'validate_callback' => __CLASS__ . '::validate_boolean',
2645 2556 'jp_group' => 'settings',
2646 2557 ),
2647 2558
2648 - 'search_auto_config' => array(
2559 + 'search_auto_config' => array(
2649 2560 'description' => esc_html__( 'Trigger an auto config of instant search', 'jetpack' ),
2650 2561 'type' => 'boolean',
2651 2562 'default' => 0,
2652 2563 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2653,9 +2564,9 @@
2653 2564 'jp_group' => 'search',
2654 2565 ),
2655 2566
2656 2567 // Verification Tools.
2657 - 'google' => array(
2568 + 'google' => array(
2658 2569 'description' => esc_html__( 'Google Search Console', 'jetpack' ),
2659 2570 'type' => 'string',
2660 2571 'default' => '',
2661 2572 'validate_callback' => __CLASS__ . '::validate_verification_service',
@@ -2660,9 +2571,9 @@
2660 2571 'default' => '',
2661 2572 'validate_callback' => __CLASS__ . '::validate_verification_service',
2662 2573 'jp_group' => 'verification-tools',
2663 2574 ),
2664 - 'bing' => array(
2575 + 'bing' => array(
2665 2576 'description' => esc_html__( 'Bing Webmaster Center', 'jetpack' ),
2666 2577 'type' => 'string',
2667 2578 'default' => '',
2668 2579 'validate_callback' => __CLASS__ . '::validate_verification_service',
@@ -2667,9 +2578,9 @@
2667 2578 'default' => '',
2668 2579 'validate_callback' => __CLASS__ . '::validate_verification_service',
2669 2580 'jp_group' => 'verification-tools',
2670 2581 ),
2671 - 'pinterest' => array(
2582 + 'pinterest' => array(
2672 2583 'description' => esc_html__( 'Pinterest Site Verification', 'jetpack' ),
2673 2584 'type' => 'string',
2674 2585 'default' => '',
2675 2586 'validate_callback' => __CLASS__ . '::validate_verification_service',
@@ -2674,9 +2585,9 @@
2674 2585 'default' => '',
2675 2586 'validate_callback' => __CLASS__ . '::validate_verification_service',
2676 2587 'jp_group' => 'verification-tools',
2677 2588 ),
2678 - 'yandex' => array(
2589 + 'yandex' => array(
2679 2590 'description' => esc_html__( 'Yandex Site Verification', 'jetpack' ),
2680 2591 'type' => 'string',
2681 2592 'default' => '',
2682 2593 'validate_callback' => __CLASS__ . '::validate_verification_service',
@@ -2681,9 +2592,9 @@
2681 2592 'default' => '',
2682 2593 'validate_callback' => __CLASS__ . '::validate_verification_service',
2683 2594 'jp_group' => 'verification-tools',
2684 2595 ),
2685 - 'facebook' => array(
2596 + 'facebook' => array(
2686 2597 'description' => esc_html__( 'Facebook Domain Verification', 'jetpack' ),
2687 2598 'type' => 'string',
2688 2599 'default' => '',
2689 2600 'validate_callback' => __CLASS__ . '::validate_verification_service',
@@ -2690,9 +2601,9 @@
2690 2601 'jp_group' => 'verification-tools',
2691 2602 ),
2692 2603
2693 2604 // WordAds.
2694 - 'enable_header_ad' => array(
2605 + 'enable_header_ad' => array(
2695 2606 'description' => esc_html__( 'Display an ad unit at the top of each page.', 'jetpack' ),
2696 2607 'type' => 'boolean',
2697 2608 'default' => 1,
2698 2609 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2697,9 +2608,9 @@
2697 2608 'default' => 1,
2698 2609 'validate_callback' => __CLASS__ . '::validate_boolean',
2699 2610 'jp_group' => 'wordads',
2700 2611 ),
2701 - 'wordads_approved' => array(
2612 + 'wordads_approved' => array(
2702 2613 'description' => esc_html__( 'Is site approved for WordAds?', 'jetpack' ),
2703 2614 'type' => 'boolean',
2704 2615 'default' => 0,
2705 2616 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2704,9 +2615,9 @@
2704 2615 'default' => 0,
2705 2616 'validate_callback' => __CLASS__ . '::validate_boolean',
2706 2617 'jp_group' => 'wordads',
2707 2618 ),
2708 - 'wordads_second_belowpost' => array(
2619 + 'wordads_second_belowpost' => array(
2709 2620 'description' => esc_html__( 'Display second ad below post?', 'jetpack' ),
2710 2621 'type' => 'boolean',
2711 2622 'default' => 1,
2712 2623 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2711,9 +2622,16 @@
2711 2622 'default' => 1,
2712 2623 'validate_callback' => __CLASS__ . '::validate_boolean',
2713 2624 'jp_group' => 'wordads',
2714 2625 ),
2715 - 'wordads_display_front_page' => array(
2626 + 'wordads_inline_enabled' => array(
2627 + 'description' => esc_html__( 'Display inline ad within post content?', 'jetpack' ),
2628 + 'type' => 'boolean',
2629 + 'default' => 1,
2630 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2631 + 'jp_group' => 'wordads',
2632 + ),
2633 + 'wordads_display_front_page' => array(
2716 2634 'description' => esc_html__( 'Display ads on the front page?', 'jetpack' ),
2717 2635 'type' => 'boolean',
2718 2636 'default' => 1,
2719 2637 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2718,9 +2636,9 @@
2718 2636 'default' => 1,
2719 2637 'validate_callback' => __CLASS__ . '::validate_boolean',
2720 2638 'jp_group' => 'wordads',
2721 2639 ),
2722 - 'wordads_display_post' => array(
2640 + 'wordads_display_post' => array(
2723 2641 'description' => esc_html__( 'Display ads on posts?', 'jetpack' ),
2724 2642 'type' => 'boolean',
2725 2643 'default' => 1,
2726 2644 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2725,9 +2643,9 @@
2725 2643 'default' => 1,
2726 2644 'validate_callback' => __CLASS__ . '::validate_boolean',
2727 2645 'jp_group' => 'wordads',
2728 2646 ),
2729 - 'wordads_display_page' => array(
2647 + 'wordads_display_page' => array(
2730 2648 'description' => esc_html__( 'Display ads on pages?', 'jetpack' ),
2731 2649 'type' => 'boolean',
2732 2650 'default' => 1,
2733 2651 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2732,9 +2650,9 @@
2732 2650 'default' => 1,
2733 2651 'validate_callback' => __CLASS__ . '::validate_boolean',
2734 2652 'jp_group' => 'wordads',
2735 2653 ),
2736 - 'wordads_display_archive' => array(
2654 + 'wordads_display_archive' => array(
2737 2655 'description' => esc_html__( 'Display ads on archive pages?', 'jetpack' ),
2738 2656 'type' => 'boolean',
2739 2657 'default' => 1,
2740 2658 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2739,9 +2657,9 @@
2739 2657 'default' => 1,
2740 2658 'validate_callback' => __CLASS__ . '::validate_boolean',
2741 2659 'jp_group' => 'wordads',
2742 2660 ),
2743 - 'wordads_custom_adstxt_enabled' => array(
2661 + 'wordads_custom_adstxt_enabled' => array(
2744 2662 'description' => esc_html__( 'Custom ads.txt', 'jetpack' ),
2745 2663 'type' => 'boolean',
2746 2664 'default' => 0,
2747 2665 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2746,9 +2664,9 @@
2746 2664 'default' => 0,
2747 2665 'validate_callback' => __CLASS__ . '::validate_boolean',
2748 2666 'jp_group' => 'wordads',
2749 2667 ),
2750 - 'wordads_custom_adstxt' => array(
2668 + 'wordads_custom_adstxt' => array(
2751 2669 'description' => esc_html__( 'Custom ads.txt entries', 'jetpack' ),
2752 2670 'type' => 'string',
2753 2671 'default' => '',
2754 2672 'validate_callback' => __CLASS__ . '::validate_string',
@@ -2754,9 +2672,9 @@
2754 2672 'validate_callback' => __CLASS__ . '::validate_string',
2755 2673 'sanitize_callback' => 'sanitize_textarea_field',
2756 2674 'jp_group' => 'wordads',
2757 2675 ),
2758 - 'wordads_ccpa_enabled' => array(
2676 + 'wordads_ccpa_enabled' => array(
2759 2677 'description' => esc_html__( 'Enable support for California Consumer Privacy Act', 'jetpack' ),
2760 2678 'type' => 'boolean',
2761 2679 'default' => 0,
2762 2680 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2761,9 +2679,9 @@
2761 2679 'default' => 0,
2762 2680 'validate_callback' => __CLASS__ . '::validate_boolean',
2763 2681 'jp_group' => 'wordads',
2764 2682 ),
2765 - 'wordads_ccpa_privacy_policy_url' => array(
2683 + 'wordads_ccpa_privacy_policy_url' => array(
2766 2684 'description' => esc_html__( 'Privacy Policy URL', 'jetpack' ),
2767 2685 'type' => 'string',
2768 2686 'default' => '',
2769 2687 'validate_callback' => __CLASS__ . '::validate_string',
@@ -2769,11 +2687,18 @@
2769 2687 'validate_callback' => __CLASS__ . '::validate_string',
2770 2688 'sanitize_callback' => 'sanitize_text_field',
2771 2689 'jp_group' => 'wordads',
2772 2690 ),
2691 + 'wordads_cmp_enabled' => array(
2692 + 'description' => esc_html__( 'Enable GDPR Consent Management Banner for WordAds', 'jetpack' ),
2693 + 'type' => 'boolean',
2694 + 'default' => 0,
2695 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2696 + 'jp_group' => 'wordads',
2697 + ),
2773 2698
2774 2699 // Google Analytics.
2775 - 'google_analytics_tracking_id' => array(
2700 + 'google_analytics_tracking_id' => array(
2776 2701 'description' => esc_html__( 'Google Analytics', 'jetpack' ),
2777 2702 'type' => 'string',
2778 2703 'default' => '',
2779 2704 'validate_callback' => __CLASS__ . '::validate_alphanum',
@@ -2778,11 +2703,16 @@
2778 2703 'default' => '',
2779 2704 'validate_callback' => __CLASS__ . '::validate_alphanum',
2780 2705 'jp_group' => 'google-analytics',
2781 2706 ),
2707 + 'jetpack_wga' => array(
2708 + 'description' => esc_html__( 'Google Analytics', 'jetpack' ),
2709 + 'type' => 'object',
2710 + 'jp_group' => 'settings',
2711 + ),
2782 2712
2783 2713 // Stats.
2784 - 'admin_bar' => array(
2714 + 'admin_bar' => array(
2785 2715 'description' => esc_html__( 'Include a small chart in your admin bar with a 48-hour traffic snapshot.', 'jetpack' ),
2786 2716 'type' => 'boolean',
2787 2717 'default' => 1,
2788 2718 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2787,9 +2717,9 @@
2787 2717 'default' => 1,
2788 2718 'validate_callback' => __CLASS__ . '::validate_boolean',
2789 2719 'jp_group' => 'stats',
2790 2720 ),
2791 - 'enable_odyssey_stats' => array(
2721 + 'enable_odyssey_stats' => array(
2792 2722 'description' => esc_html__( 'Preview the new Jetpack Stats experience (Experimental).', 'jetpack' ),
2793 2723 'type' => 'boolean',
2794 2724 'default' => 1,
2795 2725 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2794,9 +2724,9 @@
2794 2724 'default' => 1,
2795 2725 'validate_callback' => __CLASS__ . '::validate_boolean',
2796 2726 'jp_group' => 'stats',
2797 2727 ),
2798 - 'roles' => array(
2728 + 'roles' => array(
2799 2729 'description' => esc_html__( 'Select the roles that will be able to view stats reports.', 'jetpack' ),
2800 2730 'type' => 'array',
2801 2731 'items' => array(
2802 2732 'type' => 'string',
@@ -2805,9 +2735,9 @@
2805 2735 'validate_callback' => __CLASS__ . '::validate_stats_roles',
2806 2736 'sanitize_callback' => __CLASS__ . '::sanitize_stats_allowed_roles',
2807 2737 'jp_group' => 'stats',
2808 2738 ),
2809 - 'count_roles' => array(
2739 + 'count_roles' => array(
2810 2740 'description' => esc_html__( 'Count the page views of registered users who are logged in.', 'jetpack' ),
2811 2741 'type' => 'array',
2812 2742 'items' => array(
2813 2743 'type' => 'string',
@@ -2815,9 +2745,9 @@
2815 2745 'default' => array( 'administrator' ),
2816 2746 'validate_callback' => __CLASS__ . '::validate_stats_roles',
2817 2747 'jp_group' => 'stats',
2818 2748 ),
2819 - 'blog_id' => array(
2749 + 'blog_id' => array(
2820 2750 'description' => esc_html__( 'Blog ID.', 'jetpack' ),
2821 2751 'type' => 'boolean',
2822 2752 'default' => 0,
2823 2753 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2822,9 +2752,9 @@
2822 2752 'default' => 0,
2823 2753 'validate_callback' => __CLASS__ . '::validate_boolean',
2824 2754 'jp_group' => 'stats',
2825 2755 ),
2826 - 'do_not_track' => array(
2756 + 'do_not_track' => array(
2827 2757 'description' => esc_html__( 'Do not track.', 'jetpack' ),
2828 2758 'type' => 'boolean',
2829 2759 'default' => 1,
2830 2760 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2829,9 +2759,9 @@
2829 2759 'default' => 1,
2830 2760 'validate_callback' => __CLASS__ . '::validate_boolean',
2831 2761 'jp_group' => 'stats',
2832 2762 ),
2833 - 'version' => array(
2763 + 'version' => array(
2834 2764 'description' => esc_html__( 'Version.', 'jetpack' ),
2835 2765 'type' => 'integer',
2836 2766 'default' => 9,
2837 2767 'validate_callback' => __CLASS__ . '::validate_posint',
@@ -2836,9 +2766,9 @@
2836 2766 'default' => 9,
2837 2767 'validate_callback' => __CLASS__ . '::validate_posint',
2838 2768 'jp_group' => 'stats',
2839 2769 ),
2840 - 'collapse_nudges' => array(
2770 + 'collapse_nudges' => array(
2841 2771 'description' => esc_html__( 'Collapse upgrade nudges', 'jetpack' ),
2842 2772 'type' => 'boolean',
2843 2773 'default' => 0,
2844 2774 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2845,9 +2775,9 @@
2845 2775 'jp_group' => 'stats',
2846 2776 ),
2847 2777
2848 2778 // Whether to share stats views with WordPress.com Reader.
2849 - 'wpcom_reader_views_enabled' => array(
2779 + 'wpcom_reader_views_enabled' => array(
2850 2780 'description' => esc_html__( 'Show post views in the WordPress.com Reader.', 'jetpack' ),
2851 2781 'type' => 'boolean',
2852 2782 'default' => 1,
2853 2783 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2854,9 +2784,9 @@
2854 2784 'jp_group' => 'settings',
2855 2785 ),
2856 2786
2857 2787 // Akismet - Not a module, but a plugin. The options can be passed and handled differently.
2858 - 'akismet_show_user_comments_approved' => array(
2788 + 'akismet_show_user_comments_approved' => array(
2859 2789 'description' => '',
2860 2790 'type' => 'boolean',
2861 2791 'default' => 0,
2862 2792 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2862,9 +2792,9 @@
2862 2792 'validate_callback' => __CLASS__ . '::validate_boolean',
2863 2793 'jp_group' => 'settings',
2864 2794 ),
2865 2795
2866 - 'wordpress_api_key' => array(
2796 + 'wordpress_api_key' => array(
2867 2797 'description' => '',
2868 2798 'type' => 'string',
2869 2799 'default' => '',
2870 2800 'validate_callback' => __CLASS__ . '::validate_alphanum',
@@ -2871,9 +2801,9 @@
2871 2801 'jp_group' => 'settings',
2872 2802 ),
2873 2803
2874 2804 // Empty stats card dismiss.
2875 - 'dismiss_empty_stats_card' => array(
2805 + 'dismiss_empty_stats_card' => array(
2876 2806 'description' => '',
2877 2807 'type' => 'boolean',
2878 2808 'default' => 0,
2879 2809 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2880,9 +2810,9 @@
2880 2810 'jp_group' => 'settings',
2881 2811 ),
2882 2812
2883 2813 // Backup Getting Started card on dashboard.
2884 - 'dismiss_dash_backup_getting_started' => array(
2814 + 'dismiss_dash_backup_getting_started' => array(
2885 2815 'description' => '',
2886 2816 'type' => 'boolean',
2887 2817 'default' => 0,
2888 2818 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2889,9 +2819,9 @@
2889 2819 'jp_group' => 'settings',
2890 2820 ),
2891 2821
2892 2822 // Agencies Learn More card on dashboard.
2893 - 'dismiss_dash_agencies_learn_more' => array(
2823 + 'dismiss_dash_agencies_learn_more' => array(
2894 2824 'description' => '',
2895 2825 'type' => 'boolean',
2896 2826 'default' => 0,
2897 2827 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2897,9 +2827,9 @@
2897 2827 'validate_callback' => __CLASS__ . '::validate_boolean',
2898 2828 'jp_group' => 'settings',
2899 2829 ),
2900 2830
2901 - 'lang_id' => array(
2831 + 'lang_id' => array(
2902 2832 'description' => esc_html__( 'Primary language for the site.', 'jetpack' ),
2903 2833 'type' => 'string',
2904 2834 'default' => 'en_US',
2905 2835 'jp_group' => 'settings',
@@ -2904,32 +2834,10 @@
2904 2834 'default' => 'en_US',
2905 2835 'jp_group' => 'settings',
2906 2836 ),
2907 2837
2908 - 'onboarding' => array(
2909 - 'description' => '',
2910 - 'type' => 'object',
2911 - 'default' => array(
2912 - 'siteTitle' => '',
2913 - 'siteDescription' => '',
2914 - 'siteType' => 'personal',
2915 - 'homepageFormat' => 'posts',
2916 - 'addContactForm' => 0,
2917 - 'businessAddress' => array(
2918 - 'name' => '',
2919 - 'street' => '',
2920 - 'city' => '',
2921 - 'state' => '',
2922 - 'zip' => '',
2923 - ),
2924 - 'installWooCommerce' => false,
2925 - ),
2926 - 'validate_callback' => __CLASS__ . '::validate_onboarding',
2927 - 'jp_group' => 'settings',
2928 - ),
2929 -
2930 2838 // SEO Tools.
2931 - 'advanced_seo_front_page_description' => array(
2839 + 'advanced_seo_front_page_description' => array(
2932 2840 'description' => esc_html__( 'Front page meta description.', 'jetpack' ),
2933 2841 'type' => 'string',
2934 2842 'default' => '',
2935 2843 'sanitize_callback' => 'Jetpack_SEO_Utils::sanitize_front_page_meta_description',
@@ -2935,9 +2843,9 @@
2935 2843 'sanitize_callback' => 'Jetpack_SEO_Utils::sanitize_front_page_meta_description',
2936 2844 'jp_group' => 'seo-tools',
2937 2845 ),
2938 2846
2939 - 'advanced_seo_title_formats' => array(
2847 + 'advanced_seo_title_formats' => array(
2940 2848 'description' => esc_html__( 'SEO page title structures.', 'jetpack' ),
2941 2849 'type' => 'object',
2942 2850 'default' => array(
2943 2851 'archives' => array(),
@@ -2950,10 +2858,34 @@
2950 2858 'validate_callback' => 'Jetpack_SEO_Titles::are_valid_title_formats',
2951 2859 'sanitize_callback' => 'Jetpack_SEO_Titles::sanitize_title_formats',
2952 2860 ),
2953 2861
2862 + // AI tab (Jetpack > SEO). Plain option the SEO package reads to serve
2863 + // /llms.txt. The front-end behavior is gated inside the package; this
2864 + // only round-trips the persisted state alongside the other seo-tools
2865 + // settings.
2866 + 'jetpack_seo_llms_txt_enabled' => array(
2867 + 'description' => esc_html__( 'Generate an llms.txt file to guide AI assistants around your content.', 'jetpack' ),
2868 + 'type' => 'boolean',
2869 + 'default' => 0,
2870 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2871 + 'jp_group' => 'seo-tools',
2872 + ),
2873 +
2874 + // AI tab (Jetpack > SEO). Sparse per-crawler override map the SEO
2875 + // package reads to emit robots.txt directives for blocked AI crawlers.
2876 + // Stored as `slug => bool` (true = blocked); catalog validation and
2877 + // default-pruning happen in `Ai_Crawlers::get_overrides()`.
2878 + 'jetpack_seo_ai_crawler_overrides' => array(
2879 + 'description' => esc_html__( 'AI crawler allow/block overrides.', 'jetpack' ),
2880 + 'type' => 'object',
2881 + 'default' => array(),
2882 + 'jp_group' => 'seo-tools',
2883 + 'sanitize_callback' => __CLASS__ . '::sanitize_ai_crawler_overrides',
2884 + ),
2885 +
2954 2886 // VideoPress.
2955 - 'videopress_private_enabled_for_site' => array(
2887 + 'videopress_private_enabled_for_site' => array(
2956 2888 'description' => esc_html__( 'Video Privacy: Restrict views to members of this site', 'jetpack' ),
2957 2889 'type' => 'boolean',
2958 2890 'default' => 0,
2959 2891 'validate_callback' => __CLASS__ . '::validate_boolean',
@@ -2960,8 +2892,21 @@
2960 2892 'jp_group' => 'videopress',
2961 2893 ),
2962 2894 );
2963 2895
2896 + // SEO Tools - SEO Enhancer.
2897 + // TODO: move this to the main options array? The filter was there while developing the feature.
2898 + // It might come in handy to hold its availability behind the filter since it still depends on AI to be available.
2899 + if ( apply_filters( 'ai_seo_enhancer_enabled', true ) ) {
2900 + $options['ai_seo_enhancer_enabled'] = array(
2901 + 'description' => esc_html__( 'Automatically generate SEO title, SEO description, and image alt text for new posts.', 'jetpack' ),
2902 + 'type' => 'boolean',
2903 + 'default' => 0,
2904 + 'validate_callback' => __CLASS__ . '::validate_boolean',
2905 + 'jp_group' => 'seo-tools',
2906 + );
2907 + }
2908 +
2964 2909 // Add modules to list so they can be toggled.
2965 2910 $modules = Jetpack::get_available_modules();
2966 2911 if ( is_array( $modules ) && ! empty( $modules ) ) {
2967 2912 $module_args = array(
@@ -3007,8 +2952,10 @@
3007 2952 * Validates that the parameters are proper values that can be set during Jetpack onboarding.
3008 2953 *
3009 2954 * @since 5.4.0
3010 2955 *
2956 + * @deprecated since 13.9
2957 + *
3011 2958 * @param array $onboarding_data Values to check.
3012 2959 * @param WP_REST_Request $request The request sent to the WP REST API.
3013 2960 * @param string $param Name of the parameter passed to endpoint holding $value.
3014 2961 *
@@ -3013,24 +2960,10 @@
3013 2960 * @param string $param Name of the parameter passed to endpoint holding $value.
3014 2961 *
3015 2962 * @return bool|WP_Error
3016 2963 */
3017 - public static function validate_onboarding( $onboarding_data, $request, $param ) {
3018 - if ( ! is_array( $onboarding_data ) ) {
3019 - return new WP_Error( 'invalid_param', esc_html__( 'Not valid onboarding data.', 'jetpack' ) );
3020 - }
3021 - foreach ( $onboarding_data as $value ) {
3022 - if ( is_string( $value ) ) {
3023 - $onboarding_choice = self::validate_string( $value, $request, $param );
3024 - } elseif ( is_array( $value ) ) {
3025 - $onboarding_choice = self::validate_onboarding( $value, $request, $param );
3026 - } else {
3027 - $onboarding_choice = self::validate_boolean( $value, $request, $param );
3028 - }
3029 - if ( is_wp_error( $onboarding_choice ) ) {
3030 - return $onboarding_choice;
3031 - }
3032 - }
2964 + public static function validate_onboarding( $onboarding_data, $request, $param ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
2965 + _deprecated_function( __METHOD__, '13.9' );
3033 2966 return true;
3034 2967 }
3035 2968
3036 2969 /**
@@ -3244,9 +3177,9 @@
3244 3177 * Validates that the parameter is among the roles allowed for Stats.
3245 3178 *
3246 3179 * @since 4.3.0
3247 3180 *
3248 - * @param string|bool $value Value to check.
3181 + * @param mixed $value Value to check.
3249 3182 * @param WP_REST_Request $request The request sent to the WP REST API.
3250 3183 * @param string $param Name of the parameter passed to endpoint holding $value.
3251 3184 *
3252 3185 * @return bool|WP_Error
@@ -3251,16 +3184,37 @@
3251 3184 *
3252 3185 * @return bool|WP_Error
3253 3186 */
3254 3187 public static function validate_stats_roles( $value, $request, $param ) {
3255 - if ( ! empty( $value ) && ! array_intersect( self::$stats_roles, $value ) ) {
3188 + // An empty value clears the setting; sanitize_stats_allowed_roles() falls back to 'administrator'.
3189 + if ( empty( $value ) ) {
3190 + return true;
3191 + }
3192 +
3193 + // Enforce the schema's list-of-strings contract before array_intersect() below sees the value.
3194 + if ( ! is_array( $value ) || count( array_filter( $value, 'is_string' ) ) !== count( $value ) ) {
3256 3195 return new WP_Error(
3257 3196 'invalid_param',
3258 3197 sprintf(
3198 + /* Translators: Placeholder is a parameter name. */
3199 + esc_html__( '%s must be an array of user roles.', 'jetpack' ),
3200 + $param
3201 + )
3202 + );
3203 + }
3204 +
3205 + if ( ! function_exists( 'get_editable_roles' ) ) {
3206 + require_once ABSPATH . 'wp-admin/includes/user.php';
3207 + }
3208 + $editable_roles = array_keys( get_editable_roles() );
3209 + if ( ! array_intersect( $editable_roles, $value ) ) {
3210 + return new WP_Error(
3211 + 'invalid_param',
3212 + sprintf(
3259 3213 /* Translators: first variable is the name of a parameter passed to endpoint holding the role that will be checked, the second is a list of roles allowed to see stats. The parameter is checked against this list. */
3260 3214 esc_html__( '%1$s must be %2$s.', 'jetpack' ),
3261 3215 $param,
3262 - implode( ', ', self::$stats_roles )
3216 + implode( ', ', $editable_roles )
3263 3217 )
3264 3218 );
3265 3219 }
3266 3220 return true;
@@ -3303,8 +3257,59 @@
3303 3257 return true;
3304 3258 }
3305 3259
3306 3260 /**
3261 + * Validates that the parameter is among the valid reply-to types for subscriptions.
3262 + *
3263 + * @since 4.3.0
3264 + *
3265 + * @param string|bool $value Value to check.
3266 + * @param WP_REST_Request $request The request sent to the WP REST API.
3267 + * @param string $param Name of the parameter passed to endpoint holding $value.
3268 + *
3269 + * @return bool|WP_Error
3270 + */
3271 + public static function validate_subscriptions_reply_to( $value, $request, $param ) {
3272 + require_once JETPACK__PLUGIN_DIR . 'modules/subscriptions/class-settings.php';
3273 + if ( ! empty( $value ) && ! Automattic\Jetpack\Modules\Subscriptions\Settings::is_valid_reply_to( $value ) ) {
3274 + return new WP_Error(
3275 + 'invalid_param',
3276 + sprintf(
3277 + /* Translators: Placeholder is a parameter name. */
3278 + esc_html__( '%s must be a valid type.', 'jetpack' ),
3279 + $param
3280 + )
3281 + );
3282 + }
3283 + return true;
3284 + }
3285 +
3286 + /**
3287 + * Validates that the parameter is among the valid reply-to types for subscriptions.
3288 + *
3289 + * @since 4.3.0
3290 + *
3291 + * @param string|bool $value Value to check.
3292 + * @param WP_REST_Request $request The request sent to the WP REST API.
3293 + * @param string $param Name of the parameter passed to endpoint holding $value.
3294 + *
3295 + * @return bool|WP_Error
3296 + */
3297 + public static function validate_subscriptions_reply_to_name( $value, $request, $param ) {
3298 + if ( ! empty( $value ) && ! is_string( $value ) ) {
3299 + return new WP_Error(
3300 + 'invalid_param',
3301 + sprintf(
3302 + /* Translators: Placeholder is a parameter name. */
3303 + esc_html__( '%s must be a valid type.', 'jetpack' ),
3304 + $param
3305 + )
3306 + );
3307 + }
3308 + return true;
3309 + }
3310 +
3311 + /**
3307 3312 * Validates that the parameter is among the views where the Sharing can be displayed.
3308 3313 *
3309 3314 * @since 4.3.0
3310 3315 *
@@ -3519,16 +3524,72 @@
3519 3524 return true;
3520 3525 }
3521 3526
3522 3527 /**
3528 + * Validates the subscription_options parameter.
3529 + *
3530 + * @param array $values Value to check.
3531 + *
3532 + * @return bool|WP_Error
3533 + */
3534 + public static function validate_subscription_options( $values ) {
3535 + // A REST "object" decodes to a PHP associative array. Reject any other
3536 + // type (object, string, int, null, ...) up front so the array_keys()
3537 + // loop below never runs against a non-array and triggers a PHP warning.
3538 + if ( ! is_array( $values ) ) {
3539 + return new WP_Error(
3540 + 'invalid_param',
3541 + /* Translators: subscription_options is a variable name, and shouldn't be translated. */
3542 + esc_html__( 'subscription_options must be an object.', 'jetpack' )
3543 + );
3544 + }
3545 + foreach ( array_keys( $values ) as $key ) {
3546 + if ( ! in_array( $key, array( 'welcome', 'invitation', 'comment_follow', 'subscribe_modal_heading', 'free_tier_description', 'hide_free_tier' ), true ) ) {
3547 + return new WP_Error(
3548 + 'invalid_param',
3549 + sprintf(
3550 + /* Translators: Placeholder is the invalid param being sent. */
3551 + esc_html__( '%s is not one of the allowed members of subscription_options.', 'jetpack' ),
3552 + $key
3553 + )
3554 + );
3555 + }
3556 + }
3557 + return true;
3558 + }
3559 +
3560 + /**
3561 + * Validates that the parameter is an array.
3562 + *
3563 + * @param array $values Value to check.
3564 + * @param WP_REST_Request $request The request sent to the WP REST API.
3565 + * @param string $param Name of the parameter passed to the endpoint holding $value.
3566 + *
3567 + * @return bool|WP_Error
3568 + */
3569 + public static function validate_array( $values, $request, $param ) {
3570 + if ( ! is_array( $values ) ) {
3571 + return new WP_Error(
3572 + 'invalid_param',
3573 + sprintf(
3574 + /* Translators: Placeholder is a parameter name. */
3575 + esc_html__( '%s must be an object.', 'jetpack' ),
3576 + $param
3577 + )
3578 + );
3579 + }
3580 + return true;
3581 + }
3582 +
3583 + /**
3523 3584 * If for some reason the roles allowed to see Stats are empty (for example, user tampering with checkboxes),
3524 3585 * return an array with only 'administrator' as the allowed role and save it for 'roles' option.
3525 3586 *
3526 3587 * @since 4.3.0
3527 3588 *
3528 - * @param string|bool $value Value to check.
3589 + * @param mixed $value Value to check.
3529 3590 *
3530 - * @return bool|array
3591 + * @return mixed The value as submitted, or an array holding only 'administrator' when it is empty.
3531 3592 */
3532 3593 public static function sanitize_stats_allowed_roles( $value ) {
3533 3594 if ( empty( $value ) ) {
3534 3595 return array( 'administrator' );
@@ -3536,8 +3597,31 @@
3536 3597 return $value;
3537 3598 }
3538 3599
3539 3600 /**
3601 + * Sanitize the AI crawler override map.
3602 + *
3603 + * Keeps the value package-agnostic: each key is normalized with sanitize_key()
3604 + * and each value cast to bool. Catalog validation and default-pruning happen in
3605 + * `Automattic\Jetpack\SEO\Ai_Crawlers::get_overrides()`.
3606 + *
3607 + * @param mixed $value The submitted override map.
3608 + *
3609 + * @return array<string, bool> Sanitized `slug => bool` map.
3610 + */
3611 + public static function sanitize_ai_crawler_overrides( $value ) {
3612 + if ( ! is_array( $value ) ) {
3613 + return array();
3614 + }
3615 +
3616 + $sanitized = array();
3617 + foreach ( $value as $k => $v ) {
3618 + $sanitized[ sanitize_key( $k ) ] = (bool) $v;
3619 + }
3620 + return $sanitized;
3621 + }
3622 +
3623 + /**
3540 3624 * Get the currently accessed route and return the module slug in it.
3541 3625 *
3542 3626 * @since 4.3.0
3543 3627 *
@@ -3546,9 +3630,9 @@
3546 3630 * @return array|string
3547 3631 */
3548 3632 public static function get_module_requested( $route = '/module/(?P<slug>[a-z\-]+)' ) {
3549 3633
3550 - if ( empty( $GLOBALS['wp']->query_vars['rest_route'] ) ) {
3634 + if ( empty( $GLOBALS['wp']->query_vars['rest_route'] ) || ! is_string( $GLOBALS['wp']->query_vars['rest_route'] ) ) {
3551 3635 return '';
3552 3636 }
3553 3637
3554 3638 preg_match( "#$route#", $GLOBALS['wp']->query_vars['rest_route'], $module );
@@ -3599,8 +3683,40 @@
3599 3683 return $modules;
3600 3684 }
3601 3685
3602 3686 /**
3687 + * Remove options the current user cannot read.
3688 + *
3689 + * Covers every `jetpack_waf_*` option, plus the two Protect options that expose the
3690 + * same data under a different name: `jetpack_protect_global_whitelist` is populated
3691 + * from `jetpack_waf_ip_allow_list`, and `jetpack_protect_key` is a shared secret.
3692 + *
3693 + * @since 16.2
3694 + *
3695 + * @param array $options Option definitions keyed by option name.
3696 + * @return array
3697 + */
3698 + public static function filter_options_for_response( $options ) {
3699 + if ( current_user_can( 'manage_options' ) ) {
3700 + return $options;
3701 + }
3702 +
3703 + $restricted = array(
3704 + 'jetpack_protect_key',
3705 + 'jetpack_protect_global_whitelist',
3706 + );
3707 +
3708 + return array_filter(
3709 + $options,
3710 + static function ( $option_name ) use ( $restricted ) {
3711 + return 0 !== strpos( $option_name, 'jetpack_waf_' )
3712 + && ! in_array( $option_name, $restricted, true );
3713 + },
3714 + ARRAY_FILTER_USE_KEY
3715 + );
3716 + }
3717 +
3718 + /**
3603 3719 * Remove 'validate_callback' item from options available for module.
3604 3720 * Fetch current option value and add to array of module options.
3605 3721 * Prepare values of module options that need special handling, like those saved in wpcom.
3606 3722 *
@@ -3663,9 +3779,9 @@
3663 3779 $options = self::split_options( $options, $sharer->get_global_options() );
3664 3780 $options['sharing_services']['current_value'] = $sharer->get_blog_services();
3665 3781 $other_sharedaddy_options = array( 'jetpack-twitter-cards-site-tag', 'sharedaddy_disable_resources', 'sharing_delete_service' );
3666 3782 foreach ( $other_sharedaddy_options as $key ) {
3667 - $default_value = isset( $options[ $key ]['default'] ) ? $options[ $key ]['default'] : '';
3783 + $default_value = $options[ $key ]['default'] ?? '';
3668 3784 $current_value = get_option( $key, $default_value );
3669 3785 $options[ $key ]['current_value'] = self::cast_value( $current_value, $options[ $key ] );
3670 3786 }
3671 3787 break;
@@ -3676,9 +3792,9 @@
3676 3792 break;
3677 3793 default:
3678 3794 // These option are just stored as plain WordPress options.
3679 3795 foreach ( $options as $key => $value ) {
3680 - $default_value = isset( $options[ $key ]['default'] ) ? $options[ $key ]['default'] : '';
3796 + $default_value = $options[ $key ]['default'] ?? '';
3681 3797 $current_value = get_option( $key, $default_value );
3682 3798 $options[ $key ]['current_value'] = self::cast_value( $current_value, $options[ $key ] );
3683 3799 }
3684 3800 }
@@ -3688,14 +3804,17 @@
3688 3804 // We don't need validate_callback in the response.
3689 3805 if ( isset( $options[ $key ]['validate_callback'] ) ) {
3690 3806 unset( $options[ $key ]['validate_callback'] );
3691 3807 }
3692 - $default_value = isset( $options[ $key ]['default'] ) ? $options[ $key ]['default'] : '';
3808 + $default_value = $options[ $key ]['default'] ?? '';
3693 3809 if ( ! array_key_exists( 'current_value', $options[ $key ] ) ) {
3694 3810 $options[ $key ]['current_value'] = self::cast_value( $default_value, $options[ $key ] );
3695 3811 }
3696 3812 }
3697 - return $options;
3813 +
3814 + // Filter last: the switch above assigns current_value by key without isset(),
3815 + // so filtering earlier would let those assignments re-add a removed option.
3816 + return self::filter_options_for_response( $options );
3698 3817 }
3699 3818
3700 3819 /**
3701 3820 * Splits module options saved as arrays like relatedposts or verification_services_codes into separate options to be returned in the response.
@@ -4256,5 +4375,53 @@
4256 4375 )
4257 4376 );
4258 4377 }
4259 4378
4379 + /**
4380 + * Return the list of available features.
4381 + *
4382 + * @return array
4383 + */
4384 + public static function get_features_available() {
4385 + $raw_modules = Jetpack::get_available_modules();
4386 + $modules = array();
4387 + foreach ( $raw_modules as $module ) {
4388 + $modules[] = Jetpack::get_module_slug( $module );
4389 + }
4390 +
4391 + return $modules;
4392 + }
4393 +
4394 + /**
4395 + * Returns what features are enabled. Uses the slug of the modules files.
4396 + *
4397 + * @return array
4398 + */
4399 + public static function get_features_enabled() {
4400 + $raw_modules = Jetpack::get_active_modules();
4401 + $modules = array();
4402 + foreach ( $raw_modules as $module ) {
4403 + $modules[] = Jetpack::get_module_slug( $module );
4404 + }
4405 +
4406 + return $modules;
4407 + }
4408 +
4409 + /**
4410 + * Verify that the API client is allowed to replace user token.
4411 + *
4412 + * @since 1.29.0
4413 + *
4414 + * @return bool|WP_Error
4415 + */
4416 + public static function get_features_permission_check() {
4417 + if ( ! Rest_Authentication::is_signed_with_blog_token() ) {
4418 + $message = esc_html__(
4419 + 'You do not have the correct user permissions to perform this action. Please contact your site admin if you think this is a mistake.',
4420 + 'jetpack'
4421 + );
4422 + return new WP_Error( 'invalid_permission_fetch_features', $message, array( 'status' => rest_authorization_required_code() ) );
4423 + }
4424 +
4425 + return true;
4426 + }
4260 4427 } // class end