Aaron Jorbin fe1df4023c Media: Redirect inactive attachment pages for logged-out users. ...

Ensure logged out users are redirected to the media file when attachment pages are inactive. This removes the read_post capability check from the canonical redirects as anonymous users lack the permission.

This was previously committed in [57310] before being reverted in [57318]. This update includes a fix to cover instances where revealing a URL could be considered a data leak and greatly expands the unit tests to ensure that this is covered along with many other instances.

Follow-up to [56657], [56658], [56711], [57310], [57318].

Props peterwilsoncc, jorbin, afercia, aristath, chesio, joppuyo, jorbin, lakshmananphp, poena, sergeybiryukov, swissspidy, johnbillion.
Fixes #59866.
See #57913.


git-svn-id: https://develop.svn.wordpress.org/trunk@57357 602fd350-edb4-49c9-b593-d223f7449a82

2024-01-25 17:34:54 +00:00

..

e2e

Options, Meta APIs: Prevent saving of invalid timezones.

2023-10-16 23:49:10 +00:00

gutenberg

Block Editor: Update the Gutenberg branch used to launch Gutenberg e2e tests.

2021-06-01 09:21:36 +00:00

performance

Build/Test Tools: Expand performance test scenarios.

2023-11-08 10:30:21 +00:00

phpunit

Media: Redirect inactive attachment pages for logged-out users.

2024-01-25 17:34:54 +00:00

qunit

Taxonomy: Set "public" to "false" for user pattern categories.

2023-11-01 14:48:50 +00:00

visual-regression

Build/Test Tools: Migrate Puppeteer tests to Playwright.

2023-10-13 08:11:41 +00:00