From 0beea1c2aa169d04a5b27f5518abf0e41dd0bc9c Mon Sep 17 00:00:00 2001
From: Sam Seay <samueljseay@gmail.com>
Date: Fri, 17 Oct 2025 20:47:45 +0800
Subject: [PATCH] Add the wp_script_module_attributes filter, with a supporting
 test.

---
 src/wp-includes/class-wp-script-modules.php   | 16 +++++++++
 .../tests/script-modules/wpScriptModules.php  | 34 +++++++++++++++++++
 2 files changed, 50 insertions(+)

diff --git a/src/wp-includes/class-wp-script-modules.php b/src/wp-includes/class-wp-script-modules.php
index 932fa984db018..8e907514634cb 100644
--- a/src/wp-includes/class-wp-script-modules.php
+++ b/src/wp-includes/class-wp-script-modules.php
@@ -1,4 +1,5 @@
 <?php
+
 /**
  * Script Modules API: WP_Script_Modules class.
  *
@@ -14,6 +15,7 @@
  * @since 6.5.0
  */
 class WP_Script_Modules {
+
 	/**
 	 * Holds the registered script modules, keyed by script module identifier.
 	 *
@@ -343,6 +345,20 @@ public function print_enqueued_script_modules() {
 			if ( $fetchpriority !== $script_module['fetchpriority'] ) {
 				$args['data-wp-fetchpriority'] = $script_module['fetchpriority'];
 			}
+
+			/**
+			 * Filters the attributes for a script module tag.
+			 *
+			 * @since 6.9.0
+			 *
+			 * @param array  $args          Key-value pairs representing `<script>` tag attributes.
+			 *                              Only the attribute name is added to the `<script>` tag for
+			 *                              entries with a boolean value, and that are true.
+			 * @param string $id            The script module identifier.
+			 * @param array  $script_module The script module data.
+			 */
+			$args = apply_filters( 'wp_script_module_attributes', $args, $id, $script_module );
+
 			wp_print_script_tag( $args );
 		}
 	}
diff --git a/tests/phpunit/tests/script-modules/wpScriptModules.php b/tests/phpunit/tests/script-modules/wpScriptModules.php
index bec646b521bad..90861997a5204 100644
--- a/tests/phpunit/tests/script-modules/wpScriptModules.php
+++ b/tests/phpunit/tests/script-modules/wpScriptModules.php
@@ -1730,4 +1730,38 @@ public static function data_invalid_script_module_data(): array {
 			'string'   => array( 'string' ),
 		);
 	}
+
+	/**
+	 * Tests that the wp_script_module_attributes filter can modify script module attributes.
+	 *
+	 * @ticket 62525
+	 *
+	 * @covers WP_Script_Modules::print_enqueued_script_modules()
+	 */
+	public function test_wp_script_module_attributes_filter() {
+		$this->script_modules->register( 'foo', '/foo.js' );
+		$this->script_modules->enqueue( 'foo' );
+
+		add_filter(
+			'wp_script_module_attributes',
+			function ( $args, $id ) {
+				if ( 'foo' === $id ) {
+					$args['data-custom'] = 'test-value';
+					$args['crossorigin'] = 'anonymous';
+				}
+				return $args;
+			},
+			10,
+			2
+		);
+
+		$enqueued_modules = $this->get_enqueued_script_modules();
+
+		$this->assertArrayHasKey( 'foo', $enqueued_modules );
+		$this->assertSame( 'test-value', $enqueued_modules['foo']['data-custom'] );
+
+		// Check the full output to verify crossorigin attribute
+		$output = get_echo( array( $this->script_modules, 'print_enqueued_script_modules' ) );
+		$this->assertStringContainsString( 'crossorigin="anonymous"', $output );
+	}
 }