Changeset 44610

Timestamp:

01/16/2019 03:53:42 AM (6 years ago)

Author:

pento

Message:

Posts: Set a HTTP 403 error when an incorrect post preview nonce is sent.

Props graymouser.
Fixes #43570.

File:

• trunk/src/wp-includes/revision.php (modified) (1 diff)

trunk/src/wp-includes/revision.php

@@ -583 +583 @@
 
         if ( false === wp_verify_nonce( $_GET['preview_nonce'], 'post_preview_' . $id ) ) {
-            wp_die( __( 'Sorry, you are not allowed to preview drafts.' ) );
+            wp_die( __( 'Sorry, you are not allowed to preview drafts.' ), 403 );
         }