WP-API / WP-API

		$this->assertErrorResponse( 'rest_upload_no_content_disposition', $response, 400 );

	}

	public function test_create_item_bad_md5_header() {

		wp_set_current_user( $this->author_id );

		$request = new WP_REST_Request( 'POST', '/wp/v2/media' );

		$request->set_header( 'Content-Type', 'image/jpeg' );

		$request->set_header( 'Content-Disposition', 'attachment; filename=canola.jpg' );

		$request->set_header( 'Content-MD5', 'abc123' );

		$request->set_body( file_get_contents( $this->test_file ) );

		$response = $this->server->dispatch( $request );

		$this->assertErrorResponse( 'rest_upload_hash_mismatch', $response, 412 );

	}

	public function test_create_item_with_files_bad_md5_header() {

		wp_set_current_user( $this->author_id );

		$this->assertErrorResponse( 'rest_invalid_param', $response, 400 );

	}

	public function test_create_item_alt_text() {

		wp_set_current_user( $this->author_id );

		$request = new WP_REST_Request( 'POST', '/wp/v2/media' );

		$request->set_header( 'Content-Type', 'image/jpeg' );

		$request->set_header( 'Content-Disposition', 'attachment; filename=canola.jpg' );

		$request->set_body( file_get_contents( $this->test_file ) );

		$request->set_param( 'alt_text', 'test alt text' );

		$response = $this->server->dispatch( $request );

		$attachment = $response->get_data();

		$this->assertEquals( 'test alt text', $attachment['alt_text'] );

	}

	public function test_create_item_unsafe_alt_text() {

		wp_set_current_user( $this->author_id );

		$this->assertEquals( 'test alt text', $attachment['alt_text'] );

	}

	public function test_create_item_unsafe_alt_text() {

		wp_set_current_user( $this->author_id );

		$request = new WP_REST_Request( 'POST', '/wp/v2/media' );

		$request->set_header( 'Content-Type', 'image/jpeg' );

		$request->set_header( 'Content-Disposition', 'attachment; filename=canola.jpg' );

		$request->set_body( file_get_contents( $this->test_file ) );

		$request->set_param( 'alt_text', '<script>alert(document.cookie)</script>' );

		$response = $this->server->dispatch( $request );

		$attachment = $response->get_data();

		$this->assertEquals( '', $attachment['alt_text'] );

	}

	public function test_update_item() {

		wp_set_current_user( $this->editor_id );

		$this->check_user_data( $userdata, $data, 'edit', $data['_links'] );

	}

	public function test_get_items_with_edit_context_without_permission() {

		//test with a user not logged in

		$request = new WP_REST_Request( 'GET', '/wp/v2/users' );

		$request->set_param( 'context', 'edit' );

		$response = $this->server->dispatch( $request );

		$this->assertEquals( 401, $response->get_status() );

		//test with a user logged in but without sufficient capabilities; capability in question: 'list_users'

		wp_set_current_user( $this->editor );

		$request = new WP_REST_Request( 'GET', '/wp/v2/users' );

		$request->set_param( 'context', 'edit' );

		$response = $this->server->dispatch( $request );

		$this->assertEquals( 403, $response->get_status() );

	}

	public function test_get_items_unauthenticated_only_shows_public_users() {

		$request = new WP_REST_Request( 'GET', '/wp/v2/users' );

		$this->assertEquals( 403, $response->get_status() );

	}

	public function test_create_comment_require_login() {

		wp_set_current_user( 0 );

		update_option( 'comment_registration', 1 );

		$request = new WP_REST_Request( 'POST', '/wp/v2/comments' );

		$request->set_param( 'post', $this->post_id );

		$response = $this->server->dispatch( $request );

		$this->assertEquals( 401, $response->get_status() );

		$data = $response->get_data();

		$this->assertEquals( 'rest_comment_login_required', $data['code'] );

	}

	public function test_create_comment_two_times() {