fix: don't show url for non-public posts

phpstan.neon.dist

@@ -12,3 +12,8 @@ parameters:
             message: '#Access to an undefined property Corcel\\Model\\Post[a-zA-Z0-9::a-zA-Z]#'
         -
             message: '#Function get_field not found.#'
+        -
+            identifier: function.impossibleType
+            path: src/Traits/HasMeta.php
+            count: 1
+

src/PostData.php

@@ -256,7 +256,7 @@ public function hasThumbnail(): bool
 
 	public function url(): string
 	{
-		if (null === $this->id) {
+		if (null === $this->id || ! is_post_publicly_viewable($this->id)) {
 			return '';
 		}
 

tests/src/PostDataTest.php

@@ -28,14 +28,33 @@
 		'return' => 'https://example.com/hello-world',
 	]);
 
+	\WP_Mock::userFunction('is_post_publicly_viewable', [
+		'args' => [1],
+		'return' => true,
+	]);
+
 	expect($this->postData->url())->toBe('https://example.com/hello-world');
 });
 
+it('returns an empty string when post is not publicly viewable', function () {
+	\WP_Mock::userFunction('is_post_publicly_viewable', [
+		'args' => [1],
+		'return' => false,
+	]);
+
+	expect($this->postData->url())->toBe('');
+});
+
 it('returns an empty string when url does not exist', function () {
 	\WP_Mock::userFunction('get_permalink', [
 		'args' => [1],
 		'return' => false,
 	]);
 
+	\WP_Mock::userFunction('is_post_publicly_viewable', [
+		'args' => [1],
+		'return' => true,
+	]);
+
 	expect($this->postData->url())->toBe('');
 });