[wp-trac] [WordPress Trac] #4221: Allow pure wp_nonce_url urls

WordPress Trac wp-trac at lists.automattic.com
Mon Feb 7 06:45:48 UTC 2011


#4221: Allow pure wp_nonce_url urls
----------------------------+-----------------------------
 Reporter:  filosofo        |       Owner:  anonymous
     Type:  enhancement     |      Status:  closed
 Priority:  normal          |   Milestone:  Future Release
Component:  Administration  |     Version:  2.3
 Severity:  normal          |  Resolution:  fixed
 Keywords:                  |
----------------------------+-----------------------------
Changes (by solarissmoke):

 * keywords:  needs-patch =>
 * status:  new => closed
 * resolution:   => fixed


Comment:

 This was fixed in #4884.

 Replying to [comment:4 crashutah]:
 > My issue happens when I try to create a nonce URL on a redirect to a
 page that includes a bunch of vars.  However, after the redirect, the URL
 has & instead of just & and it interprets amp; as part of the variable
 name (which is obviously a problem).

 This is a separate issue: `wp_nonce_url()` assumes the URL is going to be
 output (this is how it is used everywhere in the core), hence everything
 is HTML-entitied. I suggest using `add_query_arg()` to add the nonce
 manually if you want to use it raw.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/4221#comment:5>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list