/** * WP_oEmbed_Controller class, used to provide an oEmbed endpoint. * * @package WordPress * @subpackage Embeds * @since 4.4.0 */ /** * oEmbed API endpoint controller. * * Registers the REST API route and delivers the response data. * The output format (XML or JSON) is handled by the REST API. * * @since 4.4.0 */ #[AllowDynamicProperties] final class WP_oEmbed_Controller { /** * Register the oEmbed REST API route. * * @since 4.4.0 */ public function register_routes() { /** * Filters the maxwidth oEmbed parameter. * * @since 4.4.0 * * @param int $maxwidth Maximum allowed width. Default 600. */ $maxwidth = apply_filters( 'oembed_default_width', 600 ); register_rest_route( 'oembed/1.0', '/embed', array( array( 'methods' => WP_REST_Server::READABLE, 'callback' => array( $this, 'get_item' ), 'permission_callback' => '__return_true', 'args' => array( 'url' => array( 'description' => __( 'The URL of the resource for which to fetch oEmbed data.' ), 'required' => true, 'type' => 'string', 'format' => 'uri', ), 'format' => array( 'default' => 'json', 'sanitize_callback' => 'wp_oembed_ensure_format', ), 'maxwidth' => array( 'default' => $maxwidth, 'sanitize_callback' => 'absint', ), ), ), ) ); register_rest_route( 'oembed/1.0', '/proxy', array( array( 'methods' => WP_REST_Server::READABLE, 'callback' => array( $this, 'get_proxy_item' ), 'permission_callback' => array( $this, 'get_proxy_item_permissions_check' ), 'args' => array( 'url' => array( 'description' => __( 'The URL of the resource for which to fetch oEmbed data.' ), 'required' => true, 'type' => 'string', 'format' => 'uri', ), 'format' => array( 'description' => __( 'The oEmbed format to use.' ), 'type' => 'string', 'default' => 'json', 'enum' => array( 'json', 'xml', ), ), 'maxwidth' => array( 'description' => __( 'The maximum width of the embed frame in pixels.' ), 'type' => 'integer', 'default' => $maxwidth, 'sanitize_callback' => 'absint', ), 'maxheight' => array( 'description' => __( 'The maximum height of the embed frame in pixels.' ), 'type' => 'integer', 'sanitize_callback' => 'absint', ), 'discover' => array( 'description' => __( 'Whether to perform an oEmbed discovery request for unsanctioned providers.' ), 'type' => 'boolean', 'default' => true, ), ), ), ) ); } /** * Callback for the embed API endpoint. * * Returns the JSON object for the post. * * @since 4.4.0 * * @param WP_REST_Request $request Full data about the request. * @return array|WP_Error oEmbed response data or WP_Error on failure. */ public function get_item( $request ) { $post_id = url_to_postid( $request['url'] ); /** * Filters the determined post ID. * * @since 4.4.0 * * @param int $post_id The post ID. * @param string $url The requested URL. */ $post_id = apply_filters( 'oembed_request_post_id', $post_id, $request['url'] ); $data = get_oembed_response_data( $post_id, $request['maxwidth'] ); if ( ! $data ) { return new WP_Error( 'oembed_invalid_url', get_status_header_desc( 404 ), array( 'status' => 404 ) ); } return $data; } /** * Checks if current user can make a proxy oEmbed request. * * @since 4.8.0 * * @return true|WP_Error True if the request has read access, WP_Error object otherwise. */ public function get_proxy_item_permissions_check() { if ( ! current_user_can( 'edit_posts' ) ) { return new WP_Error( 'rest_forbidden', __( 'Sorry, you are not allowed to make proxied oEmbed requests.' ), array( 'status' => rest_authorization_required_code() ) ); } return true; } /** * Callback for the proxy API endpoint. * * Returns the JSON object for the proxied item. * * @since 4.8.0 * * @see WP_oEmbed::get_html() * @global WP_Embed $wp_embed WordPress Embed object. * @global WP_Scripts $wp_scripts * * @param WP_REST_Request $request Full data about the request. * @return object|WP_Error oEmbed response data or WP_Error on failure. */ public function get_proxy_item( $request ) { global $wp_embed, $wp_scripts; $args = $request->get_params(); // Serve oEmbed data from cache if set. unset( $args['_wpnonce'] ); $cache_key = 'oembed_' . md5( serialize( $args ) ); $data = get_transient( $cache_key ); if ( ! empty( $data ) ) { return $data; } $url = $request['url']; unset( $args['url'] ); // Copy maxwidth/maxheight to width/height since WP_oEmbed::fetch() uses these arg names. if ( isset( $args['maxwidth'] ) ) { $args['width'] = $args['maxwidth']; } if ( isset( $args['maxheight'] ) ) { $args['height'] = $args['maxheight']; } // Short-circuit process for URLs belonging to the current site. $data = get_oembed_response_data_for_url( $url, $args ); if ( $data ) { return $data; } $data = _wp_oembed_get_object()->get_data( $url, $args ); if ( false === $data ) { // Try using a classic embed, instead. /* @var WP_Embed $wp_embed */ $html = $wp_embed->get_embed_handler_html( $args, $url ); if ( $html ) { // Check if any scripts were enqueued by the shortcode, and include them in the response. $enqueued_scripts = array(); foreach ( $wp_scripts->queue as $script ) { $enqueued_scripts[] = $wp_scripts->registered[ $script ]->src; } return (object) array( 'provider_name' => __( 'Embed Handler' ), 'html' => $html, 'scripts' => $enqueued_scripts, ); } return new WP_Error( 'oembed_invalid_url', get_status_header_desc( 404 ), array( 'status' => 404 ) ); } /** This filter is documented in wp-includes/class-wp-oembed.php */ $data->html = apply_filters( 'oembed_result', _wp_oembed_get_object()->data2html( (object) $data, $url ), $url, $args ); /** * Filters the oEmbed TTL value (time to live). * * Similar to the {@see 'oembed_ttl'} filter, but for the REST API * oEmbed proxy endpoint. * * @since 4.8.0 * * @param int $time Time to live (in seconds). * @param string $url The attempted embed URL. * @param array $args An array of embed request arguments. */ $ttl = apply_filters( 'rest_oembed_ttl', DAY_IN_SECONDS, $url, $args ); set_transient( $cache_key, $data, $ttl ); return $data; } } https://validator.w3.org/feed/docs/rss2.html No-deposit Gambling establishment Bonuses 180+ For July 2026 17 Greatest 100 percent free Spins Casinos Without Deposit Extra Rules 2026 Aztec Secrets Slot: Totally free Spins, Demo & Tips Best $step 1 Minimum Put Casinos 2026 Begin by Just $step one Score 100 Totally free revolves Today Thunderstruck Video slot, Free Play within the Demonstration because of the Microgaming No deposit Incentives 2026 greatest 100 percent free local casino incentives 15 Cybersecurity Methods for Being Protected from Cyber Attacks Raging Rhino Position Comment 2026 Free Play Demo Free download Anti-virus Application to possess Pc AVG Malware Protection Thunderstruck II Position Opinion 96 65% RTP Microgaming 2026 Survivor Position: Info, Free Spins and more Greatest 100 percent free Spins No deposit Incentives In the Casinos on the internet In the 2026 Secret Art gallery Slot 96 58% RTP, 10 Traces & x17,five-hundred Gains Mommy Meaning, Records, & Issues 17 Best Things you can do inside Lapland, Finland Happiest Xmas Forest Habanero Position Review & Trial July 2026 The fresh Huge Trip Harbors Opinion: Adventure-Manufactured 31-Payline Video game grand Wiktionary, the new totally free dictionary Chain Mail Casino slot games 100 percent free Trial Game, RTP and you will Finest Casino Sites to try out Real cash Online game Finest Us Mobile Casinos Available In the 2026 No deposit 100 percent free Revolves The new List to own July 2026 Cool Fruit Jackpot Position Review and you will Best Gambling enterprises 2026 Starburst Slot Remark Survivor on the CBS Trendy Fruits Ranch Slot Review, Bonuses & Totally free Gamble 92 07% RTP What is actually Means Explained with Secret Rules and you will Instances Starburst Slot Play NetEnt’s Legendary Slot machine game On the internet Starburst Slot machine game: Enjoy 100 percent free Slot Game by the NetEnt: No Install Starburst On the internet Slot Play Gambling games Play the Starburst Position because of the NetEnt Progression Video game Best 100 percent free Revolves Local casino Bonuses in america 2026 The new Crawl-Man Mobile Games Today 100 percent free on the internet Gamble Spin Pug Casino No deposit Bonuses 2026 The brand new Wonder Examine Boy Position Games Modern Bonus Slots Spiderman Harbors Spiderman Wonder Slot machine Opinion Spiderman slot machine game online for free sphinx-doc sphinx: The fresh Sphinx files creator Play 100 percent free Sphinx Insane IGT On the internet Slot No Signal-ups Required Southern Park Movements in order to Vital+ That have $step 1 5B USD Bargain No-deposit Gambling enterprise Bonuses Better Also offers Away from 2026 Online Conference Arranging Software Saturday Evening Funkin’ Enjoy Online 100percent free! step three Reel Slots On line Gamble Free & Real cash Slots 2026 Spiderman Slot, Totally free Revolves, Private Slot Bonuses to try out! Is actually Totally free Demo Best Totally free Revolves Also provides within the NZ 2026 To five-hundred No Put Spins Get a hundred K Free Coins No Down load 2026