Ticket #31897: customizer-nonce-heartbeat.diff

wp-admin/customize.php

@@ -52 +52 @@
  */
 do_action( 'customize_controls_init' );
 
+//setup heartbeat to keep nonces up to date
+wp_enqueue_script( 'heartbeat' );
+
 wp_enqueue_script( 'customize-controls' );
 wp_enqueue_style( 'customize-controls' );
 

wp-admin/js/customize-controls.js

@@ -2947 +2947 @@
                         };
 
                         /*
+                         * Set up heartbeat to refresh the nonces so that if a user leaves
+                         * a customizer window open beyond the nonce expiration
+                         * saving and previewing will continue to work
+                         */
+                        $(document ).on('heartbeat-send', $.proxy( function( e ) {
+                                this.refreshNonces();
+                        }, this ));
+
+                        /*
                          * Wrap this.refresh to prevent it from hammering the servers:
                          *
                          * If refresh is called once and no other refresh requests are