[wp-trac] [WordPress Trac] #21111: Make nonce unique for users AND non-users

[WordPress Trac]

#21111: Make nonce unique for users AND non-users
-------------------------+------------------------------
 Reporter:  sc0ttkclark  |       Owner:
     Type:  enhancement  |      Status:  new
 Priority:  normal       |   Milestone:  Awaiting Review
Component:  Security     |     Version:  3.4
 Severity:  normal       |  Resolution:
 Keywords:  has-patch    |
-------------------------+------------------------------
Changes (by toscho):

 * cc: info@… (added)


Comment:

 `$_SERVER[ 'REMOTE_ADDR' ]` can change on every request, it is not
 reliable. And the UA string can contain malicious code, it should be
 escaped.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/21111#comment:6>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software