class.jetpack.php: 16.3-a.5 vs 12.4.2 · Jetpack – WP Security, Backup, Speed, & Growth

← All changes | class.jetpack.php +988 -1174 12.4.2 → 16.3-a.5 View file →

		@@ -7,33 +7,38 @@
7	7	* @package automattic/jetpack
8	8	*/
9	9
10	10	use Automattic\Jetpack\Assets;
11		-use Automattic\Jetpack\Assets\Logo as Jetpack_Logo;
12	11	use Automattic\Jetpack\Boost_Speed_Score\Speed_Score;
13	12	use Automattic\Jetpack\Config;
	13	+use Automattic\Jetpack\Connection\Authorize_Json_Api;
14	14	use Automattic\Jetpack\Connection\Client;
15		-use Automattic\Jetpack\Connection\Initial_State as Connection_Initial_State;
16	15	use Automattic\Jetpack\Connection\Manager as Connection_Manager;
17		-use Automattic\Jetpack\Connection\Nonce_Handler;
18	16	use Automattic\Jetpack\Connection\Rest_Authentication as Connection_Rest_Authentication;
19	17	use Automattic\Jetpack\Connection\Secrets;
20	18	use Automattic\Jetpack\Connection\Tokens;
21		-use Automattic\Jetpack\Connection\Utils as Connection_Utils;
	19	+use Automattic\Jetpack\Connection\Webhooks\Authorize_Redirect;
22	20	use Automattic\Jetpack\Constants;
23	21	use Automattic\Jetpack\CookieState;
24	22	use Automattic\Jetpack\Current_Plan as Jetpack_Plan;
25	23	use Automattic\Jetpack\Device_Detection\User_Agent_Info;
26	24	use Automattic\Jetpack\Errors;
	25	+use Automattic\Jetpack\Feature_Policy;
27	26	use Automattic\Jetpack\Files;
	27	+use Automattic\Jetpack\Heartbeat;
28	28	use Automattic\Jetpack\Identity_Crisis;
	29	+use Automattic\Jetpack\Import\Main as Import_Main;
29	30	use Automattic\Jetpack\Licensing;
30	31	use Automattic\Jetpack\Modules;
31	32	use Automattic\Jetpack\My_Jetpack\Initializer as My_Jetpack_Initializer;
32		-use Automattic\Jetpack\Partner;
	33	+use Automattic\Jetpack\Newsletter\Reader_Link;
33	34	use Automattic\Jetpack\Paths;
	35	+use Automattic\Jetpack\Plugin\Deprecate;
34	36	use Automattic\Jetpack\Plugin\Tracking as Plugin_Tracking;
	37	+use Automattic\Jetpack\Podcast\Podcast;
35	38	use Automattic\Jetpack\Redirect;
	39	+use Automattic\Jetpack\Scan_Page\Jetpack_Scan as Scan_Page_Init;
	40	+use Automattic\Jetpack\SEO\Initializer as Jetpack_SEO_Initializer;
36	41	use Automattic\Jetpack\Status;
37	42	use Automattic\Jetpack\Status\Host;
38	43	use Automattic\Jetpack\Status\Visitor;
39	44	use Automattic\Jetpack\Sync\Actions as Sync_Actions;
		@@ -40,9 +45,14 @@
40	45	use Automattic\Jetpack\Sync\Health;
41	46	use Automattic\Jetpack\Sync\Sender;
42	47	use Automattic\Jetpack\Terms_Of_Service;
43	48	use Automattic\Jetpack\Tracking;
	49	+use Automattic\Woocommerce_Analytics;
44	50
	51	+if ( ! defined( 'ABSPATH' ) ) {
	52	+ exit( 0 );
	53	+}
	54	+
45	55	/*
46	56	Options:
47	57	jetpack_options (array)
48	58	An array of options.
		@@ -77,49 +87,8 @@
77	87	*/
78	88	public $xmlrpc_server = null;
79	89
80	90	/**
81		- * The handles of styles that are concatenated into jetpack.css.
82		- *
83		- * When making changes to that list, you must also update concat_list in tools/webpack.config.css.js.
84		- *
85		- * @var array The handles of styles that are concatenated into jetpack.css.
86		- */
87		- public $concatenated_style_handles = array(
88		- 'jetpack-carousel-swiper-css',
89		- 'jetpack-carousel',
90		- 'grunion.css',
91		- 'the-neverending-homepage',
92		- 'jetpack_likes',
93		- 'jetpack_related-posts',
94		- 'sharedaddy',
95		- 'jetpack-slideshow',
96		- 'presentations',
97		- 'quiz',
98		- 'jetpack-subscriptions',
99		- 'jetpack-responsive-videos',
100		- 'jetpack-social-menu',
101		- 'tiled-gallery',
102		- 'jetpack_display_posts_widget',
103		- 'gravatar-profile-widget',
104		- 'goodreads-widget',
105		- 'jetpack_social_media_icons_widget',
106		- 'jetpack-top-posts-widget',
107		- 'jetpack_image_widget',
108		- 'jetpack-my-community-widget',
109		- 'jetpack-authors-widget',
110		- 'wordads',
111		- 'eu-cookie-law-style',
112		- 'flickr-widget-style',
113		- 'jetpack-search-widget',
114		- 'jetpack-simple-payments-widget-style',
115		- 'jetpack-widget-social-icons-styles',
116		- 'wpcom_instagram_widget',
117		- 'milestone-widget',
118		- 'subscribe-modal-css',
119		- );
120		-
121		- /**
122	91	* Contains all assets that have had their URL rewritten to minified versions.
123	92	*
124	93	* @var array
125	94	*/
		@@ -134,11 +103,8 @@
134	103	'contact-form' => array(
135	104	array( 'grunion-contact-form/grunion-contact-form.php', 'Grunion Contact Form' ),
136	105	array( 'mullet/mullet-contact-form.php', 'Mullet Contact Form' ),
137	106	),
138		- 'custom-css' => array(
139		- array( 'safecss/safecss.php', 'WordPress.com Custom CSS' ),
140		- ),
141	107	'gravatar-hovercards' => array(
142	108	array( 'jetpack-gravatar-hovercards/gravatar-hovercards.php', 'Jetpack Gravatar Hovercards' ),
143	109	),
144	110	'latex' => array(
		@@ -299,13 +265,8 @@
299	265	'MSM Sitemaps' => 'msm-sitemap/msm-sitemap.php',
300	266	'Rank Math' => 'seo-by-rank-math/rank-math.php',
301	267	'Slim SEO' => 'slim-seo/slim-seo.php',
302	268	),
303		- 'lazy-images' => array(
304		- 'Lazy Load' => 'lazy-load/lazy-load.php',
305		- 'BJ Lazy Load' => 'bj-lazy-load/bj-lazy-load.php',
306		- 'Lazy Load by WP Rocket' => 'rocket-lazy-load/rocket-lazy-load.php',
307		- ),
308	269	);
309	270
310	271	/**
311	272	* Plugins for which we turn off our Facebook OG Tags implementation.
		@@ -314,9 +275,8 @@
314	275	* Graph tags via filter when their Social Meta modules are active:
315	276	*
316	277	* - All in One SEO Pack, All in one SEO Pack Pro
317	278	* - WordPress SEO by Yoast, WordPress SEO Premium by Yoast
318		- * - SEOPress, SEOPress Pro
319	279	*
320	280	* Plugin authors: If you'd like to prevent Jetpack's Open Graph tag generation in your plugin, you can do so via this filter:
321	281	* add_filter( 'jetpack_enable_open_graph', '__return_false' );
322	282	*
		@@ -359,8 +319,10 @@
359	319	'wp-caregiver/wp-caregiver.php', // WP Caregiver.
360	320	'wp-facebook-like-send-open-graph-meta/wp-facebook-like-send-open-graph-meta.php', // WP Facebook Like Send & Open Graph Meta.
361	321	'wp-facebook-open-graph-protocol/wp-facebook-ogp.php', // WP Facebook Open Graph protocol.
362	322	'wp-ogp/wp-ogp.php', // WP-OGP.
	323	+ 'wp-seopress/seopress.php', // SEOPress.
	324	+ 'wp-seopress-pro/seopress-pro.php', // SEOPress Pro.
363	325	'zoltonorg-social-plugin/zosp.php', // Zolton.org Social Plugin.
364	326	'wp-fb-share-like-button/wp_fb_share-like_widget.php', // WP Facebook Like Button.
365	327	'open-graph-metabox/open-graph-metabox.php', // Open Graph Metabox.
366	328	'seo-by-rank-math/rank-math.php', // Rank Math.
		@@ -427,8 +389,10 @@
427	389
428	390	/**
429	391	* Verified data for JSON authorization request
430	392	*
	393	+ * @deprecated 13.4
	394	+ *
431	395	* @var array
432	396	*/
433	397	public $json_api_authorization_request = array();
434	398
		@@ -469,8 +433,16 @@
469	433	*/
470	434	public static $instance = false;
471	435
472	436	/**
	437	+ * Resolved answer for `is_premium_analytics_enabled()`, or null before the first call.
	438	+ *
	439	+ * @since 16.1
	440	+ * @var bool\|null
	441	+ */
	442	+ private static $premium_analytics_enabled = null;
	443	+
	444	+ /**
473	445	* Singleton
474	446	*
475	447	* @static
476	448	*/
		@@ -510,9 +482,9 @@
510	482	if ( array_diff( $unfiltered_modules, $modules ) ) {
511	483	self::update_active_modules( $modules );
512	484	}
513	485
514		- add_action( 'init', array( __CLASS__, 'activate_new_modules' ) );
	486	+ self::register_upgrade_init_hooks();
515	487
516	488	// Upgrade to 4.3.0.
517	489	if ( Jetpack_Options::get_option( 'identity_crisis_whitelist' ) ) {
518	490	Jetpack_Options::delete_option( 'identity_crisis_whitelist' );
		@@ -567,8 +539,16 @@
567	539	Jetpack_Options::delete_option( 'autoupdate_plugins' );
568	540	} // Should we have some type of fallback if something fails here?
569	541	}
570	542
	543	+ // Set the newsletter send default option for existing sites.
	544	+ if ( false === get_option( 'wpcom_newsletter_send_default' ) ) {
	545	+ add_option( 'wpcom_newsletter_send_default', 1 );
	546	+ }
	547	+
	548	+ // Its handler went with the Recommendations assistant.
	549	+ wp_clear_scheduled_hook( 'jetpack_recommend_videopress' );
	550	+
571	551	if ( did_action( 'wp_loaded' ) ) {
572	552	self::upgrade_on_load();
573	553	} else {
574	554	add_action(
		@@ -602,9 +582,8 @@
602	582	}
603	583
604	584	if (
605	585	class_exists( 'Jetpack_Sitemap_Manager' )
606		- && version_compare( JETPACK__VERSION, '5.3', '>=' )
607	586	) {
608	587	do_action( 'jetpack_sitemaps_purge_data' );
609	588	}
610	589
		@@ -619,9 +598,9 @@
619	598	* Also fires Action hooks for each newly activated and deactivated module.
620	599	*
621	600	* @param array $modules Array of active modules to be saved in options.
622	601	*
623		- * @return $success bool true for success, false for failure.
	602	+ * @return bool $success true for success, false for failure.
624	603	*/
625	604	public static function update_active_modules( $modules ) {
626	605	return ( new Modules() )->update_active( $modules );
627	606	}
		@@ -651,10 +630,10 @@
651	630	sort( $taken_priorities );
652	631
653	632	$first_priority = array_shift( $taken_priorities );
654	633
655		- if ( defined( 'PHP_INT_MAX' ) && $first_priority <= - PHP_INT_MAX ) {
656		- $new_priority = - PHP_INT_MAX;
	634	+ if ( $first_priority <= PHP_INT_MIN ) {
	635	+ $new_priority = PHP_INT_MIN;
657	636	} else {
658	637	$new_priority = $first_priority - 1;
659	638	}
660	639
		@@ -675,32 +654,17 @@
675	654	add_action( 'network_plugin_loaded', array( $this, 'add_configure_hook' ), 90 );
676	655	add_action( 'mu_plugin_loaded', array( $this, 'add_configure_hook' ), 90 );
677	656	add_action( 'plugins_loaded', array( $this, 'late_initialization' ), 90 );
678	657
679		- add_action( 'jetpack_verify_signature_error', array( $this, 'track_xmlrpc_error' ) );
680		-
681		- add_filter(
682		- 'jetpack_signature_check_token',
683		- array( __CLASS__, 'verify_onboarding_token' ),
684		- 10,
685		- 3
686		- );
687		-
688	658	/**
689	659	* Prepare Gutenberg Editor functionality
	660	+ *
	661	+ * The hooks previously here have been moved to modules/blocks.php but leaving this here pending
	662	+ * a longer investigation to see if code is expecting the Gutenberg class to always be available.
690	663	*/
691	664	require_once JETPACK__PLUGIN_DIR . 'class.jetpack-gutenberg.php';
692		- add_action( 'plugins_loaded', array( 'Jetpack_Gutenberg', 'load_independent_blocks' ) );
693		- add_action( 'plugins_loaded', array( 'Jetpack_Gutenberg', 'load_block_editor_extensions' ), 9 );
694		- add_action( 'enqueue_block_editor_assets', array( 'Jetpack_Gutenberg', 'enqueue_block_editor_assets' ) );
695		- add_filter( 'render_block', array( 'Jetpack_Gutenberg', 'display_deprecated_block_message' ), 10, 2 );
696		-
697	665	add_action( 'set_user_role', array( $this, 'maybe_clear_other_linked_admins_transient' ), 10, 3 );
698	666
699		- // Unlink user before deleting the user from WP.com.
700		- add_action( 'deleted_user', array( $this, 'disconnect_user' ), 10, 1 );
701		- add_action( 'remove_user_from_blog', array( $this, 'disconnect_user' ), 10, 1 );
702		-
703	667	add_action( 'jetpack_event_log', array( 'Jetpack', 'log' ), 10, 2 );
704	668
705	669	add_filter( 'login_url', array( $this, 'login_url' ), 10, 2 );
706	670	add_action( 'login_init', array( $this, 'login_init' ) );
		@@ -707,8 +671,13 @@
707	671
708	672	// Set up the REST authentication hooks.
709	673	Connection_Rest_Authentication::init();
710	674
	675	+ // Register Jetpack-specific connection tests (sync health, etc.) with the connection
	676	+ // package's health test suite. This runs on all requests (not just admin), because
	677	+ // the connection/test REST endpoint can be called outside admin context.
	678	+ add_action( 'jetpack_connection_tests_loaded', array( $this, 'register_jetpack_connection_tests' ) );
	679	+
711	680	add_action( 'admin_init', array( $this, 'admin_init' ) );
712	681	add_action( 'admin_init', array( $this, 'dismiss_jetpack_notice' ) );
713	682
714	683	add_filter( 'admin_body_class', array( $this, 'admin_body_class' ), 20 );
		@@ -722,12 +691,8 @@
722	691
723	692	// Returns HTTPS support status.
724	693	add_action( 'wp_ajax_jetpack-recheck-ssl', array( $this, 'ajax_recheck_ssl' ) );
725	694
726		- add_action( 'wp_ajax_jetpack_connection_banner', array( $this, 'jetpack_connection_banner_callback' ) );
727		-
728		- add_action( 'wp_ajax_jetpack_recommendations_banner', array( 'Jetpack_Recommendations_Banner', 'ajax_callback' ) );
729		-
730	695	add_action( 'wp_loaded', array( $this, 'register_assets' ) );
731	696
732	697	/**
733	698	* These actions run checks to load additional files.
		@@ -745,29 +710,8 @@
745	710
746	711	add_filter( 'jetpack_get_default_modules', array( $this, 'filter_default_modules' ) );
747	712	add_filter( 'jetpack_get_default_modules', array( $this, 'handle_deprecated_modules' ), 99 );
748	713
749		- require_once JETPACK__PLUGIN_DIR . 'class-jetpack-pre-connection-jitms.php';
750		- $jetpack_jitm_messages = ( new Jetpack_Pre_Connection_JITMs() );
751		- add_filter( 'jetpack_pre_connection_jitms', array( $jetpack_jitm_messages, 'add_pre_connection_jitms' ) );
752		-
753		- /*
754		- * If enabled, point edit post, page, and comment links to Calypso instead of WP-Admin.
755		- * We should make sure to only do this for front end links.
756		- */
757		- if ( self::get_option( 'edit_links_calypso_redirect' ) && ! is_admin() ) {
758		- add_filter( 'get_edit_post_link', array( $this, 'point_edit_post_links_to_calypso' ), 1, 2 );
759		- add_filter( 'get_edit_comment_link', array( $this, 'point_edit_comment_links_to_calypso' ), 1 );
760		-
761		- /*
762		- * We'll shortcircuit wp_notify_postauthor and wp_notify_moderator pluggable functions
763		- * so they point moderation links on emails to Calypso.
764		- */
765		- require_once JETPACK__PLUGIN_DIR . '_inc/lib/functions.wp-notify.php';
766		- add_filter( 'comment_notification_recipients', 'jetpack_notify_postauthor', 1, 2 );
767		- add_filter( 'notify_moderator', 'jetpack_notify_moderator', 1, 2 );
768		- }
769		-
770	714	add_action(
771	715	'plugins_loaded',
772	716	function () {
773	717	if ( User_Agent_Info::is_mobile_app() ) {
		@@ -778,18 +722,10 @@
778	722
779	723	// Update the site's Jetpack plan and products from API on heartbeats.
780	724	add_action( 'jetpack_heartbeat', array( Jetpack_Plan::class, 'refresh_from_wpcom' ) );
781	725
782		- /**
783		- * This is the hack to concatenate all css files into one.
784		- * For description and reasoning see the implode_frontend_css method.
785		- *
786		- * Super late priority so we catch all the registered styles.
787		- */
788		- if ( ! is_admin() ) {
789		- add_action( 'wp_print_styles', array( $this, 'implode_frontend_css' ), -1 ); // Run first.
790		- add_action( 'wp_print_footer_scripts', array( $this, 'implode_frontend_css' ), -1 ); // Run first to trigger before `print_late_styles`.
791		- }
	726	+ // The Connection package fetches the site record for `jetpack/v4/site`; reuse it to refresh the plan.
	727	+ add_action( 'jetpack_site_data_fetched', array( Jetpack_Plan::class, 'update_from_site_record' ) );
792	728
793	729	// Actually push the stats on shutdown.
794	730	if ( ! has_action( 'shutdown', array( $this, 'push_stats' ) ) ) {
795	731	add_action( 'shutdown', array( $this, 'push_stats' ) );
		@@ -797,8 +733,10 @@
797	733
798	734	// After a successful connection.
799	735	add_action( 'jetpack_site_registered', array( $this, 'activate_default_modules_on_site_register' ) );
800	736	add_action( 'jetpack_site_registered', array( $this, 'handle_unique_registrations_stats' ) );
	737	+ add_action( 'jetpack_site_registered', array( Reader_Link::class, 'activate_on_connection' ), 9 );
	738	+ add_action( 'jetpack_site_registered', array( \Automattic\Jetpack\Reprint_Export\Reprint_Exporter::class, 'discard_credentials' ) );
801	739
802	740	// Actions for Manager::authorize().
803	741	add_action( 'jetpack_authorize_starting', array( $this, 'authorize_starting' ) );
804	742	add_action( 'jetpack_authorize_ending_linked', array( $this, 'authorize_ending_linked' ) );
		@@ -803,8 +741,9 @@
803	741	add_action( 'jetpack_authorize_starting', array( $this, 'authorize_starting' ) );
804	742	add_action( 'jetpack_authorize_ending_linked', array( $this, 'authorize_ending_linked' ) );
805	743	add_action( 'jetpack_authorize_ending_authorized', array( $this, 'authorize_ending_authorized' ) );
806	744
	745	+ Jetpack_Client_Server::init();
807	746	add_action( 'jetpack_client_authorize_error', array( Jetpack_Client_Server::class, 'client_authorize_error' ) );
808	747	add_filter( 'jetpack_client_authorize_already_authorized_url', array( Jetpack_Client_Server::class, 'client_authorize_already_authorized_url' ) );
809	748	add_action( 'jetpack_client_authorize_processing', array( Jetpack_Client_Server::class, 'client_authorize_processing' ) );
810	749	add_filter( 'jetpack_client_authorize_fallback_url', array( Jetpack_Client_Server::class, 'client_authorize_fallback_url' ) );
		@@ -809,9 +748,9 @@
809	748	add_action( 'jetpack_client_authorize_processing', array( Jetpack_Client_Server::class, 'client_authorize_processing' ) );
810	749	add_filter( 'jetpack_client_authorize_fallback_url', array( Jetpack_Client_Server::class, 'client_authorize_fallback_url' ) );
811	750
812	751	// Filters for the Manager::get_token() urls and request body.
813		- add_filter( 'jetpack_token_redirect_url', array( __CLASS__, 'filter_connect_redirect_url' ) );
	752	+ add_filter( 'jetpack_token_redirect_url', array( Authorize_Redirect::class, 'filter_connect_redirect_url' ) );
814	753	add_filter( 'jetpack_token_request_body', array( __CLASS__, 'filter_token_request_body' ) );
815	754
816	755	// Filter for the `jetpack/v4/connection/data` API response.
817	756	add_filter( 'jetpack_current_user_connection_data', array( __CLASS__, 'filter_jetpack_current_user_connection_data' ) );
		@@ -832,18 +771,147 @@
832	771	// Make resources use static domain when possible.
833	772	add_filter( 'jetpack_static_url', array( 'Automattic\\Jetpack\\Assets', 'staticize_subdomain' ) );
834	773
835	774	// Validate the domain names in Jetpack development versions.
836		- add_action( 'jetpack_pre_register', array( get_called_class(), 'registration_check_domains' ) );
	775	+ add_action( 'jetpack_pre_register', array( static::class, 'registration_check_domains' ) );
837	776
838	777	// Register product descriptions for partner coupon usage.
839	778	add_filter( 'jetpack_partner_coupon_products', array( $this, 'get_partner_coupon_product_descriptions' ) );
840	779
841		- // Actions for conditional recommendations.
842		- add_action( 'plugins_loaded', array( 'Jetpack_Recommendations', 'init_conditional_recommendation_actions' ) );
	780	+ // Add 5-star
	781	+ add_filter( 'plugin_row_meta', array( $this, 'add_5_star_review_link' ), 10, 2 );
	782	+ add_action( 'init', array( Deprecate::class, 'instance' ) );
	783	+
	784	+ // Register Jetpack module management abilities (WordPress Abilities API, WP 6.9+).
	785	+ \Automattic\Jetpack\Plugin\Abilities\Modules_Abilities::init();
	786	+
	787	+ // Register Connection abilities (WordPress Abilities API, WP 6.9+). Scoped to the
	788	+ // Jetpack plugin for now: the Connection package no longer auto-wires these, so
	789	+ // connection-only consumers (Boost, Protect, Search, etc.) do not register them yet.
	790	+ \Automattic\Jetpack\Connection\Abilities\Connection_Abilities::init();
843	791	}
844	792
845	793	/**
	794	+ * Whether the current request should eagerly initialize the admin/REST-only
	795	+ * packages (the Import package and My Jetpack) now, at `plugins_loaded` time.
	796	+ *
	797	+ * Returns true for admin, cron, POST, and WP-CLI requests — the contexts,
	798	+ * knowable this early, where those packages have work to do. Returns false
	799	+ * for a plain front-end GET and for a REST request: the two can't be told
	800	+ * apart yet (this runs before `rest_api_init`), so callers defer the REST
	801	+ * case by initializing the package on `rest_api_init` instead, while a plain
	802	+ * page view never fires that hook and so loads nothing. This keeps
	803	+ * admin/REST-only PHP out of opcache on the front-end GET hot path.
	804	+ *
	805	+ * No in-repo code depends on the deferral. The one externally observable
	806	+ * change is timing: the packages' documented init hooks
	807	+ * (`jetpack_import_initialized`, `jetpack_feature_import_enabled`, and
	808	+ * `my_jetpack_init`) no longer fire on a plain front-end GET — they fire on
	809	+ * the admin, cron, POST, WP-CLI, and REST requests where the packages load.
	810	+ *
	811	+ * @return bool
	812	+ */
	813	+ private static function should_eager_load_packages() {
	814	+ $is_post_request = isset( $_SERVER['REQUEST_METHOD'] ) && 'POST' === strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ) ) );
	815	+ $is_wp_cli = Constants::is_true( 'WP_CLI' );
	816	+
	817	+ return is_admin() \|\| wp_doing_cron() \|\| $is_post_request \|\| $is_wp_cli;
	818	+ }
	819	+
	820	+ /**
	821	+ * Configure the Import package from a deferred hook.
	822	+ *
	823	+ * The eager path uses Config::ensure( 'import' ), but the deferred REST path
	824	+ * runs after Config::on_plugins_loaded() has already processed its feature
	825	+ * flags, so it needs a hookable bootstrap callback. Preserve Config's
	826	+ * feature-enabled action for hook consumers.
	827	+ *
	828	+ * @since 16.0
	829	+ *
	830	+ * @return void
	831	+ */
	832	+ public static function configure_import_package() {
	833	+ if ( class_exists( Import_Main::class ) ) {
	834	+ Import_Main::configure();
	835	+
	836	+ if ( ! did_action( 'jetpack_feature_import_enabled' ) ) {
	837	+ do_action( 'jetpack_feature_import_enabled' );
	838	+ }
	839	+ }
	840	+ }
	841	+
	842	+ /**
	843	+ * Whether the bundled Stats v2 dashboard is enabled.
	844	+ *
	845	+ * Stats v2 (formerly "Premium Analytics") ships with the plugin behind this
	846	+ * flag while it rolls out (WOOA7S-1595). When enabled it adds its own admin
	847	+ * menu alongside the existing Stats UI; it never replaces or hides the
	848	+ * legacy Stats menu, admin-bar entries, post-list column, or WP dashboard
	849	+ * widget. The Stats module's tracking is unaffected either way, and Stats v2
	850	+ * reads what that module collects, so while the module is off the plugin
	851	+ * answers false here before even reading the flag.
	852	+ *
	853	+ * The package has to be loadable for this to be true, so a site with the
	854	+ * flag on but a missing package answers false here and never adds the
	855	+ * Stats v2 menu (a warning is logged instead).
	856	+ *
	857	+ * @since 16.1
	858	+ *
	859	+ * @return bool
	860	+ */
	861	+ public static function is_premium_analytics_enabled() {
	862	+ if ( null !== self::$premium_analytics_enabled ) {
	863	+ return self::$premium_analytics_enabled;
	864	+ }
	865	+
	866	+ if ( ! self::is_module_active( 'stats' ) ) {
	867	+ self::$premium_analytics_enabled = false;
	868	+ return false;
	869	+ }
	870	+
	871	+ /**
	872	+ * Filters whether the bundled Premium Analytics dashboard is enabled.
	873	+ *
	874	+ * Resolved once, from `Jetpack::configure()` on `plugins_loaded`, and only
	875	+ * while the Stats module is active. Register this from a mu-plugin or a
	876	+ * plugin's main file — a callback added on `plugins_loaded` or later runs
	877	+ * too late to be seen.
	878	+ *
	879	+ * @since 16.1
	880	+ *
	881	+ * @param bool $enabled Defaults to the `jetpack_premium_analytics_enabled` option (false).
	882	+ */
	883	+ $flag = (bool) apply_filters( 'jetpack_premium_analytics_enabled', (bool) get_option( 'jetpack_premium_analytics_enabled' ) );
	884	+
	885	+ self::$premium_analytics_enabled = $flag && class_exists( 'Automattic\Jetpack\PremiumAnalytics\Analytics' );
	886	+
	887	+ if ( $flag && ! self::$premium_analytics_enabled ) {
	888	+ wp_trigger_error(
	889	+ __METHOD__,
	890	+ 'The jetpack_premium_analytics_enabled flag is on but the Premium Analytics package is not loadable; keeping the Stats UI in place.'
	891	+ );
	892	+ }
	893	+
	894	+ return self::$premium_analytics_enabled;
	895	+ }
	896	+
	897	+ /**
	898	+ * Expose the setting that turns the Premium Analytics dashboard on and off.
	899	+ *
	900	+ * Deliberately not behind is_premium_analytics_enabled(): this is the setting that flips that
	901	+ * check, so it has to answer while the dashboard is still off.
	902	+ *
	903	+ * @since 16.2
	904	+ *
	905	+ * @return void
	906	+ */
	907	+ public static function register_premium_analytics_enablement_setting() {
	908	+ if ( class_exists( 'Automattic\Jetpack\PremiumAnalytics\Enablement_Setting' ) ) {
	909	+ \Automattic\Jetpack\PremiumAnalytics\Enablement_Setting::register();
	910	+ }
	911	+ }
	912	+
	913	+ /**
846	914	* Before everything else starts getting initalized, we need to initialize Jetpack using the
847	915	* Config object.
848	916	*/
849	917	public function configure() {
		@@ -852,13 +920,10 @@
852	920	foreach (
853	921	array(
854	922	'jitm',
855	923	'sync',
	924	+ 'account_protection',
856	925	'waf',
857		- 'videopress',
858		- 'stats',
859		- 'stats_admin',
860		- 'import',
861	926	)
862	927	as $feature
863	928	) {
864	929	$config->ensure( $feature );
		@@ -863,8 +928,103 @@
863	928	) {
864	929	$config->ensure( $feature );
865	930	}
866	931
	932	+ // Enable the VideoPress admin UI (the "Jetpack > VideoPress" dashboard) inside the
	933	+ // Jetpack plugin, mirroring the standalone Jetpack VideoPress plugin. The dashboard
	934	+ // only renders when the VideoPress module is active (Status::is_active()); when it
	935	+ // is not, the menu item links to the My Jetpack interstitial to activate it.
	936	+ $config->ensure( 'videopress', array( 'admin_ui' => true ) );
	937	+
	938	+ /*
	939	+ * The Import package only registers `jetpack/v4/import` REST routes — it
	940	+ * does nothing when rendering a front-end page — so gate its `ensure()`
	941	+ * to keep its PHP out of opcache on the front-end GET hot path. It still
	942	+ * loads on admin, cron, POST, and WP-CLI requests, and on `rest_api_init`
	943	+ * for REST: a REST request can't be identified yet at `plugins_loaded`
	944	+ * (this runs before `Config::on_plugins_loaded`, and `rest_api_init`
	945	+ * fires later), so it is initialized directly when that hook fires, while
	946	+ * a plain page view never fires it and so loads nothing.
	947	+ *
	948	+ * JITM stays eager (above): unlike Import, its `register()` adds a
	949	+ * `jetpack_sync_before_send_updated_option` filter that records the
	950	+ * `jetpack_last_plugin_sync` transient, and a Jetpack Sync send can fire
	951	+ * on a plain front-end GET — including the dedicated-sync `spawn-sync`
	952	+ * GET, which runs on `init` and exits before `rest_api_init`. Deferring
	953	+ * JITM would skip that bookkeeping and leave its message cache stale after
	954	+ * a plugin change, so it loads on every request as before.
	955	+ */
	956	+ if ( self::should_eager_load_packages() ) {
	957	+ $config->ensure( 'import' );
	958	+ } else {
	959	+ add_action(
	960	+ 'rest_api_init',
	961	+ array( __CLASS__, 'configure_import_package' ),
	962	+ 0
	963	+ );
	964	+ }
	965	+
	966	+ /*
	967	+ * The Stats and Stats Admin packages only do work when the Stats module
	968	+ * is active (the front-end tracking pixel) or on wp-admin, REST, cron,
	969	+ * POST, and WP-CLI requests: the Stats dashboard page, the stats /
	970	+ * stats-app REST endpoints (which the block editor also calls for
	971	+ * email-open rates), the transient-cleanup cron, the connection
	972	+ * package's package-version tracker (which runs on POSTs and reads the
	973	+ * `jetpack_package_versions` filter that Stats registers), and CLI
	974	+ * introspection such as the heartbeat inspector. On a plain front-end
	975	+ * GET page view with the module off they are inert: the pixel
	976	+ * short-circuits on `Stats\Main::should_track()` and every other entry
	977	+ * point only hooks rest_api_init, admin, cron, the POST-only tracker, or
	978	+ * is reached through WP-CLI.
	979	+ * Skip loading them — and eagerly constructing the Stats Admin REST
	980	+ * controller — on that hot path to keep their PHP out of opcache, but
	981	+ * keep loading them everywhere else exactly as before so the stats REST
	982	+ * permission mapping (view_stats, registered by Stats\Main), the
	983	+ * editor's stats-app calls, the cleanup cron, and the package-version
	984	+ * tracker are all unchanged.
	985	+ *
	986	+ * REST requests are not yet identifiable here (REST_REQUEST is defined
	987	+ * after plugins_loaded), so defer those to rest_api_init. Call the
	988	+ * package initializers directly rather than `$config->ensure()`: ensure()
	989	+ * only flags a feature for `Config::on_plugins_loaded()` (plugins_loaded
	990	+ * priority 2), which has already run by the time rest_api_init fires.
	991	+ * Priority 0 runs before each package's own priority-10 route
	992	+ * registration, so their routes still register within the same dispatch.
	993	+ * A plain page view never fires rest_api_init, so the packages stay
	994	+ * unloaded there. See JETPACK-1747.
	995	+ */
	996	+ $is_post_request = isset( $_SERVER['REQUEST_METHOD'] ) && 'POST' === $_SERVER['REQUEST_METHOD'];
	997	+ $is_wp_cli = defined( 'WP_CLI' ) && WP_CLI;
	998	+
	999	+ if ( self::is_module_active( 'stats' ) \|\| is_admin() \|\| wp_doing_cron() \|\| $is_post_request \|\| $is_wp_cli ) {
	1000	+ $config->ensure( 'stats' );
	1001	+ $config->ensure( 'stats_admin' );
	1002	+ } else {
	1003	+ add_action(
	1004	+ 'rest_api_init',
	1005	+ static function () {
	1006	+ if ( class_exists( 'Automattic\Jetpack\Stats\Main' ) ) {
	1007	+ \Automattic\Jetpack\Stats\Main::init();
	1008	+ }
	1009	+ if ( class_exists( 'Automattic\Jetpack\Stats_Admin\Main' ) ) {
	1010	+ \Automattic\Jetpack\Stats_Admin\Main::init();
	1011	+ }
	1012	+ },
	1013	+ 0
	1014	+ );
	1015	+ }
	1016	+
	1017	+ // Stats v2 (WOOA7S-1595). Unlike Stats above it cannot be deferred when enabled — see
	1018	+ // Analytics::init() for why, and for why it takes no menu_title here.
	1019	+ if ( self::is_premium_analytics_enabled() ) {
	1020	+ \Automattic\Jetpack\PremiumAnalytics\Analytics::init();
	1021	+ }
	1022	+
	1023	+ // Outside the check above on purpose — see Enablement_Setting. Deferred like Stats, to keep
	1024	+ // the autoload off the front-end hot path.
	1025	+ add_action( 'rest_api_init', array( __CLASS__, 'register_premium_analytics_enablement_setting' ), 0 );
	1026	+
867	1027	$config->ensure(
868	1028	'connection',
869	1029	array(
870	1030	'slug' => 'jetpack',
		@@ -882,12 +1042,8 @@
882	1042	);
883	1043
884	1044	$config->ensure( 'search' );
885	1045
886		- if ( defined( 'ENABLE_WORDADS_SHARED_UI' ) && ENABLE_WORDADS_SHARED_UI ) {
887		- $config->ensure( 'wordads' );
888		- }
889		-
890	1046	if ( ! $this->connection_manager ) {
891	1047	$this->connection_manager = new Connection_Manager( 'jetpack' );
892	1048	}
893	1049
		@@ -895,8 +1051,10 @@
895	1051	if ( $modules->is_active( 'publicize' ) && $this->connection_manager->has_connected_user() ) {
896	1052	$config->ensure( 'publicize' );
897	1053	}
898	1054
	1055	+ add_action( 'jetpack_initialize_tracking', array( $this, 'initialize_tracking' ) );
	1056	+
899	1057	/*
900	1058	* Load things that should only be in Network Admin.
901	1059	*
902	1060	* For now blow away everything else until a more full
		@@ -911,8 +1069,9 @@
911	1069	$is_connection_ready = self::is_connection_ready();
912	1070
913	1071	if ( $is_connection_ready ) {
914	1072	add_action( 'login_form_jetpack_json_api_authorization', array( $this, 'login_form_json_api_authorization' ) );
	1073	+ $this->run_initialize_tracking_action();
915	1074
916	1075	Jetpack_Heartbeat::init();
917	1076	if ( self::is_module_active( 'stats' ) && self::is_module_active( 'search' ) ) {
918	1077	require_once JETPACK__PLUGIN_DIR . '_inc/lib/class.jetpack-search-performance-logger.php';
		@@ -917,8 +1076,19 @@
917	1076	if ( self::is_module_active( 'stats' ) && self::is_module_active( 'search' ) ) {
918	1077	require_once JETPACK__PLUGIN_DIR . '_inc/lib/class.jetpack-search-performance-logger.php';
919	1078	Jetpack_Search_Performance_Logger::init();
920	1079	}
	1080	+ } else {
	1081	+ add_action( 'jetpack_agreed_to_terms_of_service', array( $this, 'run_initialize_tracking_action' ) );
	1082	+ add_action( 'rest_api_init', array( $this, 'run_initialize_tracking_action' ) );
	1083	+ add_filter(
	1084	+ 'xmlrpc_methods',
	1085	+ function ( $methods ) {
	1086	+ $this->run_initialize_tracking_action();
	1087	+ return $methods;
	1088	+ },
	1089	+ 1
	1090	+ );
921	1091	}
922	1092
923	1093	// Initialize remote file upload request handlers.
924	1094	$this->add_remote_request_handlers();
		@@ -928,20 +1098,10 @@
928	1098	*/
929	1099	if ( $is_connection_ready ) {
930	1100	require_once JETPACK__PLUGIN_DIR . '_inc/lib/class.jetpack-iframe-embed.php';
931	1101	add_action( 'init', array( 'Jetpack_Iframe_Embed', 'init' ), 9, 0 );
932		- require_once JETPACK__PLUGIN_DIR . '_inc/lib/class.jetpack-keyring-service-helper.php';
933		- add_action( 'init', array( 'Jetpack_Keyring_Service_Helper', 'init' ), 9, 0 );
	1102	+ add_action( 'rest_api_init', array( $this, 'maybe_initialize_rest_jsonapi' ) );
934	1103	}
935		-
936		- if ( ( new Tracking( 'jetpack', $this->connection_manager ) )->should_enable_tracking( new Terms_Of_Service(), new Status() ) ) {
937		- add_action( 'init', array( new Plugin_Tracking(), 'init' ) );
938		- } else {
939		- /**
940		- * Initialize tracking right after the user agrees to the terms of service.
941		- */
942		- add_action( 'jetpack_agreed_to_terms_of_service', array( new Plugin_Tracking(), 'init' ) );
943		- }
944	1104	}
945	1105
946	1106	/**
947	1107	* Runs on plugins_loaded. Use this to add code that needs to be executed later than other
		@@ -949,17 +1109,58 @@
949	1109	*
950	1110	* @action plugins_loaded
951	1111	*/
952	1112	public function late_initialization() {
953		- add_action( 'plugins_loaded', array( 'Jetpack', 'load_modules' ), 100 );
	1113	+ add_action( 'after_setup_theme', array( 'Jetpack', 'load_modules' ), -2 );
954	1114
955		- Partner::init();
956		- My_Jetpack_Initializer::init();
	1115	+ /*
	1116	+ * My Jetpack is a wp-admin dashboard. Its Initializer::init() only wires
	1117	+ * up admin-menu, admin_init, and rest_api_init surfaces — and eagerly
	1118	+ * loads every product class (backup, boost, protect, …) just to register
	1119	+ * admin plugin-action links — so none of it is needed on a plain
	1120	+ * front-end GET page view. (The pieces that do immediate work, e.g.
	1121	+ * Connection REST authentication and Licensing, are already initialized
	1122	+ * unconditionally in Jetpack's constructor, so they are unaffected here.)
	1123	+ *
	1124	+ * Gate the call to the request types where My Jetpack actually does work.
	1125	+ * REST can't be detected yet at plugins_loaded, so initialize on
	1126	+ * rest_api_init for that branch; a plain page view never fires it, so My
	1127	+ * Jetpack stays unloaded there.
	1128	+ */
	1129	+ if ( self::should_eager_load_packages() ) {
	1130	+ My_Jetpack_Initializer::init();
	1131	+ } else {
	1132	+ add_action( 'rest_api_init', array( My_Jetpack_Initializer::class, 'init' ), 0 );
	1133	+ }
957	1134
958		- // Initialize Boost Speed Score
959		- $modules = Jetpack_Boost_Modules::init();
960		- new Speed_Score( $modules, 'jetpack-dashboard' );
	1135	+ Scan_Page_Init::initialize();
	1136	+ Jetpack_SEO_Initializer::init();
961	1137
	1138	+ if ( ( new Modules() )->is_active( 'podcast' ) ) {
	1139	+ Podcast::init();
	1140	+ }
	1141	+
	1142	+ /*
	1143	+ * Initialize Boost Speed Score. It only does work on REST requests (the
	1144	+ * dashboard speed-score endpoints) and on a few Jetpack Boost lifecycle
	1145	+ * actions, so defer constructing it — and loading the boost-speed-score
	1146	+ * package classes — until one of those hooks actually fires instead of on
	1147	+ * every request. Priority 0 ensures the object's own callbacks (added in
	1148	+ * its constructor at the default priority) still run for the firing hook.
	1149	+ */
	1150	+ $initialize_speed_score = static function () {
	1151	+ static $initialized = false;
	1152	+ if ( $initialized ) {
	1153	+ return;
	1154	+ }
	1155	+ $initialized = true;
	1156	+ new Speed_Score( array(), 'jetpack-dashboard' );
	1157	+ };
	1158	+ add_action( 'rest_api_init', $initialize_speed_score, 0 );
	1159	+ add_action( 'jetpack_boost_deactivate', $initialize_speed_score, 0 );
	1160	+ add_action( 'jetpack_boost_environment_changed', $initialize_speed_score, 0 );
	1161	+ add_action( 'handle_environment_change', $initialize_speed_score, 0 );
	1162	+
962	1163	/**
963	1164	* Fires when Jetpack is fully loaded and ready. This is the point where it's safe
964	1165	* to instantiate classes from packages and namespaces that are managed by the Jetpack Autoloader.
965	1166	*
		@@ -997,8 +1198,10 @@
997	1198
998	1199	/**
999	1200	* Redirect edit post links to Calypso.
1000	1201	*
	1202	+ * @deprecated since 13.9
	1203	+ *
1001	1204	* @param string $default_url Post edit URL.
1002	1205	* @param int $post_id Post ID.
1003	1206	*
1004	1207	* @return string
		@@ -1003,8 +1206,10 @@
1003	1206	*
1004	1207	* @return string
1005	1208	*/
1006	1209	public function point_edit_post_links_to_calypso( $default_url, $post_id ) {
	1210	+ _deprecated_function( __METHOD__, '13.9' );
	1211	+
1007	1212	$post = get_post( $post_id );
1008	1213
1009	1214	if ( empty( $post ) ) {
1010	1215	return $default_url;
		@@ -1035,13 +1240,17 @@
1035	1240
1036	1241	/**
1037	1242	* Redirect edit comment links to Calypso.
1038	1243	*
	1244	+ * @deprecated since 13.9
	1245	+ *
1039	1246	* @param string $url Comment edit URL.
1040	1247	*
1041	1248	* @return string
1042	1249	*/
1043	1250	public function point_edit_comment_links_to_calypso( $url ) {
	1251	+ _deprecated_function( __METHOD__, '13.9' );
	1252	+
1044	1253	// Take the `query` key value from the URL, and parse its parts to the $query_args. `amp;c` matches the comment ID.
1045	1254	$query_args = null;
1046	1255	wp_parse_str( wp_parse_url( $url, PHP_URL_QUERY ), $query_args );
1047	1256
		@@ -1060,30 +1269,16 @@
1060	1269	*
1061	1270	* @return array list of callables.
1062	1271	*/
1063	1272	public function filter_sync_callable_whitelist( $callables ) {
1064		-
1065	1273	// Jetpack Functions.
1066	1274	$jetpack_callables = array(
1067	1275	'single_user_site' => array( 'Jetpack', 'is_single_user_site' ),
1068	1276	'updates' => array( 'Jetpack', 'get_updates' ),
1069	1277	'available_jetpack_blocks' => array( 'Jetpack_Gutenberg', 'get_availability' ), // Includes both Gutenberg blocks and plugins.
	1278	+ 'theme_styles' => array( 'Automattic\\Jetpack\\Plugin\\Theme_Styles_Sync', 'get_theme_styles' ),
1070	1279	);
1071		- $callables = array_merge( $callables, $jetpack_callables );
1072		-
1073		- // Jetpack_SSO_Helpers.
1074		- if ( include_once JETPACK__PLUGIN_DIR . 'modules/sso/class.jetpack-sso-helpers.php' ) {
1075		- $sso_helpers = array(
1076		- 'sso_is_two_step_required' => array( 'Jetpack_SSO_Helpers', 'is_two_step_required' ),
1077		- 'sso_should_hide_login_form' => array( 'Jetpack_SSO_Helpers', 'should_hide_login_form' ),
1078		- 'sso_match_by_email' => array( 'Jetpack_SSO_Helpers', 'match_by_email' ),
1079		- 'sso_new_user_override' => array( 'Jetpack_SSO_Helpers', 'new_user_override' ),
1080		- 'sso_bypass_default_login_form' => array( 'Jetpack_SSO_Helpers', 'bypass_login_forward_wpcom' ),
1081		- );
1082		- $callables = array_merge( $callables, $sso_helpers );
1083		- }
1084		-
1085		- return $callables;
	1280	+ return array_merge( $callables, $jetpack_callables );
1086	1281	}
1087	1282
1088	1283	/**
1089	1284	* Extend Sync multisite callables with Jetpack Plugin functions.
		@@ -1108,41 +1303,8 @@
1108	1303	return $callables;
1109	1304	}
1110	1305
1111	1306	/**
1112		- * Deprecated
1113		- * Please use Automattic\Jetpack\JITMS\JITM::jetpack_track_last_sync_callback instead.
1114		- *
1115		- * @param array $params The action parameters.
1116		- *
1117		- * @deprecated since 9.8.
1118		- */
1119		- public function jetpack_track_last_sync_callback( $params ) {
1120		- _deprecated_function( __METHOD__, 'jetpack-9.8', '\Automattic\Jetpack\JITMS\JITM->jetpack_track_last_sync_callback' );
1121		- return Automattic\Jetpack\JITMS\JITM::get_instance()->jetpack_track_last_sync_callback( $params );
1122		- }
1123		-
1124		- /**
1125		- * Jetpack Connection banner callback function.
1126		- *
1127		- * @return void
1128		- */
1129		- public function jetpack_connection_banner_callback() {
1130		- check_ajax_referer( 'jp-connection-banner-nonce', 'nonce' );
1131		-
1132		- // Disable the banner dismiss functionality if the pre-connection prompt helpers filter is set.
1133		- if (
1134		- isset( $_REQUEST['dismissBanner'] ) &&
1135		- ! Jetpack_Connection_Banner::force_display()
1136		- ) {
1137		- Jetpack_Options::update_option( 'dismissed_connection_banner', 1 );
1138		- wp_send_json_success();
1139		- }
1140		-
1141		- wp_die();
1142		- }
1143		-
1144		- /**
1145	1307	* If there are any stats that need to be pushed, but haven't been, push them now.
1146	1308	*/
1147	1309	public function push_stats() {
1148	1310	if ( ! empty( $this->stats ) ) {
		@@ -1157,16 +1319,8 @@
1157	1319	* @param string $cap Capability name.
1158	1320	*/
1159	1321	public function jetpack_custom_caps( $caps, $cap ) {
1160	1322	switch ( $cap ) {
1161		- case 'jetpack_manage_modules':
1162		- case 'jetpack_activate_modules':
1163		- case 'jetpack_deactivate_modules':
1164		- $caps = array( 'manage_options' );
1165		- break;
1166		- case 'jetpack_configure_modules':
1167		- $caps = array( 'manage_options' );
1168		- break;
1169	1323	case 'jetpack_manage_autoupdates':
1170	1324	$caps = array(
1171	1325	'manage_options',
1172	1326	'update_plugins',
		@@ -1184,9 +1338,9 @@
1184	1338	if ( $is_offline_mode ) {
1185	1339	$caps = array( 'manage_options' );
1186	1340	break;
1187	1341	} else {
1188		- $caps = array( 'read' );
	1342	+ $caps = array( 'edit_posts' );
1189	1343	}
1190	1344	break;
1191	1345	}
1192	1346	return $caps;
		@@ -1345,9 +1499,9 @@
1345	1499	}
1346	1500	/**
1347	1501	* Does the network allow admins to add new users.
1348	1502	*
1349		- * @return boolian
	1503	+ * @return bool
1350	1504	*/
1351	1505	public static function network_add_new_users() {
1352	1506	return (bool) get_site_option( 'add_new_users' );
1353	1507	}
		@@ -1354,9 +1508,9 @@
1354	1508	/**
1355	1509	* File upload psace left per site in MB.
1356	1510	* -1 means NO LIMIT.
1357	1511	*
1358		- * @return number
	1512	+ * @return int
1359	1513	*/
1360	1514	public static function network_site_upload_space() {
1361	1515	// value in MB.
1362	1516	return ( get_site_option( 'upload_space_check_disabled' ) ? -1 : get_space_allowed() );
		@@ -1373,9 +1527,9 @@
1373	1527
1374	1528	/**
1375	1529	* Maximum file upload size set by the network.
1376	1530	*
1377		- * @return number
	1531	+ * @return int
1378	1532	*/
1379	1533	public static function network_max_upload_file_size() {
1380	1534	// value in KB.
1381	1535	return get_site_option( 'fileupload_maxk', 300 );
		@@ -1534,9 +1688,9 @@
1534	1688	}
1535	1689	return 0;
1536	1690	}
1537	1691
1538		-// phpcs:disable WordPress.WP.CapitalPDangit.Misspelled
	1692	+ // phpcs:disable WordPress.WP.CapitalPDangit.MisspelledInComment
1539	1693	/**
1540	1694	* Gets updates and stores in jetpack_updates.
1541	1695	*
1542	1696	* The jetpack_updates option is saved in the following schema:
		@@ -1552,8 +1706,9 @@
1552	1706	*
1553	1707	* @return array
1554	1708	*/
1555	1709	public static function get_updates() {
	1710	+ $updates = array();
1556	1711	$update_data = wp_get_update_data();
1557	1712
1558	1713	// Stores the individual update counts as well as the total count.
1559	1714	if ( isset( $update_data['counts'] ) ) {
		@@ -1566,11 +1721,11 @@
1566	1721	if ( isset( $cur->response ) && 'upgrade' === $cur->response ) {
1567	1722	$updates['wp_update_version'] = $cur->current;
1568	1723	}
1569	1724	}
1570		- return isset( $updates ) ? $updates : array();
	1725	+ return $updates;
1571	1726	}
1572		- // phpcs:enable
	1727	+ // phpcs:enable WordPress.WP.CapitalPDangit.MisspelledInComment
1573	1728
1574	1729	/**
1575	1730	* Get update details for core, plugins, and themes.
1576	1731	*
		@@ -1628,44 +1783,8 @@
1628	1783	return apply_filters( 'jetpack_is_connection_ready', self::connection()->is_connected(), self::connection() );
1629	1784	}
1630	1785
1631	1786	/**
1632		- * Deprecated: Is Jetpack in development (offline) mode?
1633		- *
1634		- * This static method is being left here intentionally without the use of _deprecated_function(), as other plugins
1635		- * and themes still use it, and we do not want to flood them with notices.
1636		- *
1637		- * Please use Automattic\Jetpack\Status()->is_offline_mode() instead.
1638		- *
1639		- * @deprecated since 8.0.
1640		- */
1641		- public static function is_development_mode() {
1642		- _deprecated_function( __METHOD__, 'jetpack-8.0', '\Automattic\Jetpack\Status->is_offline_mode' );
1643		- return ( new Status() )->is_offline_mode();
1644		- }
1645		-
1646		- /**
1647		- * Whether the site is currently onboarding or not.
1648		- * A site is considered as being onboarded if it currently has an onboarding token.
1649		- *
1650		- * @since 5.8
1651		- * @deprecated Use \Automattic\Jetpack\Status()->is_onboarding()
1652		- *
1653		- * @access public
1654		- * @static
1655		- *
1656		- * @return bool True if the site is currently onboarding, false otherwise
1657		- */
1658		- public static function is_onboarding() {
1659		- _deprecated_function( __METHOD__, 'jetpack-10.9', 'Automattic\\Jetpack\\Status\\is_onboarding' );
1660		-
1661		- if ( ! method_exists( 'Automattic\Jetpack\Status', 'is_onboarding' ) ) {
1662		- return Jetpack_Options::get_option( 'onboarding' ) !== false;
1663		- }
1664		- return ( new Status() )->is_onboarding();
1665		- }
1666		-
1667		- /**
1668	1787	* Determines reason for Jetpack offline mode.
1669	1788	*/
1670	1789	public static function development_mode_trigger_text() {
1671	1790	$status = new Status();
		@@ -1679,11 +1798,10 @@
1679	1798	} elseif ( defined( 'WP_LOCAL_DEV' ) && WP_LOCAL_DEV ) {
1680	1799	$notice = __( 'The WP_LOCAL_DEV constant is defined in wp-config.php or elsewhere.', 'jetpack' );
1681	1800	} elseif ( $status->is_local_site() ) {
1682	1801	$notice = __( 'The site URL is a known local development environment URL (e.g. http://localhost).', 'jetpack' );
1683		- /** This filter is documented in packages/status/src/class-status.php */
1684		- } elseif ( has_filter( 'jetpack_development_mode' ) && apply_filters( 'jetpack_development_mode', false ) ) { // This is a deprecated filter name.
1685		- $notice = __( 'The jetpack_development_mode filter is set to true.', 'jetpack' );
	1802	+ } elseif ( get_option( 'jetpack_offline_mode' ) ) {
	1803	+ $notice = __( 'The jetpack_offline_mode option is set to true.', 'jetpack' );
1686	1804	} else {
1687	1805	$notice = __( 'The jetpack_offline_mode filter is set to true.', 'jetpack' );
1688	1806	}
1689	1807
		@@ -1698,9 +1816,9 @@
1698	1816	if ( ( new Status() )->is_offline_mode() ) {
1699	1817	$notice = sprintf(
1700	1818	/* translators: %s is a URL */
1701	1819	__( 'In <a href="%s" target="_blank">Offline Mode</a>:', 'jetpack' ),
1702		- Redirect::get_url( 'jetpack-support-development-mode' )
	1820	+ esc_url( Redirect::get_url( 'jetpack-support-development-mode' ) )
1703	1821	);
1704	1822
1705	1823	$notice .= ' ' . self::development_mode_trigger_text();
1706	1824
		@@ -1709,19 +1827,12 @@
1709	1827
1710	1828	// Throw up a notice if using a development version and as for feedback.
1711	1829	if ( self::is_development_version() ) {
1712	1830	/* translators: %s is a URL */
1713		- $notice = sprintf( __( 'You are currently running a development version of Jetpack. <a href="%s" target="_blank">Submit your feedback</a>', 'jetpack' ), Redirect::get_url( 'jetpack-contact-support-beta-group' ) );
	1831	+ $notice = sprintf( __( 'You are currently running a development version of Jetpack. <a href="%s" target="_blank">Submit your feedback</a>', 'jetpack' ), esc_url( Redirect::get_url( 'jetpack-contact-support-beta-group' ) ) );
1714	1832
1715	1833	echo '<div class="updated" style="border-color: #f0821e;"><p>' . $notice . '</p></div>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- All provided text.
1716	1834	}
1717		- // Throw up a notice if using staging mode.
1718		- if ( ( new Status() )->is_staging_site() ) {
1719		- /* translators: %s is a URL */
1720		- $notice = sprintf( __( 'You are running Jetpack on a <a href="%s" target="_blank">staging server</a>.', 'jetpack' ), Redirect::get_url( 'jetpack-support-staging-sites' ) );
1721		-
1722		- echo '<div class="updated" style="border-color: #f0821e;"><p>' . $notice . '</p></div>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- All provided text.
1723		- }
1724	1835	}
1725	1836
1726	1837	/**
1727	1838	* Whether Jetpack's version maps to a public release, or a development version.
		@@ -1742,28 +1853,8 @@
1742	1853	);
1743	1854	}
1744	1855
1745	1856	/**
1746		- * Is a given user (or the current user if none is specified) linked to a WordPress.com user?
1747		- *
1748		- * @param int $user_id User ID or will use get_current_user_id if false/not provided.
1749		- */
1750		- public static function is_user_connected( $user_id = false ) {
1751		- _deprecated_function( __METHOD__, 'jetpack-9.5', 'Automattic\\Jetpack\\Connection\\Manager\\is_user_connected' );
1752		- return self::connection()->is_user_connected( $user_id );
1753		- }
1754		-
1755		- /**
1756		- * Get the wpcom user data of the current\|specified connected user.
1757		- *
1758		- * @param null\|int $user_id User ID or will use get_current_user_id if null.
1759		- */
1760		- public static function get_connected_user_data( $user_id = null ) {
1761		- _deprecated_function( __METHOD__, 'jetpack-9.5', 'Automattic\\Jetpack\\Connection\\Manager\\get_connected_user_data' );
1762		- return self::connection()->get_connected_user_data( $user_id );
1763		- }
1764		-
1765		- /**
1766	1857	* Get the wpcom email of the current\|specified connected user.
1767	1858	*
1768	1859	* @param null\|int $user_id User ID or will use get_current_user_id if null.
1769	1860	*/
		@@ -1815,18 +1906,11 @@
1815	1906	*/
1816	1907	public static function load_modules() {
1817	1908	$status = new Status();
1818	1909
1819		- if ( method_exists( $status, 'is_onboarding' ) ) {
1820		- $is_onboarding = $status->is_onboarding();
1821		- } else {
1822		- $is_onboarding = self::is_onboarding();
1823		- }
1824		-
1825	1910	if (
1826	1911	! self::is_connection_ready()
1827	1912	&& ! $status->is_offline_mode()
1828		- && ! $is_onboarding
1829	1913	&& (
1830	1914	! is_multisite()
1831	1915	\|\| ! get_site_option( 'jetpack_protect_active' )
1832	1916	)
		@@ -1947,22 +2031,14 @@
1947	2031	*
1948	2032	* @todo Store the result in core's object cache maybe?
1949	2033	*/
1950	2034	public static function get_active_plugins() {
1951		- $active_plugins = (array) get_option( 'active_plugins', array() );
1952		-
1953		- if ( is_multisite() ) {
1954		- // Due to legacy code, active_sitewide_plugins stores them in the keys,
1955		- // whereas active_plugins stores them in the values.
1956		- $network_plugins = array_keys( get_site_option( 'active_sitewide_plugins', array() ) );
1957		- if ( $network_plugins ) {
1958		- $active_plugins = array_merge( $active_plugins, $network_plugins );
1959		- }
	2035	+ // Older Connection copies can load first and lack this method.
	2036	+ if ( ! method_exists( Heartbeat::class, 'get_active_plugins' ) ) {
	2037	+ return array();
1960	2038	}
1961	2039
1962		- sort( $active_plugins );
1963		-
1964		- return array_unique( $active_plugins );
	2040	+ return Heartbeat::get_active_plugins();
1965	2041	}
1966	2042
1967	2043	/**
1968	2044	* Gets and parses additional plugin data to send with the heartbeat data
		@@ -2100,8 +2176,10 @@
2100	2176	*
2101	2177	* @param bool true Should Twitter Card Meta tags be disabled. Default to true.
2102	2178	*/
2103	2179	if ( ! apply_filters( 'jetpack_disable_twitter_cards', false ) ) {
	2180	+ // @todo Remove this require once the deprecated Jetpack_Twitter_Cards wrapper has been removed.
	2181	+ // Twitter Cards functionality now lives in the jetpack-post-media package (Automattic\Jetpack\Post_Media\Twitter_Cards).
2104	2182	require_once JETPACK__PLUGIN_DIR . 'class.jetpack-twitter-cards.php';
2105	2183	}
2106	2184	}
2107	2185
		@@ -2204,9 +2282,9 @@
2204	2282	if ( isset( $_GET['page'] ) && in_array( $_GET['page'], array( 'jetpack', 'jetpack_modules' ), true ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- we're not changing the site.
2205	2283	$page = sanitize_text_field( wp_unslash( $_GET['page'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- we're not changing the site.
2206	2284	}
2207	2285	wp_safe_redirect( self::admin_url( 'page=' . rawurlencode( $page ) ) );
2208		- exit;
	2286	+ exit( 0 );
2209	2287	}
2210	2288	}
2211	2289
2212	2290	/**
		@@ -2253,8 +2331,12 @@
2253	2331	default:
2254	2332	break;
2255	2333	}
2256	2334	}
	2335	+ if ( method_exists( Feature_Policy::class, 'ensure_hooks' ) ) {
	2336	+ Feature_Policy::ensure_hooks();
	2337	+ }
	2338	+
2257	2339	/**
2258	2340	* Filters the array of default modules.
2259	2341	*
2260	2342	* @since 2.5.0
		@@ -2286,12 +2368,14 @@
2286	2368	* @return array
2287	2369	*/
2288	2370	public function handle_deprecated_modules( $modules ) {
2289	2371	$deprecated_modules = array(
2290		- 'debug' => null, // Closed out and moved to the debugger library.
2291		- 'wpcc' => 'sso', // Closed out in 2.6 -- SSO provides the same functionality.
2292		- 'gplus-authorship' => null, // Closed out in 3.2 -- Google dropped support.
2293		- 'minileven' => null, // Closed out in 8.3 -- Responsive themes are common now, and so is AMP.
	2372	+ 'debug' => null, // Closed out and moved to the debugger library.
	2373	+ 'wpcc' => 'sso', // Closed out in 2.6 -- SSO provides the same functionality.
	2374	+ 'gplus-authorship' => null, // Closed out in 3.2 -- Google dropped support.
	2375	+ 'minileven' => null, // Closed out in 8.3 -- Responsive themes are common now, and so is AMP.
	2376	+ 'lazy-images' => null, // Closed out in 12.8 -- WordPress core now has native lazy loading.
	2377	+ 'enhanced-distribution' => null, // Closed out in 13.3 -- WP.com is winding down the firehose.
2294	2378	);
2295	2379
2296	2380	// Don't activate SSO if they never completed activating WPCC.
2297	2381	if ( self::is_module_active( 'wpcc' ) ) {
		@@ -2345,8 +2429,17 @@
2345	2429	}
2346	2430	}
2347	2431	}
2348	2432
	2433	+ // Special case to convert block setting to a block module.
	2434	+ $block_key = array_search( 'blocks', $modules, true );
	2435	+ if ( $block_key !== false ) { // Only care if 'blocks' made it through the previous filters.
	2436	+ $block_option = get_option( 'jetpack_blocks_disabled', null );
	2437	+ if ( $block_option ) {
	2438	+ unset( $modules[ $block_key ] );
	2439	+ }
	2440	+ }
	2441	+
2349	2442	return $modules;
2350	2443	}
2351	2444
2352	2445	/**
		@@ -2403,23 +2496,30 @@
2403	2496
2404	2497	/**
2405	2498	* Return module name translation. Uses matching string created in modules/module-headings.php.
2406	2499	*
	2500	+ * The module list is globbed from `modules/` at runtime, so a module can be listed with no
	2501	+ * entry in that generated file. Fall back to the untranslated header rather than overwriting
	2502	+ * it with the null `jetpack_get_module_i18n()` returns for an unknown slug.
	2503	+ *
2407	2504	* @since 3.9.2
2408	2505	*
2409	2506	* @param array $modules Array of Jetpack modules.
2410	2507	*
2411		- * @return string\|void
	2508	+ * @return array
2412	2509	*/
2413	2510	public static function get_translated_modules( $modules ) {
2414	2511	foreach ( $modules as $index => $module ) {
2415	2512	$i18n_module = jetpack_get_module_i18n( $module['module'] );
2416		- if ( isset( $module['name'] ) ) {
2417		- $modules[ $index ]['name'] = $i18n_module['name'];
	2513	+ $name = $i18n_module['name'] ?? null;
	2514	+ $description = $i18n_module['description'] ?? null;
	2515	+
	2516	+ if ( null !== $name && isset( $module['name'] ) ) {
	2517	+ $modules[ $index ]['name'] = $name;
2418	2518	}
2419		- if ( isset( $module['description'] ) ) {
2420		- $modules[ $index ]['description'] = $i18n_module['description'];
2421		- $modules[ $index ]['short_description'] = $i18n_module['description'];
	2519	+ if ( null !== $description && isset( $module['description'] ) ) {
	2520	+ $modules[ $index ]['description'] = $description;
	2521	+ $modules[ $index ]['short_description'] = $description;
2422	2522	}
2423	2523	if ( isset( $module['module_tags'] ) ) {
2424	2524	$modules[ $index ]['module_tags'] = array_map( 'jetpack_get_module_i18n_tag', $module['module_tags'] );
2425	2525	}
		@@ -2459,20 +2559,28 @@
2459	2559
2460	2560	/**
2461	2561	* Catches PHP errors. Must be used in conjunction with output buffering.
2462	2562	*
	2563	+ * @deprecated since 13.5
2463	2564	* @param bool $catch True to start catching, False to stop.
2464	2565	*
2465	2566	* @static
	2567	+ * @deprecated 13.5
	2568	+ * @see \Automattic\Jetpack\Errors
2466	2569	*/
2467	2570	public static function catch_errors( $catch ) {
	2571	+ _deprecated_function( __METHOD__, '13.5' );
	2572	+ // @phan-suppress-next-line PhanDeprecatedClass
2468	2573	return ( new Errors() )->catch_errors( $catch );
2469	2574	}
2470	2575
2471	2576	/**
2472	2577	* Saves any generated PHP errors in ::state( 'php_errors', {errors} )
	2578	+ *
	2579	+ * @deprecated since 13.5
2473	2580	*/
2474	2581	public static function catch_errors_on_shutdown() {
	2582	+ _deprecated_function( __METHOD__, '13.5' );
2475	2583	self::state( 'php_errors', self::alias_directories( ob_get_clean() ) );
2476	2584	}
2477	2585
2478	2586	/**
		@@ -2576,9 +2684,9 @@
2576	2684	),
2577	2685	add_query_arg( compact( 'min_version', 'max_version', 'other_modules' ), self::admin_url( 'page=jetpack' ) )
2578	2686	);
2579	2687	wp_safe_redirect( $url );
2580		- exit;
	2688	+ exit( 0 );
2581	2689	}
2582	2690	}
2583	2691
2584	2692	/**
		@@ -2596,9 +2704,8 @@
2596	2704
2597	2705	// Check each module for fatal errors, a la wp-admin/plugins.php::activate before activating.
2598	2706	if ( $send_state_messages ) {
2599	2707	self::restate();
2600		- self::catch_errors( true );
2601	2708	}
2602	2709
2603	2710	$active = self::get_active_modules();
2604	2711
		@@ -2666,10 +2773,8 @@
2666	2773	if ( $send_state_messages ) {
2667	2774	self::state( 'error', false );
2668	2775	self::state( 'module', false );
2669	2776	}
2670		-
2671		- self::catch_errors( false );
2672	2777	/**
2673	2778	* Fires when default modules are activated.
2674	2779	*
2675	2780	* @since 1.9.0
		@@ -2727,9 +2832,9 @@
2727	2832	* @return string $url module configuration URL.
2728	2833	*/
2729	2834	public static function module_configuration_url( $module ) {
2730	2835	$module = self::get_module_slug( $module );
2731		- $default_url = self::admin_url() . "#/settings?term=$module";
	2836	+ $default_url = self::admin_url( array( 'page' => 'jetpack-settings' ) ) . "#/settings?term=$module";
2732	2837	/**
2733	2838	* Allows to modify configure_url of specific module to be able to redirect to some custom location.
2734	2839	*
2735	2840	* @since 6.9.0
		@@ -2747,9 +2852,9 @@
2747	2852	*
2748	2853	* @param string $message Error message.
2749	2854	* @param bool $deactivate Deactivate Jetpack or not.
2750	2855	*
2751		- * @return void
	2856	+ * @return never
2752	2857	*/
2753	2858	public static function bail_on_activation( $message, $deactivate = true ) {
2754	2859	?>
2755	2860	<!doctype html>
		@@ -2787,9 +2892,9 @@
2787	2892	if ( $update ) {
2788	2893	update_option( 'active_plugins', array_filter( $plugins ) );
2789	2894	}
2790	2895	}
2791		- exit;
	2896	+ exit( 0 );
2792	2897	}
2793	2898
2794	2899	/**
2795	2900	* Attached to activate_{ plugin_basename( __FILES__ ) } by register_activation_hook()
		@@ -2814,12 +2919,18 @@
2814	2919	update_option( 'jetpack_activation_source', self::get_activation_source( wp_get_referer() ) );
2815	2920
2816	2921	Health::on_jetpack_activated();
2817	2922
	2923	+ \Automattic\Jetpack\Reprint_Export\Reprint_Exporter::discard_credentials();
	2924	+
2818	2925	if ( self::is_connection_ready() && method_exists( 'Automattic\Jetpack\Sync\Actions', 'do_only_first_initial_sync' ) ) {
2819	2926	Sync_Actions::do_only_first_initial_sync();
2820	2927	}
2821	2928
	2929	+ if ( ! defined( 'WC_ANALYTICS' ) && class_exists( 'Automattic\Woocommerce_Analytics' ) ) {
	2930	+ Woocommerce_Analytics::maybe_add_proxy_speed_module();
	2931	+ }
	2932	+
2822	2933	self::plugin_initialize();
2823	2934	}
2824	2935
2825	2936	/**
		@@ -2854,9 +2965,9 @@
2854	2965
2855	2966	if ( $plugins_path === $referer['path'] ) {
2856	2967	$source_type = 'list';
2857	2968	} elseif ( $plugins_install_path === $referer['path'] ) {
2858		- $tab = isset( $query_parts['tab'] ) ? $query_parts['tab'] : 'featured';
	2969	+ $tab = $query_parts['tab'] ?? 'featured';
2859	2970	switch ( $tab ) {
2860	2971	case 'popular':
2861	2972	$source_type = 'popular';
2862	2973	break;
		@@ -2866,10 +2977,10 @@
2866	2977	case 'favorites':
2867	2978	$source_type = 'favorites';
2868	2979	break;
2869	2980	case 'search':
2870		- $source_type = 'search-' . ( isset( $query_parts['type'] ) ? $query_parts['type'] : 'term' );
2871		- $source_query = isset( $query_parts['s'] ) ? $query_parts['s'] : null;
	2981	+ $source_type = 'search-' . ( $query_parts['type'] ?? 'term' );
	2982	+ $source_query = $query_parts['s'] ?? null;
2872	2983	break;
2873	2984	default:
2874	2985	$source_type = 'featured';
2875	2986	}
		@@ -2878,29 +2989,171 @@
2878	2989	return array( $source_type, $source_query );
2879	2990	}
2880	2991
2881	2992	/**
2882		- * Runs before bumping version numbers up to a new version
	2993	+ * Runs before bumping version numbers up to a new version.
2883	2994	*
2884		- * @param string $version Version:timestamp.
	2995	+ * Only ever registered the hooks for the release post update modal, which has been removed.
	2996	+ * No longer hooked to `updating_jetpack_version`.
	2997	+ *
	2998	+ * @deprecated 16.2
	2999	+ *
	3000	+ * @param string $version Version:timestamp.
2885	3001	* @param string $old_version Old Version:timestamp or false if not set yet.
2886	3002	*/
2887		- public static function do_version_bump( $version, $old_version ) {
2888		- if ( $old_version ) { // For existing Jetpack installations.
2889		- add_action( 'admin_enqueue_scripts', __CLASS__ . '::enqueue_block_style' );
	3003	+ public static function do_version_bump( $version, $old_version ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable -- Signature preserved for the deprecation shim.
	3004	+ _deprecated_function( __METHOD__, 'jetpack-16.2' );
	3005	+ }
2890	3006
2891		- // If a front end page is visited after the update, the 'wp' action will fire.
2892		- add_action( 'wp', 'Jetpack::set_update_modal_display' );
	3007	+ /**
	3008	+ * Enables the Newsletter (subscriptions) module for existing sites now that it is a default-on module.
	3009	+ *
	3010	+ * Fresh installs receive the module via its "Auto Activate: Yes" header, so this only handles sites
	3011	+ * upgrading from a version where the module defaulted off. It runs once per site (guarded by the
	3012	+ * subscriptions_default_on_migrated option). Fresh installs are marked as migrated immediately so the
	3013	+ * migration never runs for them. After it has run, the user's choice to deactivate the module again
	3014	+ * (for example from the My Jetpack Products page) is respected and never reverted.
	3015	+ *
	3016	+ * The module requires a connection, so on a disconnected site the migration is deferred without setting
	3017	+ * the guard, allowing a later version bump to retry once the site is connected.
	3018	+ *
	3019	+ * @param string $version New Jetpack version:timestamp.
	3020	+ * @param string\|false $old_version Previous Jetpack version:timestamp, or false on a fresh install.
	3021	+ */
	3022	+ public static function activate_subscriptions_module_for_existing_sites( $version, $old_version ) {
	3023	+ if ( get_option( 'jetpack_subscriptions_default_on_migrated' ) ) {
	3024	+ return;
	3025	+ }
2893	3026
2894		- // If an admin page is visited after the update, the 'current_screen' action will fire.
2895		- add_action( 'current_screen', 'Jetpack::set_update_modal_display' );
	3027	+ // Fresh installs get the module via its "Auto Activate: Yes" header. Mark them as migrated so a
	3028	+ // later opt-out is never reverted by the existing-site path on a subsequent version bump.
	3029	+ if ( ! $old_version ) {
	3030	+ update_option( 'jetpack_subscriptions_default_on_migrated', true );
	3031	+ return;
2896	3032	}
	3033	+
	3034	+ if ( ! self::is_connection_ready() ) {
	3035	+ return;
	3036	+ }
	3037	+
	3038	+ // Mark as migrated only once the module is active, so a transient activation failure is retried on
	3039	+ // a later version bump rather than being silently skipped.
	3040	+ if ( self::is_module_active( 'subscriptions' ) \|\| self::activate_module( 'subscriptions', false, false ) ) {
	3041	+ update_option( 'jetpack_subscriptions_default_on_migrated', true );
	3042	+ }
2897	3043	}
2898	3044
2899	3045	/**
	3046	+ * Option flag that records the AI master-switch opt-out reconciliation has run,
	3047	+ * so it never runs twice.
	3048	+ *
	3049	+ * @var string
	3050	+ */
	3051	+ const AI_MASTER_OPTOUT_MIGRATED_OPTION = 'jetpack_ai_master_optout_migrated';
	3052	+
	3053	+ /**
	3054	+ * Register the on-upgrade init hooks whose relative ORDER matters, extracted so
	3055	+ * the ordering can be asserted in tests without invoking plugin_upgrade() (whose
	3056	+ * guards make it unreliable to trigger under test). activate_new_modules()
	3057	+ * (init, default priority 10) auto-activates "Auto Activate: Yes" modules
	3058	+ * including the `ai` master; reconcile_ai_master_optout() must run at a LATER
	3059	+ * priority to honor an explicit AI opt-out.
	3060	+ *
	3061	+ * @return void
	3062	+ */
	3063	+ public static function register_upgrade_init_hooks() {
	3064	+ add_action( 'init', array( __CLASS__, 'activate_new_modules' ) );
	3065	+ add_action( 'init', array( __CLASS__, 'reconcile_ai_master_optout' ), 20 );
	3066	+ }
	3067	+
	3068	+ /**
	3069	+ * Preserves an explicit Jetpack AI opt-out when the `ai` module becomes the site-wide
	3070	+ * master switch off WordPress.com Simple (self-hosted and Atomic).
	3071	+ *
	3072	+ * The `ai` module is "Auto Activate: Yes", so on upgrade {@see self::activate_new_modules()}
	3073	+ * turns it on for connected sites — the desired default-on / auto-enable-on-connection
	3074	+ * behavior, which this method deliberately leaves alone. The one case it corrects is a site
	3075	+ * that had explicitly disabled Jetpack AI (the `jetpack_ai_enabled` option present and falsey)
	3076	+ * before the module shipped: that opt-out must survive the module becoming the master, so the
	3077	+ * module is deactivated for exactly those sites. An absent or truthy option is left untouched.
	3078	+ *
	3079	+ * Ordering is the whole point. `activate_new_modules()` is hooked on `init` at priority 10 and
	3080	+ * auto-activates the module there; this method is hooked on `init` at priority 20 (see
	3081	+ * {@see self::plugin_upgrade()}), so it runs AFTER the auto-activation and its deactivation is
	3082	+ * the final state. A version-guarded block that ran inline during `plugins_loaded` would be
	3083	+ * undone by the later auto-activation, which is why this is a late-init hook rather than an
	3084	+ * inline upgrade step.
	3085	+ *
	3086	+ * WordPress.com Simple never runs modules — the option stays the master there — so this is a
	3087	+ * no-op on Simple. The {@see self::AI_MASTER_OPTOUT_MIGRATED_OPTION} flag makes it run exactly
	3088	+ * once, which matters because off-Simple the option is no longer the master after this runs:
	3089	+ * a stale falsey option must not keep re-deactivating a module the user later turns back on.
	3090	+ *
	3091	+ * @return void
	3092	+ */
	3093	+ public static function reconcile_ai_master_optout() {
	3094	+ if ( get_option( self::AI_MASTER_OPTOUT_MIGRATED_OPTION ) ) {
	3095	+ return;
	3096	+ }
	3097	+
	3098	+ // Simple keeps the `jetpack_ai_enabled` option as the master; modules don't run there.
	3099	+ if ( ( new Host() )->is_wpcom_simple() ) {
	3100	+ return;
	3101	+ }
	3102	+
	3103	+ // A sentinel default distinguishes an absent option (leave auto-activation alone) from one
	3104	+ // explicitly stored falsey (an opt-out to preserve).
	3105	+ $stored = get_option( 'jetpack_ai_enabled', 'not-set' );
	3106	+ if ( 'not-set' !== $stored && ! (bool) $stored ) {
	3107	+ ( new Modules() )->deactivate( 'ai' );
	3108	+ }
	3109	+
	3110	+ update_option( self::AI_MASTER_OPTOUT_MIGRATED_OPTION, true );
	3111	+ }
	3112	+
	3113	+ /**
	3114	+ * Deletes obsolete SEO module-state options without changing module activation.
	3115	+ *
	3116	+ * @since 16.3
	3117	+ */
	3118	+ public static function cleanup_seo_module_state_options() {
	3119	+ delete_option( 'jetpack_seo_sitemap_enabled' );
	3120	+ delete_option( 'jetpack_seo_canonical_urls_enabled' );
	3121	+ delete_option( 'jetpack_seo_module_state_reconciled' );
	3122	+ }
	3123	+
	3124	+ /**
	3125	+ * Seeds the Jetpack SEO discoverability cohort once, so the new SEO surface is
	3126	+ * auto-discoverable on fresh installs but opt-in on existing ones (JETPACK-1700).
	3127	+ *
	3128	+ * Hooked on `updating_jetpack_version`, which fires on every install including the
	3129	+ * first — with `$old_version === false` on a brand-new site (the same signal
	3130	+ * {@see self::activate_subscriptions_module_for_existing_sites()} keys off). Fresh
	3131	+ * installs are seeded visible; existing installs are seeded hidden and opt in later
	3132	+ * via the legacy Traffic page or My Jetpack. `add_option()` makes this seed-once: it
	3133	+ * never overrides a value a later opt-in (or opt-out) has set. WordPress.com sites
	3134	+ * ignore this option entirely (always visible) — see
	3135	+ * {@see \Automattic\Jetpack\SEO\Initializer::is_seo_surface_visible()}.
	3136	+ *
	3137	+ * @param string $version The new Jetpack version (unused).
	3138	+ * @param string\|false $old_version The previous version, or false on a fresh install.
	3139	+ */
	3140	+ public static function seed_seo_visibility_cohort( $version, $old_version ) {
	3141	+ add_option( Jetpack_SEO_Initializer::VISIBILITY_OPTION, ! $old_version );
	3142	+ }
	3143	+
	3144	+ /**
2900	3145	* Sets the display_update_modal state.
	3146	+ *
	3147	+ * The release post update modal that read this state has been removed. The write is kept so the
	3148	+ * method still behaves as documented for the deprecation window. When this is deleted, also drop
	3149	+ * the matching `display_update_modal` guard in Automattic\Jetpack\CookieState::should_set_cookie(),
	3150	+ * which exists only to keep this key out of the cookie on the Jetpack admin screen.
	3151	+ *
	3152	+ * @deprecated 16.2
2901	3153	*/
2902	3154	public static function set_update_modal_display() {
	3155	+ _deprecated_function( __METHOD__, 'jetpack-16.2' );
2903	3156	self::state( 'display_update_modal', true );
2904	3157	}
2905	3158
2906	3159	/**
		@@ -2905,11 +3158,16 @@
2905	3158
2906	3159	/**
2907	3160	* Enqueues the block library styles.
2908	3161	*
	3162	+ * Only ever used by the release post update modal, which has been removed.
	3163	+ *
	3164	+ * @deprecated 16.2
	3165	+ *
2909	3166	* @param string $hook The current admin page.
2910	3167	*/
2911	3168	public static function enqueue_block_style( $hook ) {
	3169	+ _deprecated_function( __METHOD__, 'jetpack-16.2' );
2912	3170	if ( 'toplevel_page_jetpack' === $hook ) {
2913	3171	wp_enqueue_style( 'wp-block-library' );
2914	3172	}
2915	3173	}
		@@ -2938,9 +3196,8 @@
2938	3196
2939	3197	self::load_modules();
2940	3198
2941	3199	Jetpack_Options::delete_option( 'do_activate' );
2942		- Jetpack_Options::delete_option( 'dismissed_connection_banner' );
2943	3200	}
2944	3201
2945	3202	/**
2946	3203	* Handles the activation of the default modules depending on the current state of the site:
		@@ -2999,8 +3256,12 @@
2999	3256	add_filter( 'jetpack_update_activated_state_on_disconnect', '__return_false' );
3000	3257	self::disconnect();
3001	3258	Jetpack_Options::delete_option( 'version' );
3002	3259	}
	3260	+
	3261	+ if ( ! defined( 'WC_ANALYTICS' ) && class_exists( 'Automattic\Woocommerce_Analytics' ) ) {
	3262	+ Woocommerce_Analytics::maybe_remove_proxy_speed_module();
	3263	+ }
3003	3264	}
3004	3265
3005	3266	/**
3006	3267	* Set activated option to 4 on jetpack_idc_disconnect action.
		@@ -3028,9 +3289,9 @@
3028	3289	$connection->remove_connection( ! Identity_Crisis::validate_sync_error_idc_option() );
3029	3290	}
3030	3291
3031	3292	/**
3032		- * Happens after a successfull disconnection.
	3293	+ * Happens after a successful disconnection.
3033	3294	*
3034	3295	* @static
3035	3296	*/
3036	3297	public static function jetpack_site_disconnected() {
		@@ -3035,8 +3296,10 @@
3035	3296	*/
3036	3297	public static function jetpack_site_disconnected() {
3037	3298	Identity_Crisis::clear_all_idc_options();
3038	3299
	3300	+ \Automattic\Jetpack\Reprint_Export\Reprint_Exporter::discard_credentials();
	3301	+
3039	3302	// Delete all the sync related data. Since it could be taking up space.
3040	3303	Sender::get_instance()->uninstall();
3041	3304
3042	3305	/**
		@@ -3053,10 +3316,13 @@
3053	3316	}
3054	3317	}
3055	3318
3056	3319	/**
3057		- * Disconnects the user
	3320	+ * Disconnects the user.
3058	3321	*
	3322	+ * @deprecated 13.4
	3323	+ * @see \Automattic\Jetpack\Connection\Manager::disconnect_user()
	3324	+ *
3059	3325	* @param int $user_id The user ID to disconnect.
3060	3326	*/
3061	3327	public function disconnect_user( $user_id ) {
3062	3328	$this->connection_manager->disconnect_user( $user_id );
		@@ -3062,21 +3328,8 @@
3062	3328	$this->connection_manager->disconnect_user( $user_id );
3063	3329	}
3064	3330
3065	3331	/**
3066		- * Attempts Jetpack registration. If it fail, a state flag is set: @see ::admin_page_load()
3067		- *
3068		- * @deprecated since Jetpack 9.7.0
3069		- * @see Automattic\Jetpack\Connection\Manager::try_registration()
3070		- *
3071		- * @return bool\|WP_Error
3072		- */
3073		- public static function try_registration() {
3074		- _deprecated_function( __METHOD__, 'jetpack-9.7', 'Automattic\\Jetpack\\Connection\\Manager::try_registration' );
3075		- return static::connection()->try_registration();
3076		- }
3077		-
3078		- /**
3079	3332	* Checking the domain names in beta versions.
3080	3333	* If this is a development version, before attempting to connect, let's make sure that the domains are viable.
3081	3334	*
3082	3335	* @param null\|\WP_Error $error The domain validation error, or `null` if everything's fine.
		@@ -3083,9 +3336,9 @@
3083	3336	*
3084	3337	* @return null\|\WP_Error The domain validation error, or `null` if everything's fine.
3085	3338	*/
3086	3339	public static function registration_check_domains( $error ) {
3087		- if ( static::is_development_version() && defined( 'PHP_URL_HOST' ) ) {
	3340	+ if ( static::is_development_version() ) {
3088	3341	$domains_to_check = array_unique(
3089	3342	array(
3090	3343	'siteurl' => wp_parse_url( get_site_url(), PHP_URL_HOST ),
3091	3344	'homeurl' => wp_parse_url( get_home_url(), PHP_URL_HOST ),
		@@ -3110,10 +3363,17 @@
3110	3363	* @param mixed $code Error code to log.
3111	3364	* @param mixed $data Data to log.
3112	3365	*/
3113	3366	public static function log( $code, $data = null ) {
	3367	+
	3368	+ $raw_log = Jetpack_Options::get_option( 'log', array() );
	3369	+ // This can be modified by the `jetpack_options` filter, so abort if we don't have an array.
	3370	+ if ( ! is_array( $raw_log ) ) {
	3371	+ return;
	3372	+ }
	3373	+
3114	3374	// only grab the latest 200 entries.
3115		- $log = array_slice( Jetpack_Options::get_option( 'log', array() ), -199, 199 );
	3375	+ $log = array_slice( $raw_log, -199, 199 );
3116	3376
3117	3377	// Append our event to the log.
3118	3378	$log_entry = array(
3119	3379	'time' => time(),
		@@ -3213,8 +3473,15 @@
3213	3473
3214	3474	/**
3215	3475	* Return stat data for WPCOM sync.
3216	3476	*
	3477	+ * The Sync stats module was this method's last caller and moved to the Connection package's
	3478	+ * `Heartbeat::generate_stats_array()`, which assembles the heartbeat data through the
	3479	+ * `jetpack_heartbeat_stats_array` filter. Note the package method does not include the extended
	3480	+ * data from `get_additional_stat_data()`, so callers relying on `$extended` need to add it themselves.
	3481	+ *
	3482	+ * @deprecated 16.2
	3483	+ *
3217	3484	* @param bool $encode JSON encode the result.
3218	3485	* @param bool $extended Adds additional stats data.
3219	3486	*
3220	3487	* @return array\|string Stats data. Array if $encode is false. JSON-encoded string is $encode is true.
		@@ -3219,10 +3486,15 @@
3219	3486	*
3220	3487	* @return array\|string Stats data. Array if $encode is false. JSON-encoded string is $encode is true.
3221	3488	*/
3222	3489	public static function get_stat_data( $encode = true, $extended = true ) {
3223		- $data = Jetpack_Heartbeat::generate_stats_array();
	3490	+ _deprecated_function( __METHOD__, 'jetpack-16.2', 'Automattic\\Jetpack\\Heartbeat::generate_stats_array' );
3224	3491
	3492	+ $env_stats = method_exists( Heartbeat::class, 'get_environment_stats' )
	3493	+ ? Heartbeat::get_environment_stats()
	3494	+ : array();
	3495	+ $data = array_merge( Jetpack_Heartbeat::generate_stats_array(), $env_stats );
	3496	+
3225	3497	if ( $extended ) {
3226	3498	$additional_data = self::get_additional_stat_data();
3227	3499	$data = array_merge( $data, $additional_data );
3228	3500	}
		@@ -3227,9 +3499,9 @@
3227	3499	$data = array_merge( $data, $additional_data );
3228	3500	}
3229	3501
3230	3502	if ( $encode ) {
3231		- return wp_json_encode( $data );
	3503	+ return wp_json_encode( $data, JSON_UNESCAPED_SLASHES );
3232	3504	}
3233	3505
3234	3506	return $data;
3235	3507	}
		@@ -3301,23 +3573,24 @@
3301	3573	$fallback_no_verify_ssl_certs = Jetpack_Options::get_option( 'fallback_no_verify_ssl_certs' );
3302	3574	/** Already documented in automattic/jetpack-connection::src/class-client.php */
3303	3575	$client_verify_ssl_certs = apply_filters( 'jetpack_client_verify_ssl_certs', false );
3304	3576
3305		- if ( ! $is_offline_mode ) {
3306		- Jetpack_Connection_Banner::init();
3307		- Jetpack_Connection_Widget::init();
3308		- }
	3577	+ // Run post-activation actions if needed.
	3578	+ $this->plugin_post_activation();
3309	3579
3310	3580	if ( ( self::is_connection_ready() \|\| $is_offline_mode ) && false === $fallback_no_verify_ssl_certs && ! $client_verify_ssl_certs ) {
3311	3581	// Upgrade: 1.1 -> 1.1.1
3312	3582	// Check and see if host can verify the Jetpack servers' SSL certificate.
3313	3583	$args = array();
	3584	+ // @phan-suppress-next-line PhanAccessMethodInternal -- Phan is correct, but the usage is intentional.
3314	3585	Client::_wp_remote_request( self::connection()->api_url( 'test' ), $args, true );
3315	3586	}
3316	3587
3317		- Jetpack_Recommendations_Banner::init();
3318		-
3319		- if ( current_user_can( 'manage_options' ) && ! self::permit_ssl() ) {
	3588	+ if (
	3589	+ current_user_can( 'manage_options' )
	3590	+ && ! self::permit_ssl()
	3591	+ && ! $is_offline_mode
	3592	+ ) {
3320	3593	add_action( 'jetpack_notices', array( $this, 'alert_auto_ssl_fail' ) );
3321	3594	}
3322	3595
3323	3596	add_action( 'load-plugins.php', array( $this, 'intercept_plugin_error_scrape_init' ) );
		@@ -3326,12 +3599,8 @@
3326	3599	if ( ! ( is_multisite() && is_plugin_active_for_network( 'jetpack/jetpack.php' ) && ! is_network_admin() ) ) {
3327	3600	add_action( 'admin_enqueue_scripts', array( $this, 'deactivate_dialog' ) );
3328	3601	}
3329	3602
3330		- if ( isset( $_COOKIE['jetpackState']['display_update_modal'] ) ) {
3331		- add_action( 'admin_enqueue_scripts', __CLASS__ . '::enqueue_block_style' );
3332		- }
3333		-
3334	3603	add_filter( 'plugin_action_links_' . plugin_basename( JETPACK__PLUGIN_DIR . 'jetpack.php' ), array( $this, 'plugin_action_links' ) );
3335	3604
3336	3605	if ( self::is_connection_ready() \|\| $is_offline_mode ) {
3337	3606	// Artificially throw errors in certain specific cases during plugin activation.
		@@ -3336,13 +3605,8 @@
3336	3605	if ( self::is_connection_ready() \|\| $is_offline_mode ) {
3337	3606	// Artificially throw errors in certain specific cases during plugin activation.
3338	3607	add_action( 'activate_plugin', array( $this, 'throw_error_on_activate_plugin' ) );
3339	3608	}
3340		-
3341		- // Add custom column in wp-admin/users.php to show whether user is linked.
3342		- add_filter( 'manage_users_columns', array( $this, 'jetpack_icon_user_connected' ) );
3343		- add_action( 'manage_users_custom_column', array( $this, 'jetpack_show_user_connected_icon' ), 10, 3 );
3344		- add_action( 'admin_print_styles', array( $this, 'jetpack_user_col_style' ) );
3345	3609	}
3346	3610
3347	3611	/**
3348	3612	* Adds body classes.
		@@ -3375,8 +3639,9 @@
3375	3639	* Sometimes a plugin can activate without causing errors, but it will cause errors on the next page load.
3376	3640	* This function artificially throws errors for such cases (per a specific list).
3377	3641	*
3378	3642	* @param string $plugin The activated plugin.
	3643	+ * @throws RuntimeException If a conflicting plugin is detected.
3379	3644	*/
3380	3645	public function throw_error_on_activate_plugin( $plugin ) {
3381	3646	$active_modules = self::get_active_modules();
3382	3647
		@@ -3389,8 +3654,9 @@
3389	3654	if ( 'stats.php' === basename( $plugin ) ) {
3390	3655	$throw = true;
3391	3656	}
3392	3657	} else {
	3658	+ // @phan-suppress-next-line PhanUndeclaredFunctionInCallable -- Checked above. See also https://github.com/phan/phan/issues/1204.
3393	3659	$reflection = new ReflectionFunction( 'stats_get_api_key' );
3394	3660	if ( basename( $plugin ) === basename( $reflection->getFileName() ) ) {
3395	3661	$throw = true;
3396	3662	}
		@@ -3397,9 +3663,9 @@
3397	3663	}
3398	3664
3399	3665	if ( $throw ) {
3400	3666	/* translators: Plugin name to deactivate. */
3401		- trigger_error( sprintf( esc_html__( 'Jetpack contains the most recent version of the old “%1$s” plugin.', 'jetpack' ), 'WordPress.com Stats' ), E_USER_ERROR ); // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_trigger_error
	3667	+ throw new RuntimeException( sprintf( __( 'Jetpack contains the most recent version of the old "%1$s" plugin.', 'jetpack' ), 'WordPress.com Stats' ) );
3402	3668	}
3403	3669	}
3404	3670	}
3405	3671
		@@ -3481,8 +3747,9 @@
3481	3747	/**
3482	3748	* Handler for Jetpack remote file uploads.
3483	3749	*
3484	3750	* @access public
	3751	+ * @return never
3485	3752	*/
3486	3753	public function remote_request_handlers() {
3487	3754	switch ( current_filter() ) {
3488	3755	case 'wp_ajax_nopriv_jetpack_upload_file':
		@@ -3509,18 +3776,17 @@
3509	3776	if ( ! is_int( $status_code ) ) {
3510	3777	$status_code = 400;
3511	3778	}
3512	3779
3513		- status_header( $status_code );
3514		- die( wp_json_encode( (object) compact( 'error', 'error_description' ) ) );
	3780	+ wp_send_json( (object) compact( 'error', 'error_description' ), $status_code, JSON_UNESCAPED_SLASHES );
3515	3781	}
3516	3782
3517		- status_header( 200 );
3518	3783	if ( true === $response ) {
3519		- exit;
	3784	+ status_header( 200 );
	3785	+ exit( 0 );
3520	3786	}
3521	3787
3522		- die( wp_json_encode( (object) $response ) );
	3788	+ wp_send_json( (object) $response, 200, JSON_UNESCAPED_SLASHES );
3523	3789	}
3524	3790
3525	3791	/**
3526	3792	* Uploads a file gotten from the global $_FILES.
		@@ -3528,9 +3794,9 @@
3528	3794	* the attachment file of the media item (gotten through of the post_id)
3529	3795	* will be updated instead of add a new one.
3530	3796	*
3531	3797	* @param boolean $update_media_item - update media attachment.
3532		- * @return array - An array describing the uploadind files process.
	3798	+ * @return array\|WP_Error - An array describing the uploading files process.
3533	3799	*/
3534	3800	public function upload_handler( $update_media_item = false ) {
3535	3801	if ( isset( $_SERVER['REQUEST_METHOD'] ) && 'POST' !== strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ) ) ) ) {
3536	3802	return new WP_Error( 405, get_status_header_desc( 405 ), 405 );
		@@ -3581,9 +3847,9 @@
3581	3847	return new WP_Error( 'handler_cannot_upload', __( 'The upload handler cannot upload files', 'jetpack' ), 400 );
3582	3848	}
3583	3849
3584	3850	$uploaded_files = array();
3585		- $global_post = isset( $GLOBALS['post'] ) ? $GLOBALS['post'] : null;
	3851	+ $global_post = $GLOBALS['post'] ?? null;
3586	3852	unset( $GLOBALS['post'] );
3587	3853	if ( empty( $_FILES['media']['name'] ) ) {
3588	3854	// Nothing to process, just return.
3589	3855	return $uploaded_files;
		@@ -3590,9 +3856,9 @@
3590	3856	}
3591	3857	foreach ( $_FILES['media']['name'] as $index => $name ) { // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- As above, unslash sniff is wrong. Validation should happen below.
3592	3858	$file = array();
3593	3859	foreach ( $media_keys as $media_key ) {
3594		- $file[ $media_key ] = isset( $_FILES['media'][ $media_key ][ $index ] ) ? $_FILES['media'][ $media_key ][ $index ] : null; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- As above, the unslash sniff is wrong.
	3860	+ $file[ $media_key ] = $_FILES['media'][ $media_key ][ $index ] ?? null; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash,,WordPress.Security.NonceVerification.Missing,WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- As above, the unslash sniff is wrong.
3595	3861	}
3596	3862
3597	3863	list( $hmac_provided, $salt ) = isset( $_POST['_jetpack_file_hmac_media'][ $index ] ) ? explode( ':', filter_var( wp_unslash( $_POST['_jetpack_file_hmac_media'][ $index ] ) ) ) : array( 'no', '' ); // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce should have been checked by the caller.
3598	3864
		@@ -3638,9 +3904,9 @@
3638	3904	'type' => (string) $edited_media_item->post_mime_type,
3639	3905	'meta' => (array) wp_get_attachment_metadata( $post_id ),
3640	3906	);
3641	3907
3642		- return (array) array( $response );
	3908	+ return array( $response );
3643	3909	}
3644	3910
3645	3911	$attachment_id = media_handle_upload(
3646	3912	'.jetpack.upload.',
		@@ -3679,67 +3945,8 @@
3679	3945	return $uploaded_files;
3680	3946	}
3681	3947
3682	3948	/**
3683		- * Add help to the Jetpack page
3684		- *
3685		- * @since Jetpack (1.2.3)
3686		- * @return void
3687		- */
3688		- public function admin_help() {
3689		- $current_screen = get_current_screen();
3690		-
3691		- // Overview.
3692		- $current_screen->add_help_tab(
3693		- array(
3694		- 'id' => 'home',
3695		- 'title' => __( 'Home', 'jetpack' ),
3696		- 'content' =>
3697		- '<p><strong>' . __( 'Jetpack', 'jetpack' ) . '</strong></p>' .
3698		- '<p>' . __( 'Jetpack supercharges your self-hosted WordPress site with the awesome cloud power of WordPress.com.', 'jetpack' ) . '</p>' .
3699		- '<p>' . __( 'On this page, you are able to view the modules available within Jetpack, learn more about them, and activate or deactivate them as needed.', 'jetpack' ) . '</p>',
3700		- )
3701		- );
3702		-
3703		- // Screen Content.
3704		- if ( current_user_can( 'manage_options' ) ) {
3705		- $current_screen->add_help_tab(
3706		- array(
3707		- 'id' => 'settings',
3708		- 'title' => __( 'Settings', 'jetpack' ),
3709		- 'content' =>
3710		- '<p><strong>' . __( 'Jetpack', 'jetpack' ) . '</strong></p>' .
3711		- '<p>' . __( 'You can activate or deactivate individual Jetpack modules to suit your needs.', 'jetpack' ) . '</p>' .
3712		- '<ol>' .
3713		- '<li>' . __( 'Each module has an Activate or Deactivate link so you can toggle one individually.', 'jetpack' ) . '</li>' .
3714		- '<li>' . __( 'Using the checkboxes next to each module, you can select multiple modules to toggle via the Bulk Actions menu at the top of the list.', 'jetpack' ) . '</li>' .
3715		- '</ol>' .
3716		- '<p>' . __( 'Using the tools on the right, you can search for specific modules, filter by module categories or which are active, or change the sorting order.', 'jetpack' ) . '</p>',
3717		- )
3718		- );
3719		- }
3720		-
3721		- // Help Sidebar.
3722		- $support_url = Redirect::get_url( 'jetpack-support' );
3723		- $faq_url = Redirect::get_url( 'jetpack-faq' );
3724		- $current_screen->set_help_sidebar(
3725		- '<p><strong>' . __( 'For more information:', 'jetpack' ) . '</strong></p>' .
3726		- '<p><a href="' . $faq_url . '" rel="noopener noreferrer" target="_blank">' . __( 'Jetpack FAQ', 'jetpack' ) . '</a></p>' .
3727		- '<p><a href="' . $support_url . '" rel="noopener noreferrer" target="_blank">' . __( 'Jetpack Support', 'jetpack' ) . '</a></p>' .
3728		- '<p><a href="' . self::admin_url( array( 'page' => 'jetpack-debugger' ) ) . '">' . __( 'Jetpack Debugging Center', 'jetpack' ) . '</a></p>'
3729		- );
3730		- }
3731		-
3732		- /**
3733		- * Enqueues the jetpack-icons style.
3734		- *
3735		- * @return void
3736		- */
3737		- public function admin_menu_css() {
3738		- wp_enqueue_style( 'jetpack-icons' );
3739		- }
3740		-
3741		- /**
3742	3949	* Add action links for the Jetpack plugin.
3743	3950	*
3744	3951	* @param array $actions Plugin actions.
3745	3952	*
		@@ -3745,14 +3952,11 @@
3745	3952	*
3746	3953	* @return array
3747	3954	*/
3748	3955	public function plugin_action_links( $actions ) {
3749		- $support_link = ( new Host() )->is_woa_site() ? 'https://wordpress.com/help/contact/' : self::admin_url( 'page=jetpack-debugger' );
3750		-
3751	3956	if ( current_user_can( 'jetpack_manage_modules' ) && ( self::is_connection_ready() \|\| ( new Status() )->is_offline_mode() ) ) {
3752	3957	return array_merge(
3753		- array( 'settings' => sprintf( '<a href="%s">%s</a>', self::admin_url( 'page=jetpack#/settings' ), __( 'Settings', 'jetpack' ) ) ),
3754		- array( 'support' => sprintf( '<a href="%s">%s</a>', $support_link, __( 'Support', 'jetpack' ) ) ),
	3958	+ array( 'settings' => sprintf( '<a href="%s">%s</a>', esc_url( self::admin_url( 'page=jetpack-settings#/settings' ) ), __( 'Settings', 'jetpack' ) ) ),
3755	3959	$actions
3756	3960	);
3757	3961	}
3758	3962
		@@ -3759,53 +3963,8 @@
3759	3963	return $actions;
3760	3964	}
3761	3965
3762	3966	/**
3763		- * Add an activation modal to the plugins page and the main dashboard.
3764		- *
3765		- * @param string $hook The current admin page.
3766		- *
3767		- * @return void
3768		- */
3769		- public function activate_dialog( $hook ) {
3770		- /*
3771		- * We do not need it on other plugin pages,
3772		- * or when Jetpack is already connected.
3773		- */
3774		- if (
3775		- ! in_array( $hook, array( 'plugins.php', 'index.php' ), true )
3776		- \|\| self::is_connection_ready()
3777		- ) {
3778		- return;
3779		- }
3780		-
3781		- // add an activation script that will pick up deactivation actions for the Jetpack plugin.
3782		- Assets::register_script(
3783		- 'jetpack-full-activation-modal-js',
3784		- '_inc/build/activation-modal.js',
3785		- JETPACK__PLUGIN_FILE,
3786		- array(
3787		- 'enqueue' => true,
3788		- 'in_footer' => true,
3789		- 'textdomain' => 'jetpack',
3790		- 'dependencies' => array(
3791		- 'wp-polyfill',
3792		- 'wp-components',
3793		- ),
3794		- )
3795		- );
3796		-
3797		- // Add objects to be passed to the initial state of the app.
3798		- // Use wp_add_inline_script instead of wp_localize_script, see https://core.trac.wordpress.org/ticket/25280.
3799		- wp_add_inline_script( 'jetpack-full-activation-modal-js', 'var Initial_State=JSON.parse(decodeURIComponent("' . rawurlencode( wp_json_encode( Jetpack_Redux_State_Helper::get_minimal_state() ) ) . '"));', 'before' );
3800		-
3801		- // Adds Connection package initial state.
3802		- wp_add_inline_script( 'jetpack-full-activation-modal-js', Connection_Initial_State::render(), 'before' );
3803		-
3804		- add_action( 'admin_notices', array( $this, 'jetpack_plugin_portal_containers' ) );
3805		- }
3806		-
3807		- /**
3808	3967	* Adds the deactivation warning modal for Jetpack.
3809	3968	*
3810	3969	* @param string $hook The current admin page.
3811	3970	*
		@@ -3825,14 +3984,10 @@
3825	3984	'jetpack-plugins-page-js',
3826	3985	'_inc/build/plugins-page.js',
3827	3986	JETPACK__PLUGIN_FILE,
3828	3987	array(
3829		- 'in_footer' => true,
3830		- 'textdomain' => 'jetpack',
3831		- 'dependencies' => array(
3832		- 'wp-polyfill',
3833		- 'wp-components',
3834		- ),
	3988	+ 'in_footer' => true,
	3989	+ 'textdomain' => 'jetpack',
3835	3990	)
3836	3991	);
3837	3992	Assets::enqueue_script( 'jetpack-plugins-page-js' );
3838	3993
		@@ -3837,9 +3992,9 @@
3837	3992	Assets::enqueue_script( 'jetpack-plugins-page-js' );
3838	3993
3839	3994	// Add objects to be passed to the initial state of the app.
3840	3995	// Use wp_add_inline_script instead of wp_localize_script, see https://core.trac.wordpress.org/ticket/25280.
3841		- wp_add_inline_script( 'jetpack-plugins-page-js', 'var Initial_State=JSON.parse(decodeURIComponent("' . rawurlencode( wp_json_encode( Jetpack_Redux_State_Helper::get_minimal_state() ) ) . '"));', 'before' );
	3996	+ wp_add_inline_script( 'jetpack-plugins-page-js', 'var Initial_State=' . wp_json_encode( Jetpack_Redux_State_Helper::get_plugins_page_state(), JSON_UNESCAPED_SLASHES \| JSON_HEX_TAG \| JSON_HEX_AMP ) . ';', 'before' );
3842	3997
3843	3998	add_action( 'admin_footer', array( $this, 'jetpack_plugin_portal_containers' ) );
3844	3999	}
3845	4000	}
		@@ -3888,9 +4043,9 @@
3888	4043	// @todo provide way to go to specific calypso env.
3889	4044	self::get_calypso_host() . 'jetpack/connect'
3890	4045	)
3891	4046	);
3892		- exit;
	4047	+ exit( 0 );
3893	4048	}
3894	4049	}
3895	4050
3896	4051	/*
		@@ -3925,8 +4080,28 @@
3925	4080	* Done!
3926	4081	*/
3927	4082
3928	4083	/**
	4084	+ * Build the user-facing description stored alongside a registration error code.
	4085	+ *
	4086	+ * @since 16.2
	4087	+ *
	4088	+ * @param string $error_code The WP_Error code.
	4089	+ * @param string $message The WP_Error message.
	4090	+ * @return string The description, empty when the message is not user-facing copy.
	4091	+ */
	4092	+ public static function get_registration_error_description( $error_code, $message ) {
	4093	+ // Manager::validate_remote_register_response() does not always put user-facing copy in the
	4094	+ // message slot: wpcom_5??, wpcom_408 and wpcom_bad_response store the HTTP status there,
	4095	+ // and jetpack_id stores the raw response body, which can also overflow the state cookie.
	4096	+ if ( 'jetpack_id' === $error_code \|\| is_numeric( $message ) ) {
	4097	+ return '';
	4098	+ }
	4099	+
	4100	+ return mb_substr( (string) $message, 0, 250 );
	4101	+ }
	4102	+
	4103	+ /**
3929	4104	* Handles the page load events for the Jetpack admin page
3930	4105	*/
3931	4106	public function admin_page_load() {
3932	4107	$error = false;
		@@ -3962,10 +4137,11 @@
3962	4137	$registered = static::connection()->try_registration();
3963	4138	if ( is_wp_error( $registered ) ) {
3964	4139	$error = $registered->get_error_code();
3965	4140	self::state( 'error', $error );
3966		- self::state( 'error', $registered->get_error_message() );
3967	4141
	4142	+ self::state( 'error_description', self::get_registration_error_description( $error, $registered->get_error_message() ) );
	4143	+
3968	4144	/**
3969	4145	* Jetpack registration Error.
3970	4146	*
3971	4147	* @since 7.5.0
		@@ -3989,12 +4165,8 @@
3989	4165	do_action( 'jetpack_connection_register_success', $from );
3990	4166
3991	4167	$url = $this->build_connect_url( true, $redirect, $from );
3992	4168
3993		- if ( ! empty( $_GET['onboarding'] ) ) {
3994		- $url = add_query_arg( 'onboarding', rawurlencode_deep( wp_unslash( $_GET['onboarding'] ) ), $url ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
3995		- }
3996		-
3997	4169	if ( ! empty( $_GET['auth_approved'] ) && 'true' === $_GET['auth_approved'] ) {
3998	4170	$url = add_query_arg( 'auth_approved', 'true', $url );
3999	4171	}
4000	4172
		@@ -3999,9 +4171,9 @@
3999	4171	}
4000	4172
4001	4173	add_filter( 'allowed_redirect_hosts', array( Host::class, 'allow_wpcom_environments' ) );
4002	4174	wp_safe_redirect( $url );
4003		- exit;
	4175	+ exit( 0 );
4004	4176	case 'activate':
4005	4177	if ( ! current_user_can( 'jetpack_activate_modules' ) ) {
4006	4178	$error = 'cheatin';
4007	4179	break;
		@@ -4015,9 +4187,9 @@
4015	4187	self::state( 'error', sprintf( __( 'Could not activate %s', 'jetpack' ), $module ) );
4016	4188	}
4017	4189	// The following two lines will rarely happen, as Jetpack::activate_module normally exits at the end.
4018	4190	wp_safe_redirect( self::admin_url( 'page=jetpack' ) );
4019		- exit;
	4191	+ exit( 0 );
4020	4192	case 'activate_default_modules':
4021	4193	check_admin_referer( 'activate_default_modules' );
4022	4194	self::log( 'activate_default_modules' );
4023	4195	self::restate();
		@@ -4025,9 +4197,9 @@
4025	4197	$max_version = isset( $_GET['max_version'] ) ? sanitize_text_field( wp_unslash( $_GET['max_version'] ) ) : false;
4026	4198	$other_modules = isset( $_GET['other_modules'] ) && is_array( $_GET['other_modules'] ) ? array_map( 'sanitize_text_field', wp_unslash( $_GET['other_modules'] ) ) : array();
4027	4199	self::activate_default_modules( $min_version, $max_version, $other_modules );
4028	4200	wp_safe_redirect( self::admin_url( 'page=jetpack' ) );
4029		- exit;
	4201	+ exit( 0 );
4030	4202	case 'disconnect':
4031	4203	if ( ! current_user_can( 'jetpack_disconnect' ) ) {
4032	4204	$error = 'cheatin';
4033	4205	break;
		@@ -4036,9 +4208,9 @@
4036	4208	check_admin_referer( 'jetpack-disconnect' );
4037	4209	self::log( 'disconnect' );
4038	4210	self::disconnect();
4039	4211	wp_safe_redirect( self::admin_url( 'disconnected=true' ) );
4040		- exit;
	4212	+ exit( 0 );
4041	4213	case 'reconnect':
4042	4214	if ( ! current_user_can( 'jetpack_reconnect' ) ) {
4043	4215	$error = 'cheatin';
4044	4216	break;
		@@ -4049,9 +4221,9 @@
4049	4221	self::disconnect();
4050	4222
4051	4223	add_filter( 'allowed_redirect_hosts', array( Host::class, 'allow_wpcom_environments' ) );
4052	4224	wp_safe_redirect( $this->build_connect_url( true, false, 'reconnect' ) );
4053		- exit;
	4225	+ exit( 0 );
4054	4226	case 'deactivate':
4055	4227	if ( ! current_user_can( 'jetpack_deactivate_modules' ) ) {
4056	4228	$error = 'cheatin';
4057	4229	break;
		@@ -4065,9 +4237,9 @@
4065	4237	self::state( 'message', 'module_deactivated' );
4066	4238	}
4067	4239	self::state( 'module', $modules );
4068	4240	wp_safe_redirect( self::admin_url( 'page=jetpack' ) );
4069		- exit;
	4241	+ exit( 0 );
4070	4242	case 'unlink':
4071	4243	$redirect = isset( $_GET['redirect'] ) ? sanitize_text_field( wp_unslash( $_GET['redirect'] ) ) : '';
4072	4244	check_admin_referer( 'jetpack-unlink' );
4073	4245	self::log( 'unlink' );
		@@ -4077,32 +4249,9 @@
4077	4249	wp_safe_redirect( admin_url() );
4078	4250	} else {
4079	4251	wp_safe_redirect( self::admin_url( array( 'page' => rawurlencode( $redirect ) ) ) );
4080	4252	}
4081		- exit;
4082		- case 'onboard':
4083		- if ( ! current_user_can( 'manage_options' ) ) {
4084		- wp_safe_redirect( self::admin_url( 'page=jetpack' ) );
4085		- } else {
4086		- self::create_onboarding_token();
4087		- $url = $this->build_connect_url( true );
4088		-
4089		- $token = Jetpack_Options::get_option( 'onboarding' );
4090		-
4091		- if ( false !== ( $token ) ) {
4092		- $url = add_query_arg( 'onboarding', $token, $url );
4093		- }
4094		-
4095		- $calypso_env = ( new Host() )->get_calypso_env();
4096		- if ( ! empty( $calypso_env ) ) {
4097		- $url = add_query_arg( 'calypso_env', $calypso_env, $url );
4098		- }
4099		-
4100		- add_filter( 'allowed_redirect_hosts', array( Host::class, 'allow_wpcom_environments' ) );
4101		- wp_safe_redirect( $url );
4102		- exit;
4103		- }
4104		- exit;
	4253	+ exit( 0 );
4105	4254	default:
4106	4255	/**
4107	4256	* Fires when a Jetpack admin page is loaded with an unrecognized parameter.
4108	4257	*
		@@ -4118,9 +4267,10 @@
4118	4267	if ( ! $error ) {
4119	4268	self::activate_new_modules( true );
4120	4269	}
4121	4270
4122		- $message_code = self::state( 'message' );
	4271	+ $activated_manage = false;
	4272	+ $message_code = self::state( 'message' );
4123	4273	if ( self::state( 'optin-manage' ) ) {
4124	4274	$activated_manage = $message_code;
4125	4275	$message_code = 'jetpack-manage';
4126	4276	}
		@@ -4294,17 +4444,19 @@
4294	4444	count( $privacy_checks ),
4295	4445	'%1$s = deactivation URL, %2$s = "Deactivate {list of Jetpack module/feature names}',
4296	4446	'jetpack'
4297	4447	),
4298		- wp_nonce_url(
4299		- self::admin_url(
4300		- array(
4301		- 'page' => 'jetpack',
4302		- 'action' => 'deactivate',
4303		- 'module' => rawurlencode( $module_slugs ),
4304		- )
4305		- ),
4306		- "jetpack_deactivate-$module_slugs"
	4448	+ esc_url(
	4449	+ wp_nonce_url(
	4450	+ self::admin_url(
	4451	+ array(
	4452	+ 'page' => 'jetpack',
	4453	+ 'action' => 'deactivate',
	4454	+ 'module' => rawurlencode( $module_slugs ),
	4455	+ )
	4456	+ ),
	4457	+ "jetpack_deactivate-$module_slugs"
	4458	+ )
4307	4459	),
4308	4460	esc_attr( wp_kses( wp_sprintf( _x( 'Deactivate %l', '%l = list of Jetpack module/feature names', 'jetpack' ), $module_names ), array() ) )
4309	4461	),
4310	4462	array(
		@@ -4322,37 +4474,8 @@
4322	4474	endif;
4323	4475	}
4324	4476
4325	4477	/**
4326		- * We can't always respond to a signed XML-RPC request with a
4327		- * helpful error message. In some circumstances, doing so could
4328		- * leak information.
4329		- *
4330		- * Instead, track that the error occurred via a Jetpack_Option,
4331		- * and send that data back in the heartbeat.
4332		- * All this does is increment a number, but it's enough to find
4333		- * trends.
4334		- *
4335		- * @param WP_Error $xmlrpc_error The error produced during
4336		- * signature validation.
4337		- */
4338		- public function track_xmlrpc_error( $xmlrpc_error ) {
4339		- $code = is_wp_error( $xmlrpc_error )
4340		- ? $xmlrpc_error->get_error_code()
4341		- : 'should-not-happen';
4342		-
4343		- $xmlrpc_errors = Jetpack_Options::get_option( 'xmlrpc_errors', array() );
4344		- if ( isset( $xmlrpc_errors[ $code ] ) && $xmlrpc_errors[ $code ] ) {
4345		- // No need to update the option if we already have
4346		- // this code stored.
4347		- return;
4348		- }
4349		- $xmlrpc_errors[ $code ] = true;
4350		-
4351		- Jetpack_Options::update_option( 'xmlrpc_errors', $xmlrpc_errors, false );
4352		- }
4353		-
4354		- /**
4355	4478	* Initialize the jetpack stats instance only when needed
4356	4479	*
4357	4480	* @return void
4358	4481	*/
		@@ -4475,9 +4598,9 @@
4475	4598	return $this->build_connect_url( $raw, $redirect, $from, true );
4476	4599	}
4477	4600	}
4478	4601
4479		- $url = $this->build_authorize_url( $redirect );
	4602	+ $url = ( new Authorize_Redirect( static::connection() ) )->build_authorize_url( $redirect );
4480	4603	}
4481	4604
4482	4605	if ( $from ) {
4483	4606	$url = add_query_arg( 'from', $from, $url );
		@@ -4502,66 +4625,30 @@
4502	4625	* @param null $deprecated Deprecated since Jetpack 10.9.
4503	4626	*
4504	4627	* @todo Update default value for redirect since the called function expects a string.
4505	4628	*
	4629	+ * @deprecated 13.4
	4630	+ *
4506	4631	* @return mixed\|void
4507	4632	*/
4508	4633	public static function build_authorize_url( $redirect = false, $deprecated = null ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
	4634	+ _deprecated_function( __METHOD__, 'jetpack-13.4', 'Authorize_Redirect::build_authorize_url' );
4509	4635
4510		- add_filter( 'jetpack_connect_request_body', array( __CLASS__, 'filter_connect_request_body' ) );
4511		- add_filter( 'jetpack_connect_redirect_url', array( __CLASS__, 'filter_connect_redirect_url' ) );
4512		-
4513		- $c8n = self::connection();
4514		- $url = $c8n->get_authorization_url( wp_get_current_user(), $redirect );
4515		-
4516		- remove_filter( 'jetpack_connect_request_body', array( __CLASS__, 'filter_connect_request_body' ) );
4517		- remove_filter( 'jetpack_connect_redirect_url', array( __CLASS__, 'filter_connect_redirect_url' ) );
4518		-
4519		- /**
4520		- * Filter the URL used when authorizing a user to a WordPress.com account.
4521		- *
4522		- * @since 8.9.0
4523		- *
4524		- * @param string $url Connection URL.
4525		- */
4526		- return apply_filters( 'jetpack_build_authorize_url', $url );
	4636	+ return ( new Authorize_Redirect( static::connection() ) )->build_authorize_url( $redirect );
4527	4637	}
4528	4638
4529	4639	/**
4530	4640	* Filters the connection URL parameter array.
4531	4641	*
	4642	+ * @deprecated 13.4
	4643	+ *
4532	4644	* @param array $args default URL parameters used by the package.
4533	4645	* @return array the modified URL arguments array.
4534	4646	*/
4535	4647	public static function filter_connect_request_body( $args ) {
4536		- if (
4537		- Constants::is_defined( 'JETPACK__GLOTPRESS_LOCALES_PATH' )
4538		- && include_once Constants::get_constant( 'JETPACK__GLOTPRESS_LOCALES_PATH' )
4539		- ) {
4540		- $gp_locale = GP_Locales::by_field( 'wp_locale', get_locale() );
4541		- $args['locale'] = isset( $gp_locale ) && isset( $gp_locale->slug )
4542		- ? $gp_locale->slug
4543		- : '';
4544		- }
	4648	+ _deprecated_function( __METHOD__, 'jetpack-13.4', 'Authorize_Redirect::filter_connect_request_body' );
4545	4649
4546		- $tracking = new Tracking();
4547		- $tracks_identity = $tracking->tracks_get_identity( $args['state'] );
4548		-
4549		- $args = array_merge(
4550		- $args,
4551		- array(
4552		- '_ui' => $tracks_identity['_ui'],
4553		- '_ut' => $tracks_identity['_ut'],
4554		- )
4555		- );
4556		-
4557		- $calypso_env = ( new Host() )->get_calypso_env();
4558		-
4559		- if ( ! empty( $calypso_env ) ) {
4560		- $args['calypso_env'] = $calypso_env;
4561		- }
4562		-
4563		- return $args;
	4650	+ return Authorize_Redirect::filter_connect_request_body( $args );
4564	4651	}
4565	4652
4566	4653	/**
4567	4654	* Filters the `jetpack/v4/connection/data` API response of the Connection package in order to
		@@ -4598,41 +4685,19 @@
4598	4685	return $current_user_connection_data;
4599	4686	}
4600	4687
4601	4688	/**
4602		- * Filters the URL that will process the connection data. It can be different from the URL
4603		- * that we send the user to after everything is done.
4604		- *
4605		- * @param String $processing_url the default redirect URL used by the package.
4606		- * @return String the modified URL.
4607		- *
4608		- * @deprecated since Jetpack 9.5.0
4609		- */
4610		- public static function filter_connect_processing_url( $processing_url ) {
4611		- _deprecated_function( __METHOD__, 'jetpack-9.5' );
4612		-
4613		- $processing_url = admin_url( 'admin.php?page=jetpack' ); // Making PHPCS happy.
4614		- return $processing_url;
4615		- }
4616		-
4617		- /**
4618	4689	* Filters the redirection URL that is used for connect requests. The redirect
4619	4690	* URL should return the user back to the Jetpack console.
4620	4691	*
	4692	+ * @deprecated 13.4
	4693	+ *
4621	4694	* @param String $redirect the default redirect URL used by the package.
4622	4695	* @return String the modified URL.
4623	4696	*/
4624	4697	public static function filter_connect_redirect_url( $redirect ) {
4625		- $jetpack_admin_page = esc_url_raw( admin_url( 'admin.php?page=jetpack' ) );
4626		- $redirect = $redirect
4627		- ? wp_validate_redirect( esc_url_raw( $redirect ), $jetpack_admin_page )
4628		- : $jetpack_admin_page;
4629		-
4630		- if ( isset( $_REQUEST['is_multisite'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- not making a site change here.
4631		- $redirect = Jetpack_Network::init()->get_url( 'network_admin_page' );
4632		- }
4633		-
4634		- return $redirect;
	4698	+ _deprecated_function( __METHOD__, 'jetpack-13.4', 'Authorize_Redirect::filter_connect_redirect_url' );
	4699	+ return Authorize_Redirect::filter_connect_redirect_url( $redirect );
4635	4700	}
4636	4701
4637	4702	/**
4638	4703	* This action fires at the beginning of the Manager::authorize method.
		@@ -4696,11 +4761,8 @@
4696	4761	*
4697	4762	* @param array $data The request data.
4698	4763	*/
4699	4764	public static function authorize_ending_authorized( $data ) {
4700		- // If this site has been through the Jetpack Onboarding flow, delete the onboarding token.
4701		- self::invalidate_onboarding_token();
4702		-
4703	4765	// If redirect_uri is SSO, ensure SSO module is enabled.
4704	4766	parse_str( wp_parse_url( $data['redirect_uri'], PHP_URL_QUERY ), $redirect_options );
4705	4767
4706	4768	/** This filter is documented in class.jetpack-cli.php */
		@@ -4824,13 +4886,9 @@
4824	4886	*
4825	4887	* @return int 0 if the same sort or (+/-) to indicate which is greater.
4826	4888	*/
4827	4889	public static function sort_modules( $a, $b ) {
4828		- if ( $a['sort'] === $b['sort'] ) {
4829		- return 0;
4830		- }
4831		-
4832		- return ( $a['sort'] < $b['sort'] ) ? -1 : 1;
	4890	+ return $a['sort'] <=> $b['sort'];
4833	4891	}
4834	4892
4835	4893	/**
4836	4894	* Recheck SSL status for use via an AJAX call.
		@@ -4844,10 +4902,12 @@
4844	4902	$result = self::permit_ssl( true );
4845	4903	wp_send_json(
4846	4904	array(
4847	4905	'enabled' => $result,
4848		- 'message' => get_transient( 'jetpack_https_test_message' ),
4849		- )
	4906	+ 'message' => self::get_ssl_test_message(),
	4907	+ ),
	4908	+ null, // @phan-suppress-current-line PhanTypeMismatchArgumentProbablyReal -- It takes null, but its phpdoc only says int.
	4909	+ JSON_UNESCAPED_SLASHES
4850	4910	);
4851	4911	}
4852	4912
4853	4913	/* Client API */
		@@ -4854,8 +4914,10 @@
4854	4914
4855	4915	/**
4856	4916	* Verify the onboarding token.
4857	4917	*
	4918	+ * @deprecated since 13.9
	4919	+ *
4858	4920	* @param array $token_data Token data.
4859	4921	* @param string $token Token value.
4860	4922	* @param string $request_data JSON-encoded request data.
4861	4923	*
		@@ -4861,8 +4923,9 @@
4861	4923	*
4862	4924	* @return mixed
4863	4925	*/
4864	4926	public static function verify_onboarding_token( $token_data, $token, $request_data ) {
	4927	+ _deprecated_function( __METHOD__, '13.9' );
4865	4928	// Default to a blog token.
4866	4929	$token_type = 'blog';
4867	4930
4868	4931	// Let's see if this is onboarding. In such case, use user token type and the provided user id.
		@@ -4890,9 +4953,9 @@
4890	4953	$jp_user = get_user_by( 'email', $jpo_user );
4891	4954	if ( is_a( $jp_user, 'WP_User' ) ) {
4892	4955	wp_set_current_user( $jp_user->ID );
4893	4956	$user_can = is_multisite()
4894		- ? current_user_can_for_blog( get_current_blog_id(), 'manage_options' )
	4957	+ ? current_user_can_for_site( get_current_blog_id(), 'manage_options' )
4895	4958	: current_user_can( 'manage_options' );
4896	4959	if ( $user_can ) {
4897	4960	$token_type = 'user';
4898	4961	$token->external_user_id = $jp_user->ID;
		@@ -4909,11 +4972,13 @@
4909	4972
4910	4973	/**
4911	4974	* Create a random secret for validating onboarding payload
4912	4975	*
	4976	+ * @deprecated since 13.9
4913	4977	* @return string Secret token
4914	4978	*/
4915	4979	public static function create_onboarding_token() {
	4980	+ _deprecated_function( __METHOD__, '13.9' );
4916	4981	$token = Jetpack_Options::get_option( 'onboarding' );
4917	4982	if ( false === ( $token ) ) {
4918	4983	$token = wp_generate_password( 32, false );
4919	4984	Jetpack_Options::update_option( 'onboarding', $token );
		@@ -4924,11 +4989,13 @@
4924	4989
4925	4990	/**
4926	4991	* Remove the onboarding token
4927	4992	*
	4993	+ * @deprecated since 13.9
4928	4994	* @return bool True on success, false on failure
4929	4995	*/
4930	4996	public static function invalidate_onboarding_token() {
	4997	+ _deprecated_function( __METHOD__, '13.9' );
4931	4998	return Jetpack_Options::delete_option( 'onboarding' );
4932	4999	}
4933	5000
4934	5001	/**
		@@ -4933,8 +5000,10 @@
4933	5000
4934	5001	/**
4935	5002	* Validate an onboarding token for a specific action
4936	5003	*
	5004	+ * @deprecated since 13.9
	5005	+ *
4937	5006	* @param string $token Onboarding token.
4938	5007	* @param string $action Action name.
4939	5008	*
4940	5009	* @return boolean True if token/action pair is accepted, false if not
		@@ -4939,8 +5008,9 @@
4939	5008	*
4940	5009	* @return boolean True if token/action pair is accepted, false if not
4941	5010	*/
4942	5011	public static function validate_onboarding_token_action( $token, $action ) {
	5012	+ _deprecated_function( __METHOD__, '13.9' );
4943	5013	// Compare tokens, bail if tokens do not match.
4944	5014	if ( ! hash_equals( $token, Jetpack_Options::get_option( 'onboarding' ) ) ) {
4945	5015	return false;
4946	5016	}
		@@ -4966,39 +5036,41 @@
4966	5036	* @return boolean
4967	5037	* @since 2.3.3
4968	5038	*/
4969	5039	public static function permit_ssl( $force_recheck = false ) {
4970		- // Do some fancy tests to see if ssl is being supported.
4971		- if ( ! $force_recheck ) {
4972		- $ssl = get_transient( 'jetpack_https_test' );
	5040	+ if ( ! method_exists( Heartbeat::class, 'permit_ssl' ) ) {
	5041	+ // Skip the SSL-fail notice when the check cannot run.
	5042	+ return true;
4973	5043	}
4974	5044
4975		- if ( $force_recheck \|\| false === $ssl ) {
4976		- $message = '';
4977		- if ( 'https' !== substr( JETPACK__API_BASE, 0, 5 ) ) {
4978		- $ssl = 0;
4979		- } else {
4980		- $ssl = 1;
	5045	+ return Heartbeat::permit_ssl( $force_recheck );
	5046	+ }
4981	5047
4982		- if ( ! wp_http_supports( array( 'ssl' => true ) ) ) {
4983		- $ssl = 0;
4984		- $message = __( 'WordPress reports no SSL support', 'jetpack' );
4985		- } else {
4986		- $response = wp_remote_get( JETPACK__API_BASE . 'test/1/' );
4987		- if ( is_wp_error( $response ) ) {
4988		- $ssl = 0;
4989		- $message = __( 'WordPress reports no SSL support', 'jetpack' );
4990		- } elseif ( 'OK' !== wp_remote_retrieve_body( $response ) ) {
4991		- $ssl = 0;
4992		- $message = __( 'Response was not OK: ', 'jetpack' ) . wp_remote_retrieve_body( $response );
4993		- }
4994		- }
4995		- }
4996		- set_transient( 'jetpack_https_test', $ssl, DAY_IN_SECONDS );
4997		- set_transient( 'jetpack_https_test_message', $message, DAY_IN_SECONDS );
	5048	+ /**
	5049	+ * Returns a localized message describing the last SSL connectivity failure, if any.
	5050	+ *
	5051	+ * The Connection package's canonical SSL check stores a neutral reason code; this maps it to
	5052	+ * a translated, `jetpack`-domain message for display in the admin notice and AJAX recheck.
	5053	+ *
	5054	+ * @since 16.1
	5055	+ *
	5056	+ * @return string The localized message, or an empty string when there is no failure.
	5057	+ */
	5058	+ public static function get_ssl_test_message() {
	5059	+ if ( ! method_exists( Heartbeat::class, 'get_ssl_test_error' ) ) {
	5060	+ return '';
4998	5061	}
4999	5062
5000		- return (bool) $ssl;
	5063	+ $error = Heartbeat::get_ssl_test_error();
	5064	+
	5065	+ switch ( $error['code'] ) {
	5066	+ case 'no_ssl_support':
	5067	+ return __( 'WordPress reports no SSL support', 'jetpack' );
	5068	+ case 'bad_response':
	5069	+ return __( 'Response was not OK: ', 'jetpack' ) . $error['detail'];
	5070	+ default:
	5071	+ return '';
	5072	+ }
5001	5073	}
5002	5074
5003	5075	/**
5004	5076	* Displays an admin_notice, alerting the user that outbound SSL isn't working.
		@@ -5017,9 +5089,9 @@
5017	5089	<p><?php esc_html_e( 'Your site could not connect to WordPress.com via HTTPS. This could be due to any number of reasons, including faulty SSL certificates, misconfigured or missing SSL libraries, or network issues.', 'jetpack' ); ?></p>
5018	5090	<p>
5019	5091	<?php esc_html_e( 'Jetpack will re-test for HTTPS support once a day, but you can click here to try again immediately: ', 'jetpack' ); ?>
5020	5092	<a href="#" id="jetpack-recheck-ssl-button"><?php esc_html_e( 'Try again', 'jetpack' ); ?></a>
5021		- <span id="jetpack-recheck-ssl-output"><?php echo esc_html( get_transient( 'jetpack_https_test_message' ) ); ?></span>
	5093	+ <span id="jetpack-recheck-ssl-output"><?php echo esc_html( self::get_ssl_test_message() ); ?></span>
5022	5094	</p>
5023	5095	<p>
5024	5096	<?php
5025	5097	printf(
		@@ -5038,18 +5110,18 @@
5038	5110	<script type="text/javascript">
5039	5111	jQuery( document ).ready( function( $ ) {
5040	5112	$( '#jetpack-recheck-ssl-button' ).click( function( e ) {
5041	5113	var $this = $( this );
5042		- $this.html( <?php echo wp_json_encode( __( 'Checking', 'jetpack' ) ); ?> );
	5114	+ $this.html( <?php echo wp_json_encode( esc_html__( 'Checking', 'jetpack' ), JSON_UNESCAPED_SLASHES \| JSON_HEX_TAG \| JSON_HEX_AMP ); ?> );
5043	5115	$( '#jetpack-recheck-ssl-output' ).html( '' );
5044	5116	e.preventDefault();
5045		- var data = { action: 'jetpack-recheck-ssl', 'ajax-nonce': <?php echo wp_json_encode( $ajax_nonce ); ?> };
	5117	+ var data = { action: 'jetpack-recheck-ssl', 'ajax-nonce': <?php echo wp_json_encode( $ajax_nonce, JSON_UNESCAPED_SLASHES \| JSON_HEX_TAG \| JSON_HEX_AMP ); ?> };
5046	5118	$.post( ajaxurl, data )
5047	5119	.done( function( response ) {
5048	5120	if ( response.enabled ) {
5049	5121	$( '#jetpack-ssl-warning' ).hide();
5050	5122	} else {
5051		- this.html( <?php echo wp_json_encode( __( 'Try again', 'jetpack' ) ); ?> );
	5123	+ this.html( <?php echo wp_json_encode( esc_html__( 'Try again', 'jetpack' ), JSON_UNESCAPED_SLASHES \| JSON_HEX_TAG \| JSON_HEX_AMP ); ?> );
5052	5124	$( '#jetpack-recheck-ssl-output' ).html( 'SSL Failed: ' + response.message );
5053	5125	}
5054	5126	}.bind( $this ) );
5055	5127	} );
		@@ -5075,26 +5147,8 @@
5075	5147	return $jetpack->connection_manager;
5076	5148	}
5077	5149
5078	5150	/**
5079		- * Creates two secret tokens and the end of life timestamp for them.
5080		- *
5081		- * Note these tokens are unique per call, NOT static per site for connecting.
5082		- *
5083		- * @deprecated 9.5 Use Automattic\Jetpack\Connection\Secrets->generate() instead.
5084		- *
5085		- * @since 2.6
5086		- * @param String $action The action name.
5087		- * @param Integer $user_id The user identifier.
5088		- * @param Integer $exp Expiration time in seconds.
5089		- * @return array
5090		- */
5091		- public static function generate_secrets( $action, $user_id = false, $exp = 600 ) {
5092		- _deprecated_function( __METHOD__, 'jetpack-9.5', 'Automattic\\Jetpack\\Connection\\Secrets->generate' );
5093		- return self::connection()->generate_secrets( $action, $user_id, $exp );
5094		- }
5095		-
5096		- /**
5097	5151	* Get verification secrets.
5098	5152	*
5099	5153	* @param string $action Action name.
5100	5154	* @param int $user_id User ID.
		@@ -5115,35 +5169,8 @@
5115	5169	return $secrets;
5116	5170	}
5117	5171
5118	5172	/**
5119		- * Register a connection.
5120		- *
5121		- * @deprecated Jetpack 9.7.0
5122		- * @see Automattic\Jetpack\Connection\Manager::try_registration()
5123		- *
5124		- * @return bool\|WP_Error
5125		- */
5126		- public static function register() {
5127		- _deprecated_function( __METHOD__, 'jetpack-9.7', 'Automattic\\Jetpack\\Connection\\Manager::try_registration' );
5128		- return static::connection()->try_registration( false );
5129		- }
5130		-
5131		- /**
5132		- * Filters the registration request body to include tracking properties.
5133		- *
5134		- * @deprecated Jetpack 9.7.0
5135		- * @see Automattic\Jetpack\Connection\Utils::filter_register_request_body()
5136		- *
5137		- * @param array $properties Token request properties.
5138		- * @return array amended properties.
5139		- */
5140		- public static function filter_register_request_body( $properties ) {
5141		- _deprecated_function( __METHOD__, 'jetpack-9.7', 'Automattic\\Jetpack\\Connection\\Utils::filter_register_request_body' );
5142		- return Connection_Utils::filter_register_request_body( $properties );
5143		- }
5144		-
5145		- /**
5146	5173	* Filters the token request body to include tracking properties.
5147	5174	*
5148	5175	* @param array $properties Token request properties.
5149	5176	*
		@@ -5164,9 +5191,9 @@
5164	5191
5165	5192	/**
5166	5193	* If the db version is showing something other that what we've got now, bump it to current.
5167	5194	*
5168		- * @return bool: True if the option was incorrect and updated, false if nothing happened.
	5195	+ * @return bool True if the option was incorrect and updated, false if nothing happened.
5169	5196	*/
5170	5197	public static function maybe_set_version_option() {
5171	5198	list( $version ) = explode( ':', Jetpack_Options::get_option( 'version' ) );
5172	5199	if ( JETPACK__VERSION !== $version ) {
		@@ -5184,21 +5211,8 @@
5184	5211
5185	5212	/* Client Server API */
5186	5213
5187	5214	/**
5188		- * Loads the Jetpack XML-RPC client.
5189		- * No longer necessary, as the XML-RPC client will be automagically loaded.
5190		- *
5191		- * Note: we cannot remove this function yet as it is used in this plugin:
5192		- * https://wordpress.org/plugins/jetpack-subscription-form/
5193		- *
5194		- * @deprecated since 7.7.0
5195		- */
5196		- public static function load_xml_rpc_client() {
5197		- _deprecated_function( __METHOD__, 'jetpack-7.7' );
5198		- }
5199		-
5200		- /**
5201	5215	* State is passed via cookies from one request to the next, but never to subsequent requests.
5202	5216	* SET: state( $key, $value );
5203	5217	* GET: $value = state( $key );
5204	5218	*
		@@ -5272,20 +5286,8 @@
5272	5286
5273	5287	self::state( 'privacy_checks', $privacy_checks );
5274	5288	}
5275	5289
5276		- /**
5277		- * Serve a WordPress.com static resource via a randomized wp.com subdomain.
5278		- *
5279		- * @deprecated 9.3.0 Use Assets::staticize_subdomain.
5280		- *
5281		- * @param string $url WordPress.com static resource URL.
5282		- */
5283		- public static function staticize_subdomain( $url ) {
5284		- _deprecated_function( __METHOD__, 'jetpack-9.3.0', 'Automattic\Jetpack\Assets::staticize_subdomain' );
5285		- return Assets::staticize_subdomain( $url );
5286		- }
5287		-
5288	5290	/* JSON API Authorization */
5289	5291
5290	5292	/**
5291	5293	* Handles the login action for Authorizing the JSON API
		@@ -5290,13 +5292,14 @@
5290	5292	/**
5291	5293	* Handles the login action for Authorizing the JSON API
5292	5294	*/
5293	5295	public function login_form_json_api_authorization() {
5294		- $this->verify_json_api_authorization_request();
	5296	+ $authorize_json_api = new Authorize_Json_Api();
	5297	+ $authorize_json_api->verify_json_api_authorization_request();
5295	5298
5296		- add_action( 'wp_login', array( $this, 'store_json_api_authorization_token' ), 10, 2 );
	5299	+ add_action( 'wp_login', array( $authorize_json_api, 'store_json_api_authorization_token' ), 10, 2 );
5297	5300
5298		- add_action( 'login_message', array( $this, 'login_message_json_api_authorization' ) );
	5301	+ add_action( 'login_message', array( $authorize_json_api, 'login_message_json_api_authorization' ) );
5299	5302	add_action( 'login_form', array( $this, 'preserve_action_in_login_form_for_json_api_authorization' ) );
5300	5303	add_filter( 'site_url', array( $this, 'post_login_form_to_signed_url' ), 10, 3 );
5301	5304	}
5302	5305
		@@ -5334,16 +5337,17 @@
5334	5337
5335	5338	/**
5336	5339	* If someone logs in to approve API access, store the Access Code in usermeta.
5337	5340	*
	5341	+ * @deprecated 13.4
	5342	+ *
5338	5343	* @param string $user_login Unused.
5339	5344	* @param WP_User $user User logged in.
5340	5345	*/
5341	5346	public function store_json_api_authorization_token( $user_login, $user ) {
5342		- add_filter( 'login_redirect', array( $this, 'add_token_to_login_redirect_json_api_authorization' ), 10, 3 );
5343		- add_filter( 'allowed_redirect_hosts', array( $this, 'allow_wpcom_public_api_domain' ) );
5344		- $token = wp_generate_password( 32, false );
5345		- update_user_meta( $user->ID, 'jetpack_json_api_' . $this->json_api_authorization_request['client_id'], $token );
	5347	+ _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Connection\\Authorize_Json_Api::store_json_api_authorization_token' );
	5348	+
	5349	+ return ( new Authorize_Json_Api() )->store_json_api_authorization_token( $user_login, $user );
5346	5350	}
5347	5351
5348	5352	/**
5349	5353	* Add public-api.wordpress.com to the safe redirect allowed list - only added when someone allows API access.
		@@ -5349,23 +5353,29 @@
5349	5353	* Add public-api.wordpress.com to the safe redirect allowed list - only added when someone allows API access.
5350	5354	*
5351	5355	* To be used with a filter of allowed domains for a redirect.
5352	5356	*
	5357	+ * @deprecated 13.4
	5358	+ *
5353	5359	* @param array $domains Allowed WP.com Environments.
5354	5360	*/
5355	5361	public function allow_wpcom_public_api_domain( $domains ) {
5356		- $domains[] = 'public-api.wordpress.com';
5357		- return $domains;
	5362	+ _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Status\\Host::allow_wpcom_public_api_domain' );
	5363	+
	5364	+ return Host::allow_wpcom_public_api_domain( $domains );
5358	5365	}
5359	5366
5360	5367	/**
5361	5368	* Check if the redirect is encoded.
5362	5369	*
	5370	+ * @deprecated 13.4
	5371	+ *
5363	5372	* @param string $redirect_url Redirect URL.
5364	5373	*
5365	5374	* @return bool If redirect has been encoded.
5366	5375	*/
5367	5376	public static function is_redirect_encoded( $redirect_url ) {
	5377	+ _deprecated_function( __METHOD__, 'jetpack-13.4' );
5368	5378	return preg_match( '/https?%3A%2F%2F/i', $redirect_url ) > 0;
5369	5379	}
5370	5380
5371	5381	/**
		@@ -5383,8 +5393,10 @@
5383	5393
5384	5394	/**
5385	5395	* Add the Access Code details to the public-api.wordpress.com redirect.
5386	5396	*
	5397	+ * @deprecated 13.4
	5398	+ *
5387	5399	* @param string $redirect_to URL.
5388	5400	* @param string $original_redirect_to URL.
5389	5401	* @param WP_User $user WP_User for the redirect.
5390	5402	*
		@@ -5390,23 +5402,18 @@
5390	5402	*
5391	5403	* @return string
5392	5404	*/
5393	5405	public function add_token_to_login_redirect_json_api_authorization( $redirect_to, $original_redirect_to, $user ) {
5394		- return add_query_arg(
5395		- urlencode_deep(
5396		- array(
5397		- 'jetpack-code' => get_user_meta( $user->ID, 'jetpack_json_api_' . $this->json_api_authorization_request['client_id'], true ),
5398		- 'jetpack-user-id' => (int) $user->ID,
5399		- 'jetpack-state' => $this->json_api_authorization_request['state'],
5400		- )
5401		- ),
5402		- $redirect_to
5403		- );
	5406	+ _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Connection\\Authorize_Json_Api::add_token_to_login_redirect_json_api_authorization' );
	5407	+
	5408	+ return ( new Authorize_Json_Api() )->add_token_to_login_redirect_json_api_authorization( $redirect_to, $original_redirect_to, $user );
5404	5409	}
5405	5410
5406	5411	/**
5407	5412	* Verifies the request by checking the signature
5408	5413	*
	5414	+ * @deprecated 13.4
	5415	+ *
5409	5416	* @since 4.6.0 Method was updated to use `$_REQUEST` instead of `$_GET` and `$_POST`. Method also updated to allow
5410	5417	* passing in an `$environment` argument that overrides `$_REQUEST`. This was useful for integrating with SSO.
5411	5418	*
5412	5419	* @param null\|array $environment Value to override $_REQUEST.
		@@ -5411,194 +5418,24 @@
5411	5418	*
5412	5419	* @param null\|array $environment Value to override $_REQUEST.
5413	5420	*/
5414	5421	public function verify_json_api_authorization_request( $environment = null ) {
5415		- $environment = $environment === null
5416		- ? $_REQUEST // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- nonce verification handled later in function.
5417		- : $environment;
	5422	+ _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Connection\\Authorize_Json_Api::verify_json_api_authorization_request' );
5418	5423
5419		- list( $env_token,, $env_user_id ) = explode( ':', $environment['token'] );
5420		- $token = ( new Tokens() )->get_access_token( $env_user_id, $env_token );
5421		- if ( ! $token \|\| empty( $token->secret ) ) {
5422		- wp_die( esc_html__( 'You must connect your Jetpack plugin to WordPress.com to use this feature.', 'jetpack' ) );
5423		- }
5424		-
5425		- $die_error = __( 'Someone may be trying to trick you into giving them access to your site. Or it could be you just encountered a bug :). Either way, please close this window.', 'jetpack' );
5426		-
5427		- // Host has encoded the request URL, probably as a result of a bad http => https redirect.
5428		- if ( self::is_redirect_encoded( esc_url_raw( wp_unslash( $_GET['redirect_to'] ) ) ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput.InputNotValidated -- no site changes, we're erroring out.
5429		- /**
5430		- * Jetpack authorisation request Error.
5431		- *
5432		- * @since 7.5.0
5433		- */
5434		- do_action( 'jetpack_verify_api_authorization_request_error_double_encode' );
5435		- $die_error = sprintf(
5436		- /* translators: %s is a URL */
5437		- __( 'Your site is incorrectly double-encoding redirects from http to https. This is preventing Jetpack from authenticating your connection. Please visit our <a href="%s">support page</a> for details about how to resolve this.', 'jetpack' ),
5438		- Redirect::get_url( 'jetpack-support-double-encoding' )
5439		- );
5440		- }
5441		-
5442		- $jetpack_signature = new Jetpack_Signature( $token->secret, (int) Jetpack_Options::get_option( 'time_diff' ) );
5443		-
5444		- if ( isset( $environment['jetpack_json_api_original_query'] ) ) {
5445		- $signature = $jetpack_signature->sign_request(
5446		- $environment['token'],
5447		- $environment['timestamp'],
5448		- $environment['nonce'],
5449		- '',
5450		- 'GET',
5451		- $environment['jetpack_json_api_original_query'],
5452		- null,
5453		- true
5454		- );
5455		- } else {
5456		- $signature = $jetpack_signature->sign_current_request(
5457		- array(
5458		- 'body' => null,
5459		- 'method' => 'GET',
5460		- )
5461		- );
5462		- }
5463		-
5464		- if ( ! $signature ) {
5465		- wp_die(
5466		- wp_kses(
5467		- $die_error,
5468		- array(
5469		- 'a' => array(
5470		- 'href' => array(),
5471		- ),
5472		- )
5473		- )
5474		- );
5475		- } elseif ( is_wp_error( $signature ) ) {
5476		- wp_die(
5477		- wp_kses(
5478		- $die_error,
5479		- array(
5480		- 'a' => array(
5481		- 'href' => array(),
5482		- ),
5483		- )
5484		- )
5485		- );
5486		- } elseif ( ! hash_equals( $signature, $environment['signature'] ) ) {
5487		- if ( is_ssl() ) {
5488		- // If we signed an HTTP request on the Jetpack Servers, but got redirected to HTTPS by the local blog, check the HTTP signature as well.
5489		- $signature = $jetpack_signature->sign_current_request(
5490		- array(
5491		- 'scheme' => 'http',
5492		- 'body' => null,
5493		- 'method' => 'GET',
5494		- )
5495		- );
5496		- if ( ! $signature \|\| is_wp_error( $signature ) \|\| ! hash_equals( $signature, $environment['signature'] ) ) {
5497		- wp_die(
5498		- wp_kses(
5499		- $die_error,
5500		- array(
5501		- 'a' => array(
5502		- 'href' => array(),
5503		- ),
5504		- )
5505		- )
5506		- );
5507		- }
5508		- } else {
5509		- wp_die(
5510		- wp_kses(
5511		- $die_error,
5512		- array(
5513		- 'a' => array(
5514		- 'href' => array(),
5515		- ),
5516		- )
5517		- )
5518		- );
5519		- }
5520		- }
5521		-
5522		- $timestamp = (int) $environment['timestamp'];
5523		- $nonce = stripslashes( (string) $environment['nonce'] );
5524		-
5525		- if ( ! $this->connection_manager ) {
5526		- $this->connection_manager = new Connection_Manager();
5527		- }
5528		-
5529		- if ( ! ( new Nonce_Handler() )->add( $timestamp, $nonce ) ) {
5530		- // De-nonce the nonce, at least for 5 minutes.
5531		- // We have to reuse this nonce at least once (used the first time when the initial request is made, used a second time when the login form is POSTed).
5532		- $old_nonce_time = get_option( "jetpack_nonce_{$timestamp}_{$nonce}" );
5533		- if ( $old_nonce_time < time() - 300 ) {
5534		- wp_die( esc_html__( 'The authorization process expired. Please go back and try again.', 'jetpack' ) );
5535		- }
5536		- }
5537		-
5538		- $data = json_decode( base64_decode( stripslashes( $environment['data'] ) ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode
5539		- $data_filters = array(
5540		- 'state' => 'opaque',
5541		- 'client_id' => 'int',
5542		- 'client_title' => 'string',
5543		- 'client_image' => 'url',
5544		- );
5545		-
5546		- foreach ( $data_filters as $key => $sanitation ) {
5547		- if ( ! isset( $data->$key ) ) {
5548		- wp_die(
5549		- wp_kses(
5550		- $die_error,
5551		- array(
5552		- 'a' => array(
5553		- 'href' => array(),
5554		- ),
5555		- )
5556		- )
5557		- );
5558		- }
5559		-
5560		- switch ( $sanitation ) {
5561		- case 'int':
5562		- $this->json_api_authorization_request[ $key ] = (int) $data->$key;
5563		- break;
5564		- case 'opaque':
5565		- $this->json_api_authorization_request[ $key ] = (string) $data->$key;
5566		- break;
5567		- case 'string':
5568		- $this->json_api_authorization_request[ $key ] = wp_kses( (string) $data->$key, array() );
5569		- break;
5570		- case 'url':
5571		- $this->json_api_authorization_request[ $key ] = esc_url_raw( (string) $data->$key );
5572		- break;
5573		- }
5574		- }
5575		-
5576		- if ( empty( $this->json_api_authorization_request['client_id'] ) ) {
5577		- wp_die(
5578		- wp_kses(
5579		- $die_error,
5580		- array(
5581		- 'a' => array(
5582		- 'href' => array(),
5583		- ),
5584		- )
5585		- )
5586		- );
5587		- }
	5424	+ return ( new Authorize_Json_Api() )->verify_json_api_authorization_request( $environment );
5588	5425	}
5589	5426
5590	5427	/**
5591	5428	* HTML for the JSON API authorization notice.
5592	5429	*
	5430	+ * @deprecated 13.4
	5431	+ *
5593	5432	* @return string
5594	5433	*/
5595	5434	public function login_message_json_api_authorization() {
5596		- return '<p class="message">' . sprintf(
5597		- /* translators: Name/image of the client requesting authorization */
5598		- esc_html__( '%s wants to access your site’s data. Log in to authorize that access.', 'jetpack' ),
5599		- '<strong>' . esc_html( $this->json_api_authorization_request['client_title'] ) . '</strong>'
5600		- ) . '<img src="' . esc_url( $this->json_api_authorization_request['client_image'] ) . '" /></p>';
	5435	+ _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Connection\\Authorize_Json_Api::login_message_json_api_authorization' );
	5436	+
	5437	+ return ( new Authorize_Json_Api() )->login_message_json_api_authorization();
5601	5438	}
5602	5439
5603	5440	/**
5604	5441	* Get $content_width, but with a <s>twist</s> filter.
		@@ -5642,32 +5479,23 @@
5642	5479
5643	5480	/**
5644	5481	* Checks if the site is currently in an identity crisis.
5645	5482	*
	5483	+ * Now delegates to the Connection package so this matches what the heartbeat itself reports.
	5484	+ * Note the package guards on `Connection\Manager::is_connected()` where this used to guard on
	5485	+ * `Jetpack::is_connection_ready()`, so the `jetpack_is_connection_ready` filter no longer applies.
	5486	+ *
	5487	+ * @deprecated 16.2
	5488	+ *
5646	5489	* @return array\|bool Array of options that are in a crisis, or false if everything is OK.
5647	5490	*/
5648	5491	public static function check_identity_crisis() {
5649		- if ( ! self::is_connection_ready() \|\| ( new Status() )->is_offline_mode() \|\| ! Identity_Crisis::validate_sync_error_idc_option() ) {
5650		- return false;
5651		- }
	5492	+ _deprecated_function( __METHOD__, 'jetpack-16.2', 'Automattic\\Jetpack\\Identity_Crisis::check_identity_crisis' );
5652	5493
5653		- return Jetpack_Options::get_option( 'sync_error_idc' );
	5494	+ return Identity_Crisis::check_identity_crisis();
5654	5495	}
5655	5496
5656	5497	/**
5657		- * Checks whether the sync_error_idc option is valid or not, and if not, will do cleanup.
5658		- *
5659		- * @since 4.4.0
5660		- * @since 5.4.0 Do not call get_sync_error_idc_option() unless site is in IDC
5661		- *
5662		- * @return bool
5663		- */
5664		- public static function validate_sync_error_idc_option() {
5665		- _deprecated_function( __METHOD__, 'jetpack-9.8', '\\Automattic\\Jetpack\\Identity_Crisis::validate_sync_error_idc_option' );
5666		- return Identity_Crisis::validate_sync_error_idc_option();
5667		- }
5668		-
5669		- /**
5670	5498	* Normalizes a url by doing three things:
5671	5499	* - Strips protocol
5672	5500	* - Strips www
5673	5501	* - Adds a trailing slash
		@@ -5688,35 +5516,8 @@
5688	5516	return $url;
5689	5517	}
5690	5518
5691	5519	/**
5692		- * Gets the value that is to be saved in the jetpack_sync_error_idc option.
5693		- *
5694		- * @since 4.4.0
5695		- * @since 5.4.0 Add transient since home/siteurl retrieved directly from DB
5696		- * @deprecated 9.8.0 Use \\Automattic\\Jetpack\\Identity_Crisis::get_sync_error_idc_option
5697		- *
5698		- * @param array $response HTTP response.
5699		- * @return array Array of the local urls, wpcom urls, and error code
5700		- */
5701		- public static function get_sync_error_idc_option( $response = array() ) {
5702		- _deprecated_function( __METHOD__, 'jetpack-9.8', '\\Automattic\\Jetpack\\Identity_Crisis::get_sync_error_idc_option' );
5703		- return Identity_Crisis::get_sync_error_idc_option( $response );
5704		- }
5705		-
5706		- /**
5707		- * Returns the value of the jetpack_sync_idc_optin filter, or constant.
5708		- * If set to true, the site will be put into staging mode.
5709		- *
5710		- * @since 4.3.2
5711		- * @return bool
5712		- */
5713		- public static function sync_idc_optin() {
5714		- _deprecated_function( __METHOD__, 'jetpack-9.8', '\\Automattic\\Jetpack\\Identity_Crisis::sync_idc_optin' );
5715		- return Identity_Crisis::sync_idc_optin();
5716		- }
5717		-
5718		- /**
5719	5520	* Maybe Use a .min.css stylesheet, maybe not.
5720	5521	*
5721	5522	* Hooks onto `plugins_url` filter at priority 1, and accepts all 3 args.
5722	5523	*
		@@ -5737,9 +5538,9 @@
5737	5538	// Strip out the abspath.
5738	5539	$base = dirname( plugin_basename( $plugin ) );
5739	5540
5740	5541	// Short out on non-Jetpack assets.
5741		- if ( 'jetpack/' !== substr( $base, 0, 8 ) ) {
	5542	+ if ( ! str_starts_with( $base, 'jetpack/' ) ) {
5742	5543	return $url;
5743	5544	}
5744	5545
5745	5546	// File name parsing.
		@@ -5779,15 +5580,15 @@
5779	5580	*
5780	5581	* @return mixed
5781	5582	*/
5782	5583	public static function set_suffix_on_min( $src, $handle ) {
5783		- if ( false === strpos( $src, '.min.css' ) ) {
	5584	+ if ( ! is_string( $src ) \|\| ! str_contains( $src, '.min.css' ) ) {
5784	5585	return $src;
5785	5586	}
5786	5587
5787	5588	if ( ! empty( self::$min_assets ) ) {
5788	5589	foreach ( self::$min_assets as $file => $path ) {
5789		- if ( false !== strpos( $src, $file ) ) {
	5590	+ if ( str_contains( $src, $file ) ) {
5790	5591	wp_style_add_data( $handle, 'suffix', '.min' );
5791	5592	return $src;
5792	5593	}
5793	5594	}
		@@ -5817,8 +5618,10 @@
5817	5618	*
5818	5619	* Data passed in with the $data parameter will be available in the
5819	5620	* template file as $data['value']
5820	5621	*
	5622	+ * @html-template-var array $data
	5623	+ *
5821	5624	* @param string $template - Template file to load.
5822	5625	* @param array $data - Any data to pass along to the template.
5823	5626	* @return boolean - If template file was found.
5824	5627	**/
		@@ -5836,8 +5639,19 @@
5836	5639	return false;
5837	5640	}
5838	5641
5839	5642	/**
	5643	+ * Register Jetpack-specific tests on the connection package's health test suite.
	5644	+ *
	5645	+ * @param \Automattic\Jetpack\Connection\Connection_Health_Tests $connection_tests The test suite instance.
	5646	+ */
	5647	+ public function register_jetpack_connection_tests( $connection_tests ) {
	5648	+ require_once JETPACK__PLUGIN_DIR . '_inc/lib/debugger/class-jetpack-cxn-tests.php';
	5649	+ $jetpack_tests = new Jetpack_Cxn_Tests();
	5650	+ $jetpack_tests->register_tests_on( $connection_tests );
	5651	+ }
	5652	+
	5653	+ /**
5840	5654	* Throws warnings for deprecated hooks to be removed from Jetpack that cannot remain in the original place in the code.
5841	5655	*/
5842	5656	public function deprecated_hooks() {
5843	5657	$filter_deprecated_list = array(
		@@ -5964,13 +5778,8 @@
5964	5778	'jetpack_cache_plans' => array(
5965	5779	'replacement' => null,
5966	5780	'version' => 'jetpack-6.1.0',
5967	5781	),
5968		-
5969		- 'jetpack_lazy_images_skip_image_with_atttributes' => array(
5970		- 'replacement' => 'jetpack_lazy_images_skip_image_with_attributes',
5971		- 'version' => 'jetpack-6.5.0',
5972		- ),
5973	5782	'jetpack_enable_site_verification' => array(
5974	5783	'replacement' => null,
5975	5784	'version' => 'jetpack-6.5.0',
5976	5785	),
		@@ -6054,8 +5863,22 @@
6054	5863	'jetpack_are_blogging_prompts_enabled' => array(
6055	5864	'replacement' => null,
6056	5865	'version' => 'jetpack-11.8.0',
6057	5866	),
	5867	+ 'jetpack_subscriptions_modal_enabled' => array(
	5868	+ 'replacement' => null,
	5869	+ 'version' => 'jetpack-12.7.0',
	5870	+ ),
	5871	+ 'jetpack_pre_connection_prompt_helpers' => array(
	5872	+ 'replacement' => null,
	5873	+ 'version' => 'jetpack-13.2.0',
	5874	+ ),
	5875	+ 'jetpack_contact_form_use_package' => array(
	5876	+ 'replacement' => null,
	5877	+ 'version' => 'jetpack-13.4.0',
	5878	+ ),
	5879	+ // jetpack_implode_frontend_css has been removed, but is not listed here. The updated behavior is exactly the only use of the filter.
	5880	+ // We can reassess formally deprecating it here later; for now, it would be noise with no functional difference.
6058	5881	);
6059	5882
6060	5883	foreach ( $filter_deprecated_list as $tag => $args ) {
6061	5884	if ( has_filter( $tag ) ) {
		@@ -6158,9 +5981,9 @@
6158	5981	foreach ( $matches as $match ) {
6159	5982	$url = trim( $match['path'], "'\" \t" );
6160	5983
6161	5984	// If this is a data url, we don't want to mess with it.
6162		- if ( 'data:' === substr( $url, 0, 5 ) ) {
	5985	+ if ( str_starts_with( $url, 'data:' ) ) {
6163	5986	continue;
6164	5987	}
6165	5988
6166	5989	// If this is an absolute or protocol-agnostic url,
		@@ -6186,113 +6009,8 @@
6186	6009	return $css;
6187	6010	}
6188	6011
6189	6012	/**
6190		- * This methods removes all of the registered css files on the front end
6191		- * from Jetpack in favor of using a single file. In effect "imploding"
6192		- * all the files into one file.
6193		- *
6194		- * Pros:
6195		- * - Uses only ONE css asset connection instead of 15
6196		- * - Saves a minimum of 56k
6197		- * - Reduces server load
6198		- * - Reduces time to first painted byte
6199		- *
6200		- * Cons:
6201		- * - Loads css for ALL modules. However all selectors are prefixed so it
6202		- * should not cause any issues with themes.
6203		- * - Plugins/themes dequeuing styles no longer do anything. See
6204		- * jetpack_implode_frontend_css filter for a workaround
6205		- *
6206		- * For some situations developers may wish to disable css imploding and
6207		- * instead operate in legacy mode where each file loads seperately and
6208		- * can be edited individually or dequeued. This can be accomplished with
6209		- * the following line:
6210		- *
6211		- * add_filter( 'jetpack_implode_frontend_css', '__return_false' );
6212		- *
6213		- * @param bool $travis_test Is this a test run.
6214		- *
6215		- * @since 3.2
6216		- */
6217		- public function implode_frontend_css( $travis_test = false ) {
6218		- $do_implode = true;
6219		- if ( defined( 'SCRIPT_DEBUG' ) && SCRIPT_DEBUG ) {
6220		- $do_implode = false;
6221		- }
6222		-
6223		- // Do not implode CSS when the page loads via the AMP plugin.
6224		- if ( class_exists( Jetpack_AMP_Support::class ) && Jetpack_AMP_Support::is_amp_request() ) {
6225		- $do_implode = false;
6226		- }
6227		-
6228		- /**
6229		- * Allow CSS to be concatenated into a single jetpack.css file.
6230		- *
6231		- * @since 3.2.0
6232		- *
6233		- * @param bool $do_implode Should CSS be concatenated? Default to true.
6234		- */
6235		- $do_implode = apply_filters( 'jetpack_implode_frontend_css', $do_implode );
6236		-
6237		- // Do not use the imploded file when default behavior was altered through the filter.
6238		- if ( ! $do_implode ) {
6239		- return;
6240		- }
6241		-
6242		- // We do not want to use the imploded file in dev mode, or if not connected.
6243		- if ( ( new Status() )->is_offline_mode() \|\| ! self::is_connection_ready() ) {
6244		- if ( ! $travis_test ) {
6245		- return;
6246		- }
6247		- }
6248		-
6249		- // Do not use the imploded file if sharing css was dequeued via the sharing settings screen.
6250		- if ( get_option( 'sharedaddy_disable_resources' ) ) {
6251		- return;
6252		- }
6253		-
6254		- /*
6255		- * Now we assume Jetpack is connected and able to serve the single
6256		- * file.
6257		- *
6258		- * In the future there will be a check here to serve the file locally
6259		- * or potentially from the Jetpack CDN
6260		- *
6261		- * For now:
6262		- * - Enqueue a single imploded css file
6263		- * - Zero out the style_loader_tag for the bundled ones
6264		- * - Be happy, drink scotch
6265		- */
6266		-
6267		- add_filter( 'style_loader_tag', array( $this, 'concat_remove_style_loader_tag' ), 10, 2 );
6268		-
6269		- $version = self::is_development_version() ? filemtime( JETPACK__PLUGIN_DIR . 'css/jetpack.css' ) : JETPACK__VERSION;
6270		-
6271		- wp_enqueue_style( 'jetpack_css', plugins_url( 'css/jetpack.css', __FILE__ ), array(), $version );
6272		- wp_style_add_data( 'jetpack_css', 'rtl', 'replace' );
6273		- }
6274		-
6275		- /**
6276		- * Removes styles that are part of concatenated group.
6277		- *
6278		- * @param string $tag Style tag.
6279		- * @param string $handle Style handle.
6280		- *
6281		- * @return string
6282		- */
6283		- public function concat_remove_style_loader_tag( $tag, $handle ) {
6284		- if ( in_array( $handle, $this->concatenated_style_handles, true ) ) {
6285		- $tag = '';
6286		- if ( defined( 'WP_DEBUG' ) && WP_DEBUG ) {
6287		- $tag = '<!-- `' . esc_html( $handle ) . "` is included in the concatenated jetpack.css -->\r\n";
6288		- }
6289		- }
6290		-
6291		- return $tag;
6292		- }
6293		-
6294		- /**
6295	6013	* Check the heartbeat data
6296	6014	*
6297	6015	* Organizes the heartbeat data by severity. For example, if the site
6298	6016	* is in an ID crisis, it will be in the $filtered_data['bad'] array.
		@@ -6304,9 +6022,23 @@
6304	6022	*
6305	6023	* $return array $filtered_data
6306	6024	*/
6307	6025	public static function jetpack_check_heartbeat_data() {
6308		- $raw_data = Jetpack_Heartbeat::generate_stats_array();
	6026	+ /*
	6027	+ * Site environment stats (incl. wp-version/php-version checked below) now live in the Connection package,
	6028	+ * and the IDC stat is contributed by the Connection package's `jetpack_heartbeat_stats_array` filter
	6029	+ * callback. We rebuild the stat here rather than running that filter: the filter's callbacks have side
	6030	+ * effects (Connection\Manager::add_stats_to_heartbeat() consumes and deletes the `xmlrpc_errors` option)
	6031	+ * and return non-scalar values, neither of which is appropriate for this read-only diagnostic.
	6032	+ */
	6033	+ $env_stats = method_exists( Heartbeat::class, 'get_environment_stats' )
	6034	+ ? Heartbeat::get_environment_stats()
	6035	+ : array();
	6036	+ $raw_data = array_merge(
	6037	+ Jetpack_Heartbeat::generate_stats_array(),
	6038	+ $env_stats,
	6039	+ array( 'identitycrisis' => Identity_Crisis::check_identity_crisis() ? 'yes' : 'no' )
	6040	+ );
6309	6041
6310	6042	$good = array();
6311	6043	$caution = array();
6312	6044	$bad = array();
		@@ -6372,23 +6104,8 @@
6372	6104	return Jetpack_Options::get_options_for_reset();
6373	6105	}
6374	6106
6375	6107	/**
6376		- * Strip http:// or https:// from a url, replaces forward slash with ::,
6377		- * so we can bring them directly to their site in calypso.
6378		- *
6379		- * @deprecated 9.2.0 Use Automattic\Jetpack\Status::get_site_suffix
6380		- *
6381		- * @param string $url URL.
6382		- * @return string url without the guff.
6383		- */
6384		- public static function build_raw_urls( $url ) {
6385		- _deprecated_function( __METHOD__, 'jetpack-9.2.0', 'Automattic\Jetpack\Status::get_site_suffix' );
6386		-
6387		- return ( new Status() )->get_site_suffix( $url );
6388		- }
6389		-
6390		- /**
6391	6108	* Get the user's meta box order.
6392	6109	*
6393	6110	* @param array $sorted Value for the user's option.
6394	6111	* @return mixed
		@@ -6398,9 +6115,9 @@
6398	6115	return $sorted;
6399	6116	}
6400	6117
6401	6118	foreach ( $sorted as $box_context => $ids ) {
6402		- if ( false === strpos( $ids, 'dashboard_stats' ) ) {
	6119	+ if ( ! str_contains( $ids, 'dashboard_stats' ) ) {
6403	6120	// If the old id isn't anywhere in the ids, don't bother exploding and fail out.
6404	6121	continue;
6405	6122	}
6406	6123
		@@ -6417,68 +6134,9 @@
6417	6134	}
6418	6135
6419	6136	return $sorted;
6420	6137	}
6421		-
6422	6138	/**
6423		- * Adds a "blank" column in the user admin table to display indication of user connection.
6424		- *
6425		- * @param array $columns User list table columns.
6426		- *
6427		- * @return array
6428		- */
6429		- public function jetpack_icon_user_connected( $columns ) {
6430		- $columns['user_jetpack'] = '';
6431		- return $columns;
6432		- }
6433		-
6434		- /**
6435		- * Show Jetpack icon if the user is linked.
6436		- *
6437		- * @param string $val HTML for the icon.
6438		- * @param string $col User list table column.
6439		- * @param int $user_id User ID.
6440		- *
6441		- * @return string
6442		- */
6443		- public function jetpack_show_user_connected_icon( $val, $col, $user_id ) {
6444		- if ( 'user_jetpack' === $col && self::connection()->is_user_connected( $user_id ) ) {
6445		- $jetpack_logo = new Jetpack_Logo();
6446		- $emblem_html = sprintf(
6447		- '<a title="%1$s" class="jp-emblem-user-admin">%2$s</a>',
6448		- esc_attr__( 'This user is linked and ready to fly with Jetpack.', 'jetpack' ),
6449		- $jetpack_logo->get_jp_emblem()
6450		- );
6451		- return $emblem_html;
6452		- }
6453		-
6454		- return $val;
6455		- }
6456		-
6457		- /**
6458		- * Style the Jetpack user column
6459		- */
6460		- public function jetpack_user_col_style() {
6461		- global $current_screen;
6462		- if ( ! empty( $current_screen->base ) && 'users' === $current_screen->base ) {
6463		- ?>
6464		- <style>
6465		- .fixed .column-user_jetpack {
6466		- width: 21px;
6467		- }
6468		- .jp-emblem-user-admin svg {
6469		- width: 20px;
6470		- height: 20px;
6471		- }
6472		- .jp-emblem-user-admin path {
6473		- fill: #069e08;
6474		- }
6475		- </style>
6476		- <?php
6477		- }
6478		- }
6479		-
6480		- /**
6481	6139	* Checks if Akismet is active and working.
6482	6140	*
6483	6141	* We dropped support for Akismet 3.0 with Jetpack 6.1.1 while introducing a check for an Akismet valid key
6484	6142	* that implied usage of methods present since more recent version.
		@@ -6639,13 +6297,20 @@
6639	6297	}
6640	6298	}
6641	6299
6642	6300	/**
6643		- * Returns a boolean for whether backups UI should be displayed or not.
	6301	+ * Whether UI for backups should be displayed.
6644	6302	*
	6303	+ * On WPCom platforms this is gated on the backups-self-serve site feature.
	6304	+ * On self-hosted Jetpack sites it falls back to the jetpack_show_backups filter.
	6305	+ *
6645	6306	* @return bool Should backups UI be displayed?
6646	6307	*/
6647	6308	public static function show_backups_ui() {
	6309	+ if ( ( new \Automattic\Jetpack\Status\Host() )->is_wpcom_platform() ) {
	6310	+ return function_exists( 'wpcom_site_has_feature' ) && wpcom_site_has_feature( 'backups-self-serve' );
	6311	+ }
	6312	+
6648	6313	/**
6649	6314	* Whether UI for backups should be displayed.
6650	6315	*
6651	6316	* @since 6.5.0
		@@ -6655,8 +6320,24 @@
6655	6320	return self::is_plugin_active( 'vaultpress/vaultpress.php' ) \|\| apply_filters( 'jetpack_show_backups', true );
6656	6321	}
6657	6322
6658	6323	/**
	6324	+ * Whether UI for security scanning should be displayed.
	6325	+ *
	6326	+ * On WPCom platforms this is gated on the scan-self-serve site feature.
	6327	+ * On self-hosted Jetpack sites it always returns true.
	6328	+ *
	6329	+ * @return bool Should scan UI be displayed?
	6330	+ */
	6331	+ public static function show_scan_ui() {
	6332	+ if ( ( new \Automattic\Jetpack\Status\Host() )->is_wpcom_platform() ) {
	6333	+ return function_exists( 'wpcom_site_has_feature' ) && wpcom_site_has_feature( 'scan-self-serve' );
	6334	+ }
	6335	+
	6336	+ return true;
	6337	+ }
	6338	+
	6339	+ /**
6659	6340	* Clean leftoveruser meta.
6660	6341	*
6661	6342	* Delete Jetpack-related user meta when it is no longer needed.
6662	6343	*
		@@ -6728,8 +6409,40 @@
6728	6409	'url' => Redirect::get_url( 'jetpack-faq-backup-disclaimer' ),
6729	6410	),
6730	6411	);
6731	6412
	6413	+ $products['creator'] = array(
	6414	+ 'title' => __( 'Jetpack Creator', 'jetpack' ),
	6415	+ 'slug' => 'jetpack_creator_yearly',
	6416	+ 'description' => __( 'Craft stunning content, boost your subscriber base, and monetize your online presence.', 'jetpack' ),
	6417	+ 'show_promotion' => true,
	6418	+ 'discount_percent' => 50,
	6419	+ 'included_in_plans' => array( 'complete' ),
	6420	+ 'features' => array(
	6421	+ _x( 'Unlimited subscriber imports', 'Creator Product Feature', 'jetpack' ),
	6422	+ _x( 'Earn more from your content', 'Creator Product Feature', 'jetpack' ),
	6423	+ _x( 'Accept payments with PayPal', 'Creator Product Feature', 'jetpack' ),
	6424	+ _x( 'Increase earnings with WordAds', 'Creator Product Feature', 'jetpack' ),
	6425	+ ),
	6426	+ );
	6427	+
	6428	+ $products['growth'] = array(
	6429	+ 'title' => __( 'Jetpack Growth', 'jetpack' ),
	6430	+ 'slug' => 'jetpack_growth_yearly',
	6431	+ 'description' => __( 'Essential tools to help you grow your audience, track visitor engagement, and turn leads into loyal customers and advocates.', 'jetpack' ),
	6432	+ 'show_promotion' => true,
	6433	+ 'discount_percent' => 50,
	6434	+ 'included_in_plans' => array( 'complete' ),
	6435	+ 'features' => array(
	6436	+ _x( 'Jetpack Social', 'Growth Product Feature', 'jetpack' ),
	6437	+ _x( 'Jetpack Stats (10K site views, upgradeable)', 'Growth Product Feature', 'jetpack' ),
	6438	+ _x( 'Unlimited subscriber imports', 'Growth Product Feature', 'jetpack' ),
	6439	+ _x( 'Earn more from your content', 'Growth Product Feature', 'jetpack' ),
	6440	+ _x( 'Accept payments with PayPal', 'Growth Product Feature', 'jetpack' ),
	6441	+ _x( 'Increase earnings with WordAds', 'Growth Product Feature', 'jetpack' ),
	6442	+ ),
	6443	+ );
	6444	+
6732	6445	$products['scan'] = array(
6733	6446	'title' => __( 'Jetpack Scan', 'jetpack' ),
6734	6447	'slug' => 'jetpack_scan',
6735	6448	'description' => __( 'Automatic scanning and one-click fixes keep your site one step ahead of security threats and malware.', 'jetpack' ),
		@@ -6759,9 +6472,9 @@
6759	6472	),
6760	6473	);
6761	6474
6762	6475	$products['akismet'] = array(
6763		- 'title' => __( 'Akismet Anti-Spam', 'jetpack' ),
	6476	+ 'title' => __( 'Akismet Anti-spam', 'jetpack' ),
6764	6477	'slug' => 'jetpack_anti_spam',
6765	6478	'description' => __( 'Save time and get better responses by automatically blocking spam from your comments and forms.', 'jetpack' ),
6766	6479	'show_promotion' => true,
6767	6480	'discount_percent' => 50,
		@@ -6855,5 +6568,106 @@
6855	6568
6856	6569	return true;
6857	6570	}
6858	6571
	6572	+ /**
	6573	+ * Add 5-star review link on the Jetpack Plugin meta, in the plugins list table (on the plugins page).
	6574	+ *
	6575	+ * @param array $plugin_meta An array of the plugin's metadata.
	6576	+ * @param string $plugin_file Path to the plugin file.
	6577	+ *
	6578	+ * @return array $plugin_meta An array of the plugin's metadata.
	6579	+ */
	6580	+ public function add_5_star_review_link( $plugin_meta, $plugin_file ) {
	6581	+ if ( $plugin_file !== 'jetpack/jetpack.php' ) {
	6582	+ return $plugin_meta;
	6583	+ }
	6584	+
	6585	+ $u = get_current_user_id();
	6586	+ $site = get_site_url();
	6587	+
	6588	+ $plugin_meta[] = '<a href="https://jetpack.com/redirect?source=jetpack-plugin-review&site=' . esc_attr( $site ) . '&u=' . esc_attr( $u ) . '" target="_blank" rel="noopener noreferrer" title="' . esc_attr__( 'Rate Jetpack on WordPress.org', 'jetpack' ) . '" style="color: #ffb900">'
	6589	+ . str_repeat( '<span class="dashicons dashicons-star-filled" style="font-size: 16px; width:16px; height: 16px"></span>', 5 )
	6590	+ . '</a>';
	6591	+
	6592	+ return $plugin_meta;
	6593	+ }
	6594	+
	6595	+ /**
	6596	+ * Lazy instantiation of the Plugin_Tracking object.
	6597	+ *
	6598	+ * @since 13.9
	6599	+ *
	6600	+ * @return void
	6601	+ */
	6602	+ public function initialize_tracking() {
	6603	+ if ( did_action( 'jetpack_initialize_tracking' ) > 1 ) {
	6604	+ // Only need to run once.
	6605	+ return;
	6606	+ }
	6607	+
	6608	+ if ( ( new Tracking( 'jetpack', $this->connection_manager ) )->should_enable_tracking( new Terms_Of_Service(), new Status() ) \|\| static::is_connection_ready() ) {
	6609	+ ( new Plugin_Tracking() )->init();
	6610	+ }
	6611	+ }
	6612	+
	6613	+ /**
	6614	+ * Run the "initialize tracking" hook.
	6615	+ *
	6616	+ * @since 13.9
	6617	+ */
	6618	+ public function run_initialize_tracking_action() {
	6619	+ /**
	6620	+ * Fires when the tracking needs to be initialized.
	6621	+ * Doesn't necessarily mean that will actually happen, depends if the 'jetpack_tos_agreed' option is set.
	6622	+ *
	6623	+ * @since 13.9
	6624	+ */
	6625	+ do_action( 'jetpack_initialize_tracking' );
	6626	+ }
	6627	+
	6628	+ /**
	6629	+ * Initialize REST jsonAPI if needed.
	6630	+ *
	6631	+ * @return void
	6632	+ */
	6633	+ public function maybe_initialize_rest_jsonapi() {
	6634	+ // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	6635	+ if ( ! empty( $_GET['jsonapi'] ) && ( ! defined( 'IS_WPCOM' ) \|\| ! IS_WPCOM ) ) {
	6636	+ require_once ABSPATH . 'wp-admin/includes/admin.php'; // JSON API relies on WP functionality not autoloaded in REST.
	6637	+
	6638	+ define( 'WPCOM_JSON_API__BASE', 'public-api.wordpress.com/rest/v1' );
	6639	+ require_once JETPACK__PLUGIN_DIR . 'class.json-api-endpoints.php';
	6640	+ }
	6641	+ }
	6642	+
	6643	+ /**
	6644	+ * Run plugin post-activation actions if we need to.
	6645	+ *
	6646	+ * @return void
	6647	+ */
	6648	+ private function plugin_post_activation() {
	6649	+ if ( ( new Status() )->is_offline_mode() ) {
	6650	+ return;
	6651	+ }
	6652	+
	6653	+ if ( get_transient( 'activated_jetpack' ) ) {
	6654	+ delete_transient( 'activated_jetpack' );
	6655	+
	6656	+ if ( ( new Host() )->is_woa_site() ) {
	6657	+ $redirect_url = static::admin_url( 'page=jetpack' );
	6658	+ } elseif ( is_network_admin() ) {
	6659	+ $redirect_url = admin_url( 'network/admin.php?page=jetpack' );
	6660	+ } elseif ( get_transient( 'my_jetpack_product_activated' ) ) {
	6661	+ // don't redirect if this is an activation that just came from My Jetpack
	6662	+ // My Jetpack has its own set of post-activation redirects
	6663	+ return;
	6664	+ } elseif ( My_Jetpack_Initializer::should_initialize() ) {
	6665	+ $redirect_url = static::admin_url( 'page=my-jetpack' );
	6666	+ } else {
	6667	+ $redirect_url = static::admin_url( 'page=jetpack' );
	6668	+ }
	6669	+
	6670	+ wp_safe_redirect( $redirect_url );
	6671	+ }
	6672	+ }
6859	6673	}