[wp-trac] [WordPress Trac] #29999: update post overwrites slug if current_user is contributor

WordPress Trac noreply at wordpress.org
Thu Apr 1 18:22:23 UTC 2021


#29999: update post overwrites slug if current_user is contributor
------------------------------------+------------------------------
 Reporter:  jnhghy                  |       Owner:  (none)
     Type:  defect (bug)            |      Status:  new
 Priority:  normal                  |   Milestone:  Awaiting Review
Component:  Posts, Post Types       |     Version:  4.0
 Severity:  minor                   |  Resolution:
 Keywords:  has-patch dev-feedback  |     Focuses:
------------------------------------+------------------------------

Comment (by helpingcat):

 Is the behavior here expected? From the code comment here, it looks
 intentional, but it'd be great if we could clarify for folks why we check
 for this. (For example, is this security related?)

 https://github.com/WordPress/wordpress-
 develop/blob/22e2fce9032535f6b8826656c2ce6a765092af8e/src/wp-
 includes/post.php#L3898-L3908

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/29999#comment:18>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list