Changeset 37143 for trunk/src/wp-admin/includes/template.php

Timestamp:

03/30/2016 06:20:31 PM (3 years ago)

Author:

nbachiyski

Message:

Add nonce to AJAX action for script compression setting

File:

• trunk/src/wp-admin/includes/template.php (modified) (2 diffs)

trunk/src/wp-admin/includes/template.php

@@ -1790 +1790 @@
 ?>
     <script type="text/javascript">
+    var compressionNonce = <?php echo wp_json_encode( wp_create_nonce( 'update_can_compress_scripts' ) ); ?>;
     var testCompression = {
         get : function(test) {
@@ -1809 +1810 @@
                 };
 
-                x.open('GET', ajaxurl + '?action=wp-compression-test&test='+test+'&'+(new Date()).getTime(), true);
+                x.open('GET', ajaxurl + '?action=wp-compression-test&test='+test+'&_ajax_nonce='+compressionNonce+'&'+(new Date()).getTime(), true);
                 x.send('');
             }