Jonny Harris

A simple plugin to add block data in json format into the rest api. Once installed, there will be two new fields added to the rest api, <code>has_blocks</code> and <code>blocks</code>. 
For example output. 
 <code>"has_blocks": true, 
"block_data": [ 
 { 
 "blockName": "core/image", 
 "attrs": { 
 "url": "https://www.spacedmonkey.com/wp-content/uploads/2018/12/test-image.jpg", 
 "alt": "Terminal de aeropuerto", 
 "caption": "fsfsdfdsfdssfd", 
 "href": "https://www.spacedmonkey.com/test-image", 
 "rel": "noreferrer noopener", 
 "linkClass": "jonny-123", 
 "linkTarget": "_blank", 
 "id": 147355, 
 "width": 582, 
 "height": 327, 
 "linkDestination": "attachment" 
 }, 
 "innerBlocks": [ 
 ], 
 "innerHTML": "\n<figure class=\"wp-block-image is-resized\"><a class=\"jonny-123\" href=\"https://www.spacedmonkey.com/test-image\" target=\"_blank\" rel=\"noreferrer noopener\"><img src=\"https://www.spacedmonkey.com/wp-content/uploads/2018/12/test-image.jpg\" alt=\"Terminal de aeropuerto\" class=\"wp-image-147355\" width=\"582\" height=\"327\"/></a><figcaption>fsfsdfdsfdssfd</figcaption></figure>\n", 
 "innerContent": [ 
 "\n<figure class=\"wp-block-image is-resized\"><a class=\"jonny-123\" href=\"https://www.spacedmonkey.com/test-image\" target=\"_blank\" rel=\"noreferrer noopener\"><img src=\"https://www.spacedmonkey.com/wp-content/uploads/2018/12/test-image.jpg\" alt=\"Terminal de aeropuerto\" class=\"wp-image-147355\" width=\"582\" height=\"327\"/></a><figcaption>fsfsdfdsfdssfd</figcaption></figure>\n" 
 ], 
 "rendered": "\n<figure class=\"wp-block-image is-resized\"><a class=\"jonny-123\" href=\"https://www.spacedmonkey.com/test-image\" target=\"_blank\" rel=\"noreferrer noopener\"><img src=\"https://www.spacedmonkey.com/wp-content/uploads/2018/12/test-image.jpg\" alt=\"Terminal de aeropuerto\" class=\"wp-image-147355\" width=\"582\" height=\"327\"/></a><figcaption>fsfsdfdsfdssfd</figcaption></figure>\n" 
 } 
],</code>
<h3>Technical Notes</h3>
<ul>
<li>Requires PHP 5.6+.</li>
<li>Requires WordPress 5.5+.</li>
<li>Issues and Pull requests welcome on the GitHub repository: https://github.com/spacedmonkey/wp-rest-blocks</li>
</ul>
<h3>Development</h3>
This plugin uses <code>@wordpress/env</code> for local development and testing.
<h3>Prerequisites</h3>
<ul>
<li>Node.js 20+ and npm</li>
<li>Docker Desktop (must be installed and running)</li>
</ul>
<h3>Setup</h3>
<ol>
<li>Clone the repository</li>
<li>
Install dependencies: 
 <code>bash 
npm install 
composer install</code>
</li>
<li>
Start the WordPress environment: 
 <code>bash 
npm run env:start</code>
This will start a local WordPress instance at <code>http://localhost:8888</code> (admin: <code>http://localhost:8888/wp-admin</code> with username <code>admin</code> and password <code>password</code>)
Note: Docker must be running for this to work. The first time you run this, it will download WordPress and set up the database, which may take a few minutes.
</li>
</ol>
<h3>Available Commands</h3>
<ul>
<li><code>npm run env:start</code> – Start the WordPress environment</li>
<li><code>npm run env:stop</code> – Stop the WordPress environment</li>
<li><code>npm run env:reset</code> – Reset the environment (clean database)</li>
<li><code>npm run env:destroy</code> – Destroy the environment completely</li>
<li><code>npm run test:php</code> – Run PHPUnit tests</li>
<li><code>npm run test:php:multisite</code> – Run PHPUnit tests in multisite mode</li>
<li><code>npm run lint:php</code> – Run PHP CodeSniffer</li>
<li><code>npm run lint:php:fix</code> – Fix PHP coding standards issues automatically</li>
</ul>
<h3>Running Tests</h3>
After starting the environment with <code>npm run env:start</code>, you can run the tests:
<pre><code>`bash
</code></pre>
npm run test:php 
 `
For multisite tests:
<pre><code>`bash
</code></pre>
npm run test:php:multisite 
 `
<h3>Accessing the Site</h3>
<ul>
<li>Development site: http://localhost:8888</li>
<li>Admin dashboard: http://localhost:8888/wp-admin (admin/password)</li>
<li>Test site: http://localhost:8889</li>
<li>Test admin: http://localhost:8889/wp-admin (admin/password)</li>
</ul>

REST API blocks

Add gutenberg blocks data into the post / page REST API endpoints.

vladanrs

Balada Fix protects your site from unauthenticated abuse of specific WordPress REST API endpoints. Such endpoints (for example the tagDiv theme’s <code>wp-json/tdw/save_css</code>) are often targeted by the “Balada Injector” and similar campaigns to inject malicious scripts.
<ul>
<li>Add one or more REST path patterns in Settings → Balada Fix (one per line).</li>
<li>Only logged-in administrators with the <code>edit_theme_options</code> capability can access those paths.</li>
<li>Unauthenticated or unauthorized requests receive a 403 Forbidden response.</li>
</ul>
Default protected path: <code>tdw/save_css</code> (tagDiv / Newspaper theme vulnerability).

Balada Fix

Blocks unauthenticated access to vulnerable REST paths. Add paths in Settings → Balada Fix. Only admins can use them.

REST API blocks vs Balada Fix