shell bypass 403
"use strict";var wp;(wp||={}).apiFetch=(()=>{var $=Object.create;var w=Object.defineProperty;var q=Object.getOwnPropertyDescriptor;var G=Object.getOwnPropertyNames;var V=Object.getPrototypeOf,K=Object.prototype.hasOwnProperty;var A=(e,r)=>()=>(r||e((r={exports:{}}).exports,r),r.exports),X=(e,r)=>{for(var a in r)w(e,a,{get:r[a],enumerable:!0})},x=(e,r,a,t)=>{if(r&&typeof r=="object"||typeof r=="function")for(let n of G(r))!K.call(e,n)&&n!==a&&w(e,n,{get:()=>r[n],enumerable:!(t=q(r,n))||t.enumerable});return e};var f=(e,r,a)=>(a=e!=null?$(V(e)):{},x(r||!e||!e.__esModule?w(a,"default",{value:e,enumerable:!0}):a,e)),B=e=>x(w({},"__esModule",{value:!0}),e);var v=A((ge,O)=>{O.exports=window.wp.i18n});var p=A((Pe,j)=>{j.exports=window.wp.url});var ve={};X(ve,{default:()=>g});var P=f(v(),1);function Y(e){let r=(a,t)=>{let{headers:n={}}=a;for(let d in n)if(d.toLowerCase()==="x-wp-nonce"&&n[d]===r.nonce)return t(a);return t({...a,headers:{...n,"X-WP-Nonce":r.nonce}})};return r.nonce=e,r}var R=Y;var Z=(e,r)=>{let a=e.path,t,n;return typeof e.namespace=="string"&&typeof e.endpoint=="string"&&(t=e.namespace.replace(/^\/|\/$/g,""),n=e.endpoint.replace(/^\//,""),n?a=t+"/"+n:a=t),delete e.namespace,delete e.endpoint,r({...e,path:a})},_=Z;var W=e=>(r,a)=>_(r,t=>{let n=t.url,d=t.path,i;return typeof d=="string"&&(i=e,e.indexOf("?")!==-1&&(d=d.replace("?","&")),d=d.replace(/^\//,""),typeof i=="string"&&i.indexOf("?")!==-1&&(d=d.replace("?","&")),n=i+d),a({...t,url:n})}),b=W;var m=f(p(),1);function ee(e){let r=Object.fromEntries(Object.entries(e).map(([a,t])=>[(0,m.normalizePath)(a),t]));return(a,t)=>{let{parse:n=!0}=a,d=a.path;if(!d&&a.url){let{rest_route:s,...o}=(0,m.getQueryArgs)(a.url);typeof s=="string"&&(d=(0,m.addQueryArgs)(s,o))}if(typeof d!="string")return t(a);let i=a.method||"GET",l=(0,m.normalizePath)(d);if(i==="GET"&&r[l]){let s=r[l];return delete r[l],U(s,!!n)}else if(i==="OPTIONS"&&r[i]&&r[i][l]){let s=r[i][l];return delete r[i][l],U(s,!!n)}return t(a)}}function U(e,r){if(r)return Promise.resolve(e.body);try{return Promise.resolve(new window.Response(JSON.stringify(e.body),{status:200,statusText:"OK",headers:e.headers}))}catch{return Object.entries(e.headers).forEach(([a,t])=>{a.toLowerCase()==="link"&&(e.headers[a]=t.replace(/<([^>]+)>/,(n,d)=>`<${encodeURI(d)}>`))}),Promise.resolve(r?e.body:new window.Response(JSON.stringify(e.body),{status:200,statusText:"OK",headers:e.headers}))}}var N=ee;var M=f(p(),1);var re=({path:e,url:r,...a},t)=>({...a,url:r&&(0,M.addQueryArgs)(r,t),path:e&&(0,M.addQueryArgs)(e,t)}),L=e=>e.json?e.json():Promise.reject(e),ae=e=>{if(!e)return{};let r=e.match(/<([^>]+)>; rel="next"/);return r?{next:r[1]}:{}},S=e=>{let{next:r}=ae(e.headers.get("link"));return r},te=e=>{let r=!!e.path&&e.path.indexOf("per_page=-1")!==-1,a=!!e.url&&e.url.indexOf("per_page=-1")!==-1;return r||a},de=async(e,r)=>{if(e.parse===!1||!te(e))return r(e);let a=await g({...re(e,{per_page:100}),parse:!1}),t=await L(a);if(!Array.isArray(t))return t;let n=S(a);if(!n)return t;let d=[].concat(t);for(;n;){let i=await g({...e,path:void 0,url:n,parse:!1}),l=await L(i);d=d.concat(l),n=S(i)}return d},E=de;var ne=new Set(["PATCH","PUT","DELETE"]),ie="GET",le=(e,r)=>{let{method:a=ie}=e;return ne.has(a.toUpperCase())&&(e={...e,headers:{...e.headers,"X-HTTP-Method-Override":a,"Content-Type":"application/json"},method:"POST"}),r(e)},H=le;var h=f(p(),1),ce=(e,r)=>(typeof e.url=="string"&&!(0,h.hasQueryArg)(e.url,"_locale")&&(e.url=(0,h.addQueryArgs)(e.url,{_locale:"user"})),typeof e.path=="string"&&!(0,h.hasQueryArg)(e.path,"_locale")&&(e.path=(0,h.addQueryArgs)(e.path,{_locale:"user"})),r(e)),Q=ce;var I=f(v(),1);var C=f(v(),1);async function F(e){try{return await e.json()}catch{throw{code:"invalid_json",message:(0,C.__)("The response is not a valid JSON response.")}}}async function y(e,r=!0){return r?e.status===204?null:await F(e):e}async function T(e,r=!0){throw r?await F(e):e}function oe(e){let r=!!e.method&&e.method==="POST";return(!!e.path&&e.path.indexOf("/wp/v2/media")!==-1||!!e.url&&e.url.indexOf("/wp/v2/media")!==-1)&&r}var ue=(e,r)=>{if(!oe(e))return r(e);let a=0,t=5,n=d=>(a++,r({path:`/wp/v2/media/${d}/post-process`,method:"POST",data:{action:"create-image-subsizes"},parse:!1}).catch(()=>a<t?n(d):(r({path:`/wp/v2/media/${d}?force=true`,method:"DELETE"}),Promise.reject())));return r({...e,parse:!1}).catch(d=>{if(!(d instanceof globalThis.Response))return Promise.reject(d);let i=d.headers.get("x-wp-upload-attachment-id");return d.status>=500&&d.status<600&&i?n(i).catch(()=>e.parse!==!1?Promise.reject({code:"post_process",message:(0,I.__)("Media upload failed. If this is a photo or a large image, please scale it down and try again.")}):Promise.reject(d)):T(d,e.parse)}).then(d=>y(d,e.parse))},z=ue;var u=f(p(),1),se=e=>(r,a)=>{if(typeof r.url=="string"){let t=(0,u.getQueryArg)(r.url,"wp_theme_preview");t===void 0?r.url=(0,u.addQueryArgs)(r.url,{wp_theme_preview:e}):t===""&&(r.url=(0,u.removeQueryArgs)(r.url,"wp_theme_preview"))}if(typeof r.path=="string"){let t=(0,u.getQueryArg)(r.path,"wp_theme_preview");t===void 0?r.path=(0,u.addQueryArgs)(r.path,{wp_theme_preview:e}):t===""&&(r.path=(0,u.removeQueryArgs)(r.path,"wp_theme_preview"))}return a(r)},k=se;var fe={Accept:"application/json, */*;q=0.1"},me={credentials:"include"},J=[Q,_,H,E];function he(e){J.unshift(e)}var pe=e=>{let{url:r,path:a,data:t,parse:n=!0,...d}=e,{body:i,headers:l}=e;return l={...fe,...l},t&&(i=JSON.stringify(t),l["Content-Type"]="application/json"),globalThis.fetch(r||a||window.location.href,{...me,...d,body:i,headers:l}).then(o=>o.ok?y(o,n):T(o,n),o=>{throw o&&o.name==="AbortError"?o:globalThis.navigator.onLine?{code:"fetch_error",message:(0,P.__)("Could not get a valid response from the server.")}:{code:"offline_error",message:(0,P.__)("Unable to connect. Please check your Internet connection.")}})},D=pe;function we(e){D=e}var c=e=>J.reduceRight((a,t)=>n=>t(n,a),D)(e).catch(a=>a.code!=="rest_cookie_invalid_nonce"?Promise.reject(a):globalThis.fetch(c.nonceEndpoint).then(t=>t.ok?t.text():Promise.reject(a)).then(t=>(c.nonceMiddleware.nonce=t,c(e))));c.use=he;c.setFetchHandler=we;c.createNonceMiddleware=R;c.createPreloadingMiddleware=N;c.createRootURLMiddleware=b;c.fetchAllMiddleware=E;c.mediaUploadMiddleware=z;c.createThemePreviewMiddleware=k;var g=c;return B(ve);})();
if (typeof wp.apiFetch === 'object' && wp.apiFetch.default) { wp.apiFetch = wp.apiFetch.default; }