[wp-trac] [WordPress Trac] #31056: The wp-saving-post cookie should have the secure flag set when appropriate

WordPress Trac noreply at wordpress.org
Wed Sep 9 09:45:25 UTC 2015


#31056: The wp-saving-post cookie should have the secure flag set when appropriate
-------------------------+-------------------------
 Reporter:  johnbillion  |       Owner:
     Type:  enhancement  |      Status:  new
 Priority:  low          |   Milestone:  4.4
Component:  Security     |     Version:
 Severity:  minor        |  Resolution:
 Keywords:  has-patch    |     Focuses:  javascript
-------------------------+-------------------------
Changes (by johnbillion):

 * keywords:  needs-patch => has-patch


Comment:

 [attachment:31056.patch] addresses the `secure` flag when this cookie is
 set both server-side and client-side.

 To test, you can trigger the local autosave in your browser console with
 this:

 `jQuery( 'form#post' ).trigger( 'submit.autosave-local' )`

--
Ticket URL: <https://core.trac.wordpress.org/ticket/31056#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list