[wp-trac] [WordPress Trac] #53236: Nonce lifespans are inaccurate and unintuitively affected by timezones

WordPress Trac noreply at wordpress.org
Fri May 21 08:27:31 UTC 2021


#53236: Nonce lifespans are inaccurate and unintuitively affected by timezones
-------------------------------------------------+-------------------------
 Reporter:  lev0                                 |       Owner:  (none)
     Type:  defect (bug)                         |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
                                                 |  Review
Component:  Date/Time                            |     Version:
 Severity:  minor                                |  Resolution:
 Keywords:  has-patch needs-testing needs-unit-  |     Focuses:
  tests                                          |
-------------------------------------------------+-------------------------

Comment (by lev0):

 In that case, I think the finer resolution argument still holds. If you've
 filtered the `nonce_life` down to 1 hour for security, you don't expect it
 to fail after 34 minutes, but 51 is more reasonable.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/53236#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list