Changes from trunk/wp-includes/class-wp-customize-manager.php at r21070 to branches/3.4/wp-includes/class-wp-customize-manager.php at r21136

File:

• branches/3.4/wp-includes/class-wp-customize-manager.php (modified) (4 diffs)

branches/3.4/wp-includes/class-wp-customize-manager.php

@@ -18 +18 @@
     protected $controls = array();
 
+    protected $nonce_tick;
+
     protected $customized;
 
@@ -309 +311 @@
      */
     public function customize_preview_init() {
+        $this->nonce_tick = check_ajax_referer( 'preview-customize_' . $this->get_stylesheet(), 'nonce' );
+
         $this->prepare_controls();
 
@@ -363 +367 @@
         );
 
+        if ( 2 == $this->nonce_tick ) {
+            $settings['nonce'] = array(
+                'save' => wp_create_nonce( 'save-customize_' . $this->get_stylesheet() ),
+                'preview' => wp_create_nonce( 'preview-customize_' . $this->get_stylesheet() )
+            );
+        }
+
         foreach ( $this->settings as $id => $setting ) {
             $settings['values'][ $id ] = $setting->js_value();
@@ -469 +480 @@
             die;
 
-        check_ajax_referer( 'customize_controls-' . $this->get_stylesheet(), 'nonce' );
+        check_ajax_referer( 'save-customize_' . $this->get_stylesheet(), 'nonce' );
 
         // Do we have to switch themes?