wp_attach_theme_preview_middleware()

Description

Uses · 5

• current_user_can()Returns whether the current user has the specified capability.
• wp_add_inline_script()Adds extra code to a registered script.
• wp_json_encode()Encodes a variable into JSON, with some confidence checks.
• sanitize_text_field()Sanitizes a string from user input or from the database.
• wp_unslash()Removes slashes from a string or recursively removes slashes from strings within an array.

Source

View on Trac ↗View on GitHub ↗

42function wp_attach_theme_preview_middleware() {43	// Don't allow non-admins to preview themes.44	if ( ! current_user_can( 'switch_themes' ) ) {45		return;46	}47 48	wp_add_inline_script(49		'wp-api-fetch',50		sprintf(51			'wp.apiFetch.use( wp.apiFetch.createThemePreviewMiddleware( %s ) );',52			wp_json_encode( sanitize_text_field( wp_unslash( $_GET['wp_theme_preview'] ) ), JSON_HEX_TAG | JSON_UNESCAPED_SLASHES )53		),54		'after'55	);56}

History

Introduced in 6.3.0. Unchanged from 6.7.7 through 7.1.0.

1. 6.7.7
2. 6.8.8
3. 6.9.7
4. 7.0.4
5. 7.1.0

Signature, return type and hooks compared across 5 parsed releases.

About this page

Parsed data

Generated from the wordpress-develop 7.1.0 tag, from src/wp-includes/theme-previews.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.

Corrections

Something wrong on this page? Report it and it gets fixed in the next regeneration.