Skip to content

Add my.woo.ai to known Calypso origins #47181

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
p-jackson merged 2 commits into from
Feb 18, 2026
+6 −0
Merged

Add my.woo.ai to known Calypso origins #47181

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
b65e065
Add my.woo.ai to known Calypso origins
p-jackson Feb 18, 2026
aa1e58f
typo
p-jackson Feb 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions projects/packages/jetpack-mu-wpcom/changelog/DOTMSD-1094-calypso-origins
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
Significance: patch
Type: changed

Calypso Origins: Add my.woo.ai and my.woo.localhost to known origins.
2 changes: 2 additions & 0 deletions projects/packages/jetpack-mu-wpcom/src/utils.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -89,6 +89,8 @@ function wpcom_get_calypso_origin() {
'https://wordpress.com',
'http://my.localhost:3000',
'https://my.wordpress.com',
'http://my.woo.localhost:3000',
'https://my.woo.ai',
Comment on lines +92 to +93
Copy link

Copilot AI Feb 18, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider adding unit tests for the wpcom_get_calypso_origin function to verify that the new origins are properly recognized and that invalid origins are correctly rejected. This would help prevent regressions if the allowlist is modified in the future.

Copilot uses AI. Check for mistakes.
Comment on lines +92 to +93
Copy link

Copilot AI Feb 18, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The wpcom_get_calypso_origin() function validates origins for security purposes but lacks test coverage. Consider adding unit tests to verify that:

  • Only allowed origins are accepted
  • Disallowed origins fall back to the default 'https://wordpress.com'
  • The strict comparison in in_array() works correctly

This would help prevent regressions when adding or modifying allowed origins.

Copilot uses AI. Check for mistakes.
);
return in_array( $origin, $allowed, true ) ? $origin : 'https://wordpress.com';
}
Expand Down