[wp-trac] [WordPress Trac] #36361: check_ajax_referer() lacks a _doing_it_wrong() call when the $action parameter is omitted

WordPress Trac noreply at wordpress.org
Sun Aug 28 17:14:53 UTC 2016


#36361: check_ajax_referer() lacks a _doing_it_wrong() call when the $action
parameter is omitted
-------------------------+--------------------------
 Reporter:  johnbillion  |       Owner:  johnbillion
     Type:  enhancement  |      Status:  closed
 Priority:  normal       |   Milestone:  4.7
Component:  Security     |     Version:  3.2
 Severity:  normal       |  Resolution:  fixed
 Keywords:  has-patch    |     Focuses:
-------------------------+--------------------------
Changes (by johnbillion):

 * owner:   => johnbillion
 * status:  new => closed
 * resolution:   => fixed


Comment:

 In [changeset:"38420"]:
 {{{
 #!CommitTicketReference repository="" revision="38420"
 Security: Trigger a `_doing_it_wrong()` when `check_ajax_referer()` is
 called without its first parameter. This brings it inline with
 `check_admin_referer()`.

 Fixes #36361
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/36361#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list