[wp-trac] [WordPress Trac] #40146: Starter content can be silently published with other themes

[WordPress Trac]

#40146: Starter content can be silently published with other themes
--------------------------+-----------------------------
 Reporter:  dlh           |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Customize     |    Version:  4.7
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 To replicate on a fresh install, open the Customizer with Twenty Seventeen
 active, preview a different theme, then "Save & Activate" the new theme.
 All of the Twenty Seventeen starter content will be published along with
 the new theme.

 The potentially confusing part of this behavior is that starter content
 might or might not have been in the preview, depending on the new theme.

 For example, in Twenty Eleven, some of the Twenty Seventeen starter
 widgets are visible in the preview, but the menu items aren't.

 I'm not quite sure what the preferred behavior would be in this scenario,
 assuming it's not the current behavior. The attached patch would have
 `WP_Customize_Manager::unsanitized_post_values()` skip any changeset
 values flagged as starter content when the current theme doesn't support
 it, but that might not be desirable.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/40146>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform