Changeset 17262

Timestamp:

01/11/2011 10:42:22 PM (14 years ago)

Author:

nacin

Message:

Add nonces to instances where the list table display() method is overridden. see #16188.

Location:

trunk/wp-admin/includes

Files:

• class-wp-comments-list-table.php (modified) (2 diffs)
• class-wp-theme-install-list-table.php (modified) (1 diff)
• class-wp-themes-list-table.php (modified) (1 diff)

trunk/wp-admin/includes/class-wp-comments-list-table.php

@@ -267 +267 @@
         extract( $this->_args );
 
+        wp_nonce_field( "fetch-list-" . get_class( $this ), '_ajax_fetch_list_nonce' );
+
         $this->display_tablenav( 'top' );
 
@@ -534 +536 @@
     function display( $output_empty = false ) {
         extract( $this->_args );
+
+        wp_nonce_field( "fetch-list-" . get_class( $this ), '_ajax_fetch_list_nonce' );
 ?>
 <table class="<?php echo implode( ' ', $this->get_table_classes() ); ?>" cellspacing="0" style="display:none;">

trunk/wp-admin/includes/class-wp-theme-install-list-table.php

@@ -127 +127 @@
 
     function display() {
+
+        wp_nonce_field( "fetch-list-" . get_class( $this ), '_ajax_fetch_list_nonce' );
 ?>
         <div class="tablenav top">

trunk/wp-admin/includes/class-wp-themes-list-table.php

@@ -85 +85 @@
 
     function display() {
+
+        wp_nonce_field( "fetch-list-" . get_class( $this ), '_ajax_fetch_list_nonce' );
 ?>
         <div class="tablenav top">