Merge pull request #1049 from 10up/fix/add-cap-check-to-classifation-preview

(Hardening) Add a cap check before previewing classification of a post.

Author: dkotter

includes/Classifai/Providers/Watson/NLU.php

@@ -250,7 +250,10 @@ public function get_post_classifier_preview_data() {
 			wp_send_json_error( esc_html__( 'Failed nonce check.', 'classifai' ) );
 		}
 
-		$post_id    = filter_input( INPUT_POST, 'post_id', FILTER_SANITIZE_NUMBER_INT );
+		$post_id = filter_input( INPUT_POST, 'post_id', FILTER_SANITIZE_NUMBER_INT );
+		if ( ! current_user_can( 'read_post', $post_id ) ) {
+			wp_send_json_error( esc_html__( 'You do not have permission to preview this post.', 'classifai' ) );
+		}
 		$classifier = new Classifier();
 		$normalizer = new \Classifai\Normalizer();