[wp-trac] [WordPress Trac] #20024: WP_Ajax_Response / send() / extra data retrieved

[WordPress Trac]

#20024: WP_Ajax_Response / send() / extra data retrieved
-------------------------------+--------------------
 Reporter:  arena              |       Owner:  arena
     Type:  defect (bug)       |      Status:  new
 Priority:  normal             |   Milestone:  3.4
Component:  General            |     Version:  3.3.1
 Severity:  normal             |  Resolution:
 Keywords:  reporter-feedback  |
-------------------------------+--------------------
Changes (by nacin):

 * milestone:  Awaiting Review => 3.4


Comment:

 Looks legit to me in the case where WP_Ajax_Response is used outside of
 the standard admin-ajax.php handler. We took this into account for
 check_ajax_referer(), see [19801/trunk/wp-includes/pluggable.php], but not
 for this, see [19801/trunk/wp-includes/class-wp-ajax-response.php].

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/20024#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software