Ticket #39047: 39047.patch

src/wp-includes/script-loader.php

@@ -507 +507 @@
         $scripts->add( 'wp-api', "/wp-includes/js/wp-api$suffix.js", array( 'jquery', 'backbone', 'underscore' ), false, 1 );
         did_action( 'init' ) && $scripts->localize( 'wp-api', 'wpApiSettings', array(
                 'root'          => esc_url_raw( get_rest_url() ),
-                'nonce'         => wp_create_nonce( 'wp_rest' ),
+                'nonce'         => (WP_INSTALLING) ? '' : wp_create_nonce( 'wp_rest' ),
                 'versionString' => 'wp/v2/',
         ) );