Repository navigation

Events API: Validate and sanitize all request input at parse time - #798

Closed

obenland wants to merge 13 commits into

WordPress:trunkfrom

obenland:api/security-events

Closed

Events API: Validate and sanitize all request input at parse time#798
obenland wants to merge 13 commits into
WordPress:trunkfrom
obenland:api/security-events

Commits on Nov 10, 2026
- Events API: Validate and sanitize all request input at parse time.
  
  obenland
  and
  claude
  committed
  663894a
- Events API: Address review feedback on invalid input handling.
  
  obenland
  and
  claude
  committed
  0992f58
- Events API: Add a file docblock carrying the phpcs justification.
  
  obenland
  and
  claude
  committed
  d81c036
- Events API: Preserve availability for benign malformed input.
  
  obenland
  and
  claude
  committed
  8493dfe
- Events API: Anchor validation regexes with \z.
  
  obenland
  and
  claude
  committed
  4ba89eb
- Events API: Cover parse_request() input validation with unit tests.
  
  obenland
  and
  claude
  committed
  e2d016a
- Events API: Keep GET coordinates as strings.
  
  obenland
  and
  claude
  committed
  f175554
- Events API: Restore the commented-out wp15 promo line.
  
  obenland
  and
  claude
  committed
  3193ea0
- Events API: Accept only alpha-2 country codes, in either request form.
  
  obenland
  and
  claude
  committed
  2dd775a
- Events API: Fix the latitude assignment's alignment after the phpcs:ignore split.
  
  obenland
  and
  claude
  committed
  d3c459f
- Events API: Drop the false e2e coverage claim from the parse_request() tests.
  
  obenland
  and
  claude
  committed
  ba5d996
- Events API: Anchor the country checks in the event queries.
  
  obenland
  and
  claude
  committed
  83e84d9
- Events API: Cast the number parameter with (int) instead of intval().
  
  obenland
  and
  claude
  committed
  d54f877

Commits

Commits on Nov 10, 2026