Scripts: Use HTML API to build SCRIPT tags - #10639

Closed

sirreal wants to merge 121 commits into

WordPress:trunkfrom

sirreal:scripts/use-html-api-for-script-tags

Commits on Dec 15, 2025

Auto-escape JavaScript and JSON script tags when necessary
sirreal
committed
4a8ca98
Update ticket number
sirreal
committed
4a28ef2
Fix those lints
sirreal
committed
0bef687
No trailing function commas
sirreal
committed
cdba027
Remove JSON_THROW_ON_ERROR constant
sirreal
committed
ba54ae4
fixup! Remove JSON_THROW_ON_ERROR constant
sirreal
committed
a697e9e

Commits on Dec 16, 2025

Merge branch 'trunk' into html-api/auto-escape-javascript-json
sirreal
committed
2b3d0d0
Remove JSON +json subtype handling
sirreal
committed
8246439
Merge branch 'html-api/auto-escape-javascript-json' into scripts/use-html-api-for-script-tags
sirreal
committed
1b6b4fd
Add test for scripts containing script tags
sirreal
committed
b3e88e8
Update wp_add_inline_script to use HTML API
sirreal
committed
27c6371
Use the tag processor for all the inline script tags
sirreal
committed
deebd54
Remove assertions
sirreal
committed
d78cd35
PICKME: Update Script Modules tests to use assertEqualHTML
sirreal
committed
c29c3d9
Revert "Remove assertions"
sirreal
committed
abeebd6

Commits on Dec 19, 2025

Merge branch 'trunk' into scripts/use-html-api-for-script-tags
sirreal
committed
aaacd6f
Merge branch 'trunk' into html-api/auto-escape-javascript-json
sirreal
committed
3f7f227
Add JS and JSON script tag tests
Copilot
authored
1362451
Fix typo in comment

sirreal
and
westonruter
authored
8d30680
Improve comment
sirreal
committed
3b5ef4e
Clean up and fix tests
sirreal
committed
f8cfdf9
Clean up and improve type/language logic
sirreal
committed
501d201
Merge branch 'html-api/auto-escape-javascript-json' into scripts/use-html-api-for-script-tags
sirreal
committed
253b971
Fix svg SCRIPT tag tests
sirreal
committed
bcc02ae
Add todo on MIME type parsing
sirreal
committed
ea03441
Update since tags 🤞
sirreal
committed
c7d1827
Make is_{javascript,json}_script_tag methods private
sirreal
committed
a134e82
Add language whitespace test
sirreal
committed
d4bd4b3
How'd that extra space get there, remove it!
sirreal
committed
edae8d5
Name search parts
sirreal
committed
02ca3c0
Clean up escaping tests
sirreal
committed
d058a78
Add ignore and todo tags to new private is_*_script_tag functions
sirreal
committed
dfb63af
Improve example comment
sirreal
committed
11f51c9
Update regex comment with named groups
sirreal
committed
a3e0e27
Add details to "other" failure to escape comment
sirreal
committed
288b952
Improve consistency of comment quoting and differentiate types of double quotes
sirreal
committed
a7495dd
Describe JavaScript escaping strategy in detail
sirreal
committed
614916d
Merge branch 'html-api/auto-escape-javascript-json' into scripts/use-html-api-for-script-tags
sirreal
committed
5828382
Describe JavaScript escaping strategy in detail
sirreal
committed
d8c320c
Merge branch 'html-api/auto-escape-javascript-json' into scripts/use-html-api-for-script-tags
sirreal
committed
016a29f
Use the updated_html value in round-trip test
sirreal
committed
369eefc
Merge branch 'html-api/auto-escape-javascript-json' into scripts/use-html-api-for-script-tags
sirreal
committed
d67749d
Revert changes to wp_add_inline_script
sirreal
committed
2869880
Remove debugging assertions
sirreal
committed
d6bfdca
fixup! Revert changes to wp_add_inline_script
sirreal
committed
b7099e4
Switch to assertEqualHTML assertions
sirreal
committed
010a2a2
Update defer/async boolean attributes
sirreal
committed
ab53486
Use Tag Processor in wp_get_script_Tag
sirreal
committed
3ba2267
Add utility for semantically comparing a SCRIPT tag within HTML
sirreal
committed
64a23b7
Use script tag comparison in tests
sirreal
committed
c920821
Remove more async=async and defer=defer
sirreal
committed
dbd9f55
fixup! Use script tag comparison in tests
sirreal
committed
7bef55a
fixup! Add utility for semantically comparing a SCRIPT tag within HTML
sirreal
committed
4333300
fix lint
sirreal
committed
504a928

Commits on Dec 22, 2025

Merge branch 'trunk' into html-api/auto-escape-javascript-json
sirreal
committed
55d4e47
Merge branch 'html-api/auto-escape-javascript-json' into scripts/use-html-api-for-script-tags
sirreal
committed
1c84037
Fix demonstration comment
sirreal
committed
2ef0bf0
Extract and document escaping functions
sirreal
committed
cb6b990
Merge branch 'html-api/auto-escape-javascript-json' into scripts/use-html-api-for-script-tags
sirreal
committed
da28eec
Tweak workaround documentation
sirreal
committed
e399bf6
Add ASCII chart about HTML script tags with original source
sirreal
committed
83c1fab
Improve linking between escapes
sirreal
committed
1872681
Fix comments, typos, lints
sirreal
committed
83ff62f
fixup! Fix comments, typos, lints
sirreal
committed
5979782
fixup! fixup! Fix comments, typos, lints
sirreal
committed
d469ae4
Fix \c -> \r (carriage return) typo
sirreal
committed
402ae9f
Add note about not parsing MIME types for JS script tags
sirreal
committed
6b2c9ba
Add todo comment to is_json_script_tag
sirreal
committed
eef0ccb
Re-order tag name termination chars to match elsewhere
sirreal
committed
71d2686
Fix typo
sirreal
committed
d4693a2

Commits on Dec 29, 2025

Commits on Dec 30, 2025

Commits on Jan 8, 2026

Commits on Jan 9, 2026

Commits on Jan 12, 2026

Merge branch 'trunk' into html-api/auto-escape-javascript-json
sirreal
committed
30d7747
Merge branch 'trunk' into html-api/auto-escape-javascript-json
sirreal
committed
c1c6067
Merge branch 'html-api/auto-escape-javascript-json' into scripts/use-html-api-for-script-tags
sirreal
committed
292614d
Append trailing newline to output HTML not input
sirreal
committed
6a6e1cc
Update dot script to clean up fonts, align labels, etc...

dmsnell
authored and
sirreal
committed
3f1ba32
Update note in `set_modifiable_text()` now that `</script` is allowed
dmsnell
committed
f7715fd
Inline escaping to avoid WPCS-mandated misalignment.
dmsnell
committed
1015ace
Expand the explanation for why other strings are rejected
dmsnell
committed
59ccdc1
Explain that there are non-HTML SCRIPT tags.
dmsnell
committed
ef34aa1
Wording changes to comment.
dmsnell
committed
d018cdf

Commits on Jan 13, 2026

Make escape_javascript_script_contents private
sirreal
committed
c59028e
Merge branch 'trunk' into html-api/auto-escape-javascript-json
sirreal
committed
ae14a44
Tweak some langauge in "other" escaping
sirreal
committed
6a5bc56
fixup! Tweak some langauge in "other" escaping
sirreal
committed
df2f663
Merge branch 'html-api/auto-escape-javascript-json' into scripts/use-html-api-for-script-tags
sirreal
committed
adeb155
Merge branch 'trunk' into scripts/use-html-api-for-script-tags
sirreal
committed
e884759
Merge branch 'trunk' into scripts/use-html-api-for-script-tags
sirreal
committed
8b11027
Add test for behavior of wp_get_inline_script_tag()
sirreal
committed
1af9b2f
Add matching tests for wp_get_script_tag()
sirreal
committed
00c49a5
Merge branch 'script-test-attribute-behavior' into HEAD
sirreal
committed
13141bc
Fix script attribute order and type handling
sirreal
committed
8789ace
Use the force, Jon??
dmsnell
committed
3858d8e
Document suprprising de-duplication
dmsnell
committed
0197abc

Commits on Jan 14, 2026

Merge branch 'trunk' into script-test-attribute-behavior
sirreal
committed
8047003
Merge branch 'script-test-attribute-behavior' into scripts/use-html-api-for-script-tags
sirreal
committed
f2ea738
Merge branch 'trunk' into scripts/use-html-api-for-script-tags
sirreal
committed
1be946e
Add _doing_it_wrong in case script contents are unsafe
sirreal
committed
cea5f04
Improve function documentation
sirreal
committed
67ba19e
Return empty string in case the content is unsafe and cannot be escaped
sirreal
committed
ed73a44
Apply return type description suggestion

sirreal
and
Copilot
authored
faf77e3
Fix language in comments

sirreal
and
westonruter
authored
36537d9

Commits on Jan 15, 2026

Merge branch 'trunk' into scripts/use-html-api-for-script-tags
sirreal
committed
049332a