[wp-trac] [WordPress Trac] #42705: Theme editor nonce should be based on the relative file path

WordPress Trac noreply at wordpress.org
Mon Nov 27 03:40:53 UTC 2017


#42705: Theme editor nonce should be based on the relative file path
--------------------------+-----------------
 Reporter:  dd32          |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  5.0
Component:  Editor        |    Version:
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------
 Currently the theme editor nonce is based on the full file path of the
 files, for example:

 {{{
 edit-theme_/www/wordpress/src/wp-
 content/themes/twentyseventeen/style.csstwentyseventeen
 }}}

 It'll make much more sense when debugging code if it's based on the
 relative path, which is how we validate it in the rest of the code:
 {{{
 edit-theme_twentyseventeen_style.css
 edit-theme_twentyseventeen_inc/back-compat.php
 }}}

 Noticed from #42609

--
Ticket URL: <https://core.trac.wordpress.org/ticket/42705>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list