Skip to content

Production release – 2025/01/07


07 January 2025

20:13:26 GMT+0000

Added

  • Introduced the vip_files_acl_is_valid_path_for_site filter to extend the is_valid_path_for_site function. This new filter allows overriding the VIP File System’s validation process for multisite setups, which uses the /wp-content/mu-plugins/files/acl/endpoint-check-file-acl.php endpoint to check permissions for paths under /wp-content/uploads. It enables custom use cases, such as accessing directories outside the default site asset paths (but within the uploads folder) while adhering to other ACL rules. This extends the functionality introduced in PR #1975.
    Warning: Improper use of this filter could expose private data. Developers using it must ensure that the logic they implement enforces proper access control to prevent data leaks between subsites.

https://github.com/Automattic/vip-go-mu-plugins/pull/6033


Please see the full release on GitHub.