Changeset 39765 for branches/4.3/src/wp-admin/widgets.php

Timestamp:

01/11/2017 01:46:15 AM (9 years ago)

Author:

aaroncampbell

Message:

Add nonce for widget accessibility mode.

Props vortfu.

See #23328.

Merges [39760] to 4.3 branch.

File:

• branches/4.3/src/wp-admin/widgets.php (modified) (1 diff)

branches/4.3/src/wp-admin/widgets.php

@@ -18 +18 @@
 $widgets_access = get_user_setting( 'widgets_access' );
 if ( isset($_GET['widgets-access']) ) {
+    check_admin_referer( 'widgets-access' );
+
     $widgets_access = 'on' == $_GET['widgets-access'] ? 'on' : 'off';
     set_user_setting( 'widgets_access', $widgets_access );