Core APIs: Sanitize request input and escape output in browse-happy, serve-happy, credits, importers, and patterns - #799

Open

obenland wants to merge 5 commits into

WordPress:trunkfrom

obenland:api/security-core-apis

Commits on Aug 13, 2026

Core APIs: Sanitize request input and escape output in browse-happy, serve-happy, credits, importers, and patterns.

obenland
and
claude
committed
86030f4
Core APIs: Validate JSONP callbacks as real JavaScript identifiers.

obenland
and
claude
committed
ebc16da
Core APIs: Fold the phpcs justification comments into the file docblocks.

obenland
and
claude
committed
3c58394
Core APIs: Add file docblocks carrying the phpcs justifications.

obenland
and
claude
committed
ddf941c
Core APIs: Anchor validation regexes and fix the bail() reason phrase.

obenland
and
claude
committed
5cf16ba