Nonce confirmation not informative.
|Reported by:||mdawaffe||Owned by:||anonymous|
|Severity:||normal||Keywords:||nonce bg|has-patch bg|2nd-opinion|
The current confirmation message is just a Yes/No without any information about what's happening. Trying to write code that would tell the user exactly what's happening in this dialog would be expensive especially considering that this dialog will only rarely be seen.
We can, however, give some context.
The attached includes admin-header.php (and admin-footer.php) in the confirmation screen and tweaks the menu and submenu identifiers in a few files so that the confirmation is always displayed with the right menu highlighting and the right submenu.
The patch calls a lot more code and a lot more hooks than the current dialog does, which may be something to think about with regard to security.