WP Rest API 通过带有特殊字符的 slug 发布（例如：!&'）

Question

I have posts with slugs with special characters. One of them is the following: http://localhost/wp-json/wp/v2/posts?slug=my-post !

Unfortunately, WP REST API not showing the content since it has (!) within the slug.

Is there any solution you guys would recommend?

Answer 1

I have found the solution (at least for my case), not sure if it'll work for you but may indicate you the way to go. We need to tap into the function used to sanitize the slugs, as I said in my comment, by default is wp_parse_slug_list . Looking at the code the function that actually sanitizes the slug is sanitize_title .

Looking at the source code, wp_parse_slug_list calls sanitize_title with only one argument, which means that the context used is save . This means that, for posts that were already saved without being sanitized by this function, the slug won't match and the post will be inaccessible through the API. The solution is to change the sanitizing function slightly by adding a filter:

add_filter('rest_post_collection_params', function($query_params) {
    $query_params['slug']['sanitize_callback'] = 'sanitize_rest_api_slug';

    return $query_params;
}, 20, 1);

function sanitize_rest_api_slug( $list ) {
    if ( ! is_array( $list ) ) {
        $list = preg_split( '/[\s,]+/', $list );
    }

    foreach ( $list as $key => $value ) {
        $list[ $key ] = sanitize_title( $value, '', 'query' );
    }
    return array_unique( $list );
}

The filter is actually being applied on the function get_collection_params() on the class-wp-rest-posts-controller class, but if you look at the source code , the filter has a variable depending on the post_type , so if you have another special kind of posts defined (besides post ) you need to add/change a filter for that kind as well.

I hope this helps somebody else like me, even if it's too late for your issue.