[wp-trac] [WordPress Trac] #42477: Cannot save theme customizer changes if nonce_life value is filtered in the active theme

[WordPress Trac]

#42477: Cannot save theme customizer changes if nonce_life value is filtered in the
active theme
--------------------------+------------------------------
 Reporter:  figureone     |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Customize     |     Version:  4.8.3
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:  administration
--------------------------+------------------------------

Comment (by dd32):

 This was brought up in #41617 in a different way.

 I think it's OK as-is, and the breakage is expected. If the theme filters
 `nonce_life` globally and not per-action then it's deliberately changing
 how WordPress works, and it's similar to a theme replacing the Customiser
 with it's own version.

 There's also #35188 to pass the nonce name through to aid in per-action
 filtering.

 If you have a link to a theme (public, or paid) that triggers this, I'd be
 interested, feel free to post here or DM me on slack (@dd32)

 > I think the best solution here may be to remove the nonce_life filter
 Personally I think the filter should be removed, or at least changed to
 only allow increasing the lifetime.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/42477#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform