[wp-trac] [WordPress Trac] #63371: nonce issue when using WordPress mobile app in parallel with web

[WordPress Trac]

#63371: nonce issue when using WordPress mobile app in parallel with web
-------------------------------+------------------------------
 Reporter:  oferlaor           |       Owner:  (none)
     Type:  defect (bug)       |      Status:  new
 Priority:  normal             |   Milestone:  Awaiting Review
Component:  General            |     Version:  6.8
 Severity:  normal             |  Resolution:
 Keywords:  reporter-feedback  |     Focuses:
-------------------------------+------------------------------
Changes (by johnbillion):

 * keywords:  dev-feedback => reporter-feedback


Comment:

 There isn't inherently this sort of connection between wp-admin and the
 WordPress app. The app uses XML-RPC (or a Jetpack connection) and there's
 no concept of state or being logged into the app in a way that affects the
 wp-admin area. I suspect the issue(s) that you're seeing are caused by a
 plugin on your site, in particular that redirect from admin-ajax.php to
 profile.php isn't something that WordPress core does.

 I appreciate that reproducing or isolating the problem isn't easy. A good
 place to debug this would be to start deactivating plugins one by one on
 your pre-production site until you can identify one or more culprits that
 affect this behaviour.

 I'll leave this open for the time being, but this doesn't sound like a
 core issue.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/63371#comment:14>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform