[wp-trac] [WordPress Trac] #46472: Preventing XSS to RCE Scenarios based on Referrer

WordPress Trac noreply at wordpress.org
Wed Mar 13 06:30:39 UTC 2019


#46472: Preventing XSS to RCE Scenarios based on Referrer
-------------------------+------------------------------
 Reporter:  nomanriffat  |       Owner:  (none)
     Type:  enhancement  |      Status:  new
 Priority:  normal       |   Milestone:  Awaiting Review
Component:  General      |     Version:  trunk
 Severity:  normal       |  Resolution:
 Keywords:               |     Focuses:
-------------------------+------------------------------

Comment (by nomanriffat):

 For the 2nd use case, at least the administrator will see a popup and may
 get alerted that something happened which I think is still better than
 injecting administrator account in hidden mode.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/46472#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list