WP_Theme_JSON::remove_insecure_properties( array $theme_json, string $origin = 'theme' ): array

3476	public static function remove_insecure_properties( $theme_json, $origin = 'theme' ) {3477		if ( ! in_array( $origin, static::VALID_ORIGINS, true ) ) {3478			$origin = 'theme';3479		}3480 3481		$sanitized = array();3482 3483		$theme_json = WP_Theme_JSON_Schema::migrate( $theme_json, $origin );3484 3485		$valid_block_names   = array_keys( static::get_blocks_metadata() );3486		$valid_element_names = array_keys( static::ELEMENTS );3487		$valid_variations    = static::get_valid_block_style_variations();3488 3489		$theme_json = static::sanitize( $theme_json, $valid_block_names, $valid_element_names, $valid_variations );3490 3491		$blocks_metadata = static::get_blocks_metadata();3492		$style_options   = array( 'include_block_style_variations' => true ); // Allow variations data.3493		$style_nodes     = static::get_style_nodes( $theme_json, $blocks_metadata, $style_options );3494 3495		foreach ( $style_nodes as $metadata ) {3496			$input = _wp_array_get( $theme_json, $metadata['path'], array() );3497			if ( empty( $input ) ) {3498				continue;3499			}3500 3501			// The global styles custom CSS is not sanitized, but can only be edited by users with 'edit_css' capability.3502			if ( isset( $input['css'] ) && current_user_can( 'edit_css' ) ) {3503				$output = $input;3504			} else {3505				$output = static::remove_insecure_styles( $input );3506			}3507 3508			/*3509			 * Get a reference to element name from path.3510			 * $metadata['path'] = array( 'styles', 'elements', 'link' );3511			 */3512			$current_element = $metadata['path'][ count( $metadata['path'] ) - 1 ];3513 3514			/*3515			 * $output is stripped of pseudo selectors. Re-add and process them3516			 * or insecure styles here.3517			 */3518			if ( isset( static::VALID_ELEMENT_PSEUDO_SELECTORS[ $current_element ] ) ) {3519				foreach ( static::VALID_ELEMENT_PSEUDO_SELECTORS[ $current_element ] as $pseudo_selector ) {3520					if ( isset( $input[ $pseudo_selector ] ) ) {3521						$output[ $pseudo_selector ] = static::remove_insecure_styles( $input[ $pseudo_selector ] );3522					}3523				}3524			}3525 3526			if ( ! empty( $output ) ) {3527				_wp_array_set( $sanitized, $metadata['path'], $output );3528			}3529 3530			if ( isset( $metadata['variations'] ) ) {3531				foreach ( $metadata['variations'] as $variation ) {3532					$variation_input = _wp_array_get( $theme_json, $variation['path'], array() );3533					if ( empty( $variation_input ) ) {3534						continue;3535					}3536 3537					$variation_output = static::remove_insecure_styles( $variation_input );3538 3539					// Process a variation's elements and element pseudo selector styles.3540					if ( isset( $variation_input['elements'] ) ) {3541						foreach ( $valid_element_names as $element_name ) {3542							$element_input = $variation_input['elements'][ $element_name ] ?? null;3543							if ( $element_input ) {3544								$element_output = static::remove_insecure_styles( $element_input );3545 3546								if ( isset( static::VALID_ELEMENT_PSEUDO_SELECTORS[ $element_name ] ) ) {3547									foreach ( static::VALID_ELEMENT_PSEUDO_SELECTORS[ $element_name ] as $pseudo_selector ) {3548										if ( isset( $element_input[ $pseudo_selector ] ) ) {3549											$element_output[ $pseudo_selector ] = static::remove_insecure_styles( $element_input[ $pseudo_selector ] );3550										}3551									}3552								}3553 3554								if ( ! empty( $element_output ) ) {3555									_wp_array_set( $variation_output, array( 'elements', $element_name ), $element_output );