Patch code sample: Sensitive Data Exposure vulnerability

patch-code-sample-sensitive-data-exposure.php

<?php

  register_rest_route($this->namespace . '/v1', '/newsletter', array(
      array(
          'methods'             => WP_REST_Server::READABLE,
          'callback'            => array($this, 'get_subscribers_callback'),
          'args'                => array(
              'group_id' => array(
                  'required' => false,
              )
          ),
          'permission_callback' => array($this, 'getSubscribersPermission')
      )
  ));

  * Check user permission
  *
  * @param $request
  *
  * @return bool
  */
  public function getSubscribersPermission($request) {
          return current_user_can('wpsms_subscribers');
  }