← All changes
|
jetpack_vendor/automattic/jetpack-connection/src/class-authorize-json-api.php
+2
-2
13.4.5
→
16.3
View file →
| @@ -40,9 +40,9 @@ | ||
| 40 | 40 | * @return void |
| 41 | 41 | */ |
| 42 | 42 | public function verify_json_api_authorization_request( $environment = null ) { |
| 43 | 43 | $environment = $environment === null |
| 44 | - ? $_REQUEST // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- nonce verification handled later in function. | |
| 44 | + ? $_REQUEST // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- nonce verification handled later in function and request data are 1) used to verify a cryptographic signature of the request data and 2) sanitized later in function. | |
| 45 | 45 | : $environment; |
| 46 | 46 | |
| 47 | 47 | if ( ! isset( $environment['token'] ) ) { |
| 48 | 48 | wp_die( esc_html__( 'You must connect your Jetpack plugin to WordPress.com to use this feature.', 'jetpack-connection' ) ); |
| @@ -229,9 +229,9 @@ | ||
| 229 | 229 | * @param \WP_User $user WP_User for the redirect. |
| 230 | 230 | * |
| 231 | 231 | * @return string |
| 232 | 232 | */ |
| 233 | - public function add_token_to_login_redirect_json_api_authorization( $redirect_to, $original_redirect_to, $user ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable | |
| 233 | + public function add_token_to_login_redirect_json_api_authorization( $redirect_to, $original_redirect_to, $user ) { | |
| 234 | 234 | return add_query_arg( |
| 235 | 235 | urlencode_deep( |
| 236 | 236 | array( |
| 237 | 237 | 'jetpack-code' => get_user_meta( |