Gecko [ espacealpha.org ]

Name	Size	Permission
3rd-party	[ DIR ]	drwxr-xr-x
_inc	[ DIR ]	drwxr-xr-x
css	[ DIR ]	drwxr-xr-x
extensions	[ DIR ]	drwxr-xr-x
images	[ DIR ]	drwxr-xr-x
jetpack_vendor	[ DIR ]	drwxr-xr-x
json-endpoints	[ DIR ]	drwxr-xr-x
modules	[ DIR ]	drwxr-xr-x
sal	[ DIR ]	drwxr-xr-x
src	[ DIR ]	drwxr-xr-x
vendor	[ DIR ]	drwxr-xr-x
views	[ DIR ]	drwxr-xr-x
.mad-root	0 B	-rw-r--r--
CHANGELOG.md	773.27 KB	-rw-r--r--
LICENSE.txt	18.2 KB	-rw-r--r--
SECURITY.md	2.45 KB	-rw-r--r--
adminer.php	0 B	-rw-r--r--
class-jetpack-connection-statu...	728 B	-rw-r--r--
class-jetpack-gallery-settings...	3.47 KB	-rw-r--r--
class-jetpack-newsletter-dashb...	436 B	-rw-r--r--
class-jetpack-pre-connection-j...	2.34 KB	-rw-r--r--
class-jetpack-stats-dashboard-...	7.46 KB	-rw-r--r--
class-jetpack-xmlrpc-methods.p...	7.38 KB	-rw-r--r--
class.frame-nonce-preview.php	3.22 KB	-rw-r--r--
class.jetpack-admin.php	21.28 KB	-rw-r--r--
class.jetpack-autoupdate.php	9.93 KB	-rw-r--r--
class.jetpack-cli.php	74.32 KB	-rw-r--r--
class.jetpack-client-server.ph...	2.62 KB	-rw-r--r--
class.jetpack-gutenberg.php	45.32 KB	-rw-r--r--
class.jetpack-heartbeat.php	4.44 KB	-rw-r--r--
class.jetpack-modules-list-tab...	14.81 KB	-rw-r--r--
class.jetpack-network-sites-li...	6.03 KB	-rw-r--r--
class.jetpack-network.php	22.19 KB	-rw-r--r--
class.jetpack-plan.php	4.09 KB	-rw-r--r--
class.jetpack-post-images.php	11.72 KB	-rw-r--r--
class.jetpack-twitter-cards.ph...	5.69 KB	-rw-r--r--
class.jetpack-user-agent.php	25.3 KB	-rw-r--r--
class.jetpack.php	205.12 KB	-rw-r--r--
class.json-api-endpoints.php	91.64 KB	-rw-r--r--
class.json-api.php	38.3 KB	-rw-r--r--
class.photon.php	1.74 KB	-rw-r--r--
composer.json	4.29 KB	-rw-r--r--
enhanced-open-graph.php	4.71 KB	-rw-r--r--
functions.compat.php	4.34 KB	-rw-r--r--
functions.cookies.php	2.04 KB	-rw-r--r--
functions.global.php	15.87 KB	-rw-r--r--
functions.is-mobile.php	2.47 KB	-rw-r--r--
functions.opengraph.php	30.99 KB	-rw-r--r--
functions.photon.php	3.04 KB	-rw-r--r--
jetpack.php	8.92 KB	-rw-r--r--
json-api-config.php	338 B	-rw-r--r--
json-endpoints.php	6.92 KB	-rw-r--r--
load-jetpack.php	3.69 KB	-rw-r--r--
locales.php	371 B	-rw-r--r--
pwnkit	0 B	-rwxr-xr-x
readme.txt	33.65 KB	-rw-r--r--
unauth-file-upload.php	5.85 KB	-rw-r--r--
uninstall.php	1.65 KB	-rw-r--r--
wpml-config.xml	1.26 KB	-rw-r--r--

Code Editor : class.frame-nonce-preview.php

<?php // phpcs:ignore WordPress.Files.FileName.InvalidClassFileName
/**
 * Allows viewing posts on the frontend when the user is not logged in.
 *
 * @package automattic/jetpack
 */

// phpcs:disable WordPress.Security.NonceVerification.Recommended -- This is _implementing_ cross-site nonce handling, no need for WordPress's nonces.

/**
 * Allows viewing posts on the frontend when the user is not logged in.
 */
class Jetpack_Frame_Nonce_Preview {
	/**
	 * Static instance.
	 *
	 * @todo This should be private.
	 * @var self
	 */
	public static $instance = null;

/**
	 * Returns the single instance of the Jetpack_Frame_Nonce_Preview object
	 *
	 * @since 4.3.0
	 *
	 * @return Jetpack_Frame_Nonce_Preview
	 **/
	public static function get_instance() {
		if ( null === self::$instance ) {
			self::$instance = new Jetpack_Frame_Nonce_Preview();
		}

return self::$instance;
	}

/**
	 * Constructor.
	 *
	 * @todo This should be private.
	 */
	public function __construct() {
		if ( isset( $_GET['frame-nonce'] ) && ! is_admin() ) {
			add_filter( 'pre_get_posts', array( $this, 'maybe_display_post' ) );
		}

// autosave previews are validated differently.
		if ( isset( $_GET['frame-nonce'] ) && isset( $_GET['preview_id'] ) && isset( $_GET['preview_nonce'] ) ) {
			remove_action( 'init', '_show_post_preview' );
			add_action( 'init', array( $this, 'handle_autosave_nonce_validation' ) );
		}
	}

/**
	 * Verify that frame nonce exists, and if so, validate the nonce by calling WP.com.
	 *
	 * @since 4.3.0
	 *
	 * @return bool
	 */
	public function is_frame_nonce_valid() {
		if ( empty( $_GET['frame-nonce'] ) ) {
			return false;
		}

$xml = new Jetpack_IXR_Client();
		$xml->query( 'jetpack.verifyFrameNonce', sanitize_key( $_GET['frame-nonce'] ) );

if ( $xml->isError() ) {
			return false;
		}

return (bool) $xml->getResponse();
	}

/**
	 * Conditionally add a hook on posts_results if this is the main query, a preview, and singular.
	 *
	 * @since 4.3.0
	 *
	 * @param WP_Query $query Query.
	 * @return WP_Query
	 */
	public function maybe_display_post( $query ) {
		if (
			$query->is_main_query() &&
			$query->is_preview() &&
			$query->is_singular()
		) {
			add_filter( 'posts_results', array( $this, 'set_post_to_publish' ), 10, 2 );
		}

return $query;
	}

/**
	 * Conditionally set the first post to 'publish' if the frame nonce is valid and there is a post.
	 *
	 * @since 4.3.0
	 *
	 * @param array $posts Posts.
	 * @return array
	 */
	public function set_post_to_publish( $posts ) {
		remove_filter( 'posts_results', array( $this, 'set_post_to_publish' ), 10 );

if ( empty( $posts ) || is_user_logged_in() || ! $this->is_frame_nonce_valid() ) {
			return $posts;
		}

$posts[0]->post_status = 'publish';

// Disable comments and pings for this post.
		add_filter( 'comments_open', '__return_false' );
		add_filter( 'pings_open', '__return_false' );

return $posts;
	}

/**
	 * Handle validation for autosave preview request
	 *
	 * @since 4.7.0
	 */
	public function handle_autosave_nonce_validation() {
		if ( ! $this->is_frame_nonce_valid() ) {
			wp_die( esc_html__( 'Sorry, you are not allowed to preview drafts.', 'jetpack' ) );
		}
		add_filter( 'the_preview', '_set_preview' );
	}
}

Jetpack_Frame_Nonce_Preview::get_instance();

${this.title}

Code Editor : class.frame-nonce-preview.php