Skip to content

Staging release – 2024/12/16


16 December 2024

18:34:25 GMT+0000

Added

Introduced the vip_files_acl_is_valid_path_for_site filter to extend the is_valid_path_for_site function. This new filter allows overriding the VIP File System’s validation process for multisite setups, which uses the /wp-content/mu-plugins/files/acl/endpoint-check-file-acl.php endpoint to check permissions for paths under /wp-content/uploads. It enables custom use cases, such as accessing directories outside the default site asset paths (but within the uploads folder) while adhering to other ACL rules.

Warning: Improper use of this filter could expose private data. Developers using it must ensure that the logic they implement enforces proper access control to prevent data leaks between subsites.

https://github.com/Automattic/vip-go-mu-plugins/pull/6033