[wp-trac] Re: [WordPress Trac] #2846: Failed nonce check with javascript disabled on Edit Post page

WordPress Trac wp-trac at lists.automattic.com
Fri Jun 23 02:45:16 GMT 2006


#2846: Failed nonce check with javascript disabled on Edit Post page
----------------------------+-----------------------------------------------
 Reporter:  masquerade      |        Owner:  anonymous
     Type:  defect          |       Status:  closed   
 Priority:  normal          |    Milestone:  2.0.4    
Component:  Administration  |      Version:  2.0.3    
 Severity:  normal          |   Resolution:  wontfix  
 Keywords:                  |  
----------------------------+-----------------------------------------------
Changes (by markjaquith):

  * resolution:  => wontfix
  * status:  new => closed

Old description:

> When editing a draft or a post, a button is available that says "Delete
> this post". With Javascript disabled, this nonce check will always fail
> because the nonce code is inserted with javascript. This should
> peacefully degrade for users without javascript and allow them to delete
> without seeing the AYS dialogue.

New description:

 When editing a draft or a post, a button is available that says "Delete
 this post". With Javascript disabled, this nonce check will always fail
 because the nonce code is inserted with javascript. This should peacefully
 degrade for users without javascript and allow them to delete without
 seeing the AYS dialogue.

 BTW, verified that this behavior is consistent between 2.0 branch and
 trunk... and it is.

Comment:

 This is desired behavior.  As mdawaffe said, no matter whether you have JS
 on or off, you have to confirm that you want to delete the post.  Absent a
 trash bin, we must keep this dialog to prevent an errant click from
 deleting a post forever.

 The AYS dialog isn't informative, but that's an issue to be dealt with on
 #2734

-- 
Ticket URL: <http://trac.wordpress.org/ticket/2846>
WordPress Trac <http://wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list