650e77076d
This changeset does the following: - Explicitly add `403` to `wp_die()` calls for unauthorized actions - Introduce the `network_user_spam_propagate_to_blogs` filter to provide flexibility for developers to control spam status propagation - Use `is_super_admin()` checks for both "spam" and "notspam" actions to prevent unauthorized modification of network administrators - Refine the "notspam" logic to ensure that blog status updates are correctly scoped to the current network - Add related unit tests coverage Props ignatiusjeroe, realloc, johnjamesjacoby, westonruter, mukesh27, pratiknawkar94, anukasha. Fixes #61146. Built from https://develop.svn.wordpress.org/trunk@61660 git-svn-id: http://core.svn.wordpress.org/trunk@60971 1a063a9b-81f0-0310-95a4-ce76da25c4cd