[wp-trac] [WordPress Trac] #16483: Visibility: password-protected exposes multiple pages

WordPress Trac noreply at wordpress.org
Thu Oct 6 15:22:47 UTC 2016


#16483: Visibility: password-protected exposes multiple pages
--------------------------------------------------+--------------------
 Reporter:  monkeyhouse                           |       Owner:
     Type:  defect (bug)                          |      Status:  new
 Priority:  normal                                |   Milestone:  4.7
Component:  Security                              |     Version:  3.0.4
 Severity:  normal                                |  Resolution:
 Keywords:  dev-feedback needs-testing has-patch  |     Focuses:
--------------------------------------------------+--------------------
Changes (by helen):

 * keywords:  dev-feedback needs-testing has-patch close => dev-feedback
     needs-testing has-patch


Comment:

 I'm personally fine with breaking existing behavior - it is very
 unexpected (i.e. a bug) and nothing in screen help or even the codex warns
 you about the shared password behavior. I think people who are using it on
 purpose are likely to know WP fairly well and can install a plugin to
 restore it - the worst that happens in the meantime to their readers is
 they re-enter that same password which is ostensibly a known password.

 If we don't change it, I think we need a review of copy around this
 feature, so still wouldn't close the ticket.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/16483#comment:22>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list