Bypass wp_safe_remote_get()?

Question

I have a PHP(Laravel) application that pushes data to WooCommerce through the WooCommerce REST API, everything works except for images. I was able to pin this down to wp_safe_remote_get() and $args['reject_unsafe_urls'].

I had found a way around this, but I cannot recall where I found it. I seem to remember a hook in functions.php that turned off this feature. It wasn't recommended, but it is the only recourse.

Can anyone help me out? Or does anyone have another solution? I'm only pushing URLs from an application I made from the same server.

Code Example from External Application

$this->woocommerce->post('products', ['product' => $book_data_array])

where $this->woocommerce is an instance of the WooCommerce API.

and $book_data_array is an array of data. For an example of the data arra, see: 'http://woocommerce.github.io/woocommerce-rest-api-docs/wp-api-v1.html#create-a-product'

The only thing that doesn't work is images coming from the same server, which is a WordPress issue and has been confirmed as much by a WooCommerce dev. WordPress doesn't allow downloads from the same origin without an override.

Answer 1

This is the fix I found.

function turn_off_reject_unsafe_urls($args) {
    $args['reject_unsafe_urls'] = false;

    return $args;
}

add_filter( 'http_request_args', 'turn_off_reject_unsafe_urls');

Answer 2

A safer way to archive the same result since WP 5.1, is to use http_request_reject_unsafe_urls filter:

function performize_turn_off_reject_unsafe_urls($ret,$url) 
{
    //here you can use regex or anything you want to check the url 
    
    if($url==='https://urltowhitelist')
        $ret = false;

    return $args;
}

add_filter( 'http_request_reject_unsafe_urls', 'performize_turn_off_reject_unsafe_urls',10,2 );

Also http_request_args use 2 parameters so if you want to use http_request_args you can do it in this way:

function turn_off_reject_unsafe_urls($args,$url) {
 if($url==='https://urltowhitelist')
    $args['reject_unsafe_urls'] = false;

    return $args;
}

add_filter( 'http_request_args', 'turn_off_reject_unsafe_urls',10,2);