[wp-trac] [WordPress Trac] #24447: Avoid losing data after nonces expire

WordPress Trac noreply at wordpress.org
Wed Jul 29 08:54:29 UTC 2015


#24447: Avoid losing data after nonces expire
-------------------------------+-----------------------------
 Reporter:  azaozz             |       Owner:  iseulde
     Type:  defect (bug)       |      Status:  assigned
 Priority:  normal             |   Milestone:  Future Release
Component:  Administration     |     Version:
 Severity:  normal             |  Resolution:
 Keywords:  needs-patch early  |     Focuses:
-------------------------------+-----------------------------

Comment (by iseulde):

 I know this happens to many people, and I'm sorry to hear that.

 > Is there any reason to not simply output the posted data - especially
 the post content - to the screen if the user hits the "Are you sure you
 want to do this" screen?

 That would not be a good experience. It'd be better to keep the user on
 the same page, and warn them, and maybe disable any submit buttons, if we
 detect nonces that nonces expired through Heartbeat. Or we could, on
 submit, load the same screen again if nonces expired and either offer to
 restore locally saved data, or load that data.

 Even better would be to keep nonces alive, but this seems to need more
 discussion.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/24447#comment:26>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list