[wp-trac] [WordPress Trac] #37266: AJAX uploads fail to complete successfully when a cookie named "action" exists

[WordPress Trac]

#37266: AJAX uploads fail to complete successfully when a cookie named "action"
exists
--------------------------+-----------------------------
 Reporter:  pembo13       |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:  4.5.3
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 When a user has a cookie named "action", AJAX uploads to `/wp-admin/async-
 upload.php` fail to define `DOING_AJAX` because the check `'upload-
 attachment' === $_REQUEST['action']` since $_REQUEST includes $_COOKIES.

 As a result, calling `wp_die()` at the end of
 `wp_ajax_upload_attachment()` results in the standard Wordpress error HTML
 being appended to the response, and an HTTP 500 error code being returned.

 I'm currently seeing this being triggered by the "Calls To Action" plugin.
 See http://support.inboundnow.com/support/topic/calls-to-action-breaking-
 wordpress-image-upload/

 This probably affects all versions of Wordpress.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/37266>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform