Changeset 47887 for trunk/src/wp-includes/class-wp.php

Timestamp:

06/02/2020 08:10:02 PM (4 years ago)

Author:

whyisjake

Message:

Comments: Ensure that unmoderated comments won't be search indexed.

After a comment is submitted, only allow a brief window where the comment is live on the site.

Fixes #49956.
Props: jonkolbert, ayeshrajans, Asif2BD, peterwilsoncc, imath, audrasjb, jonoaldersonwp, whyisjake.

File:

• trunk/src/wp-includes/class-wp.php (modified) (1 diff)

trunk/src/wp-includes/class-wp.php

@@ -405 +405 @@
         if ( is_user_logged_in() ) {
             $headers = array_merge( $headers, wp_get_nocache_headers() );
+        } elseif ( ! empty( $_GET['unapproved'] ) && ! empty( $_GET['moderation-hash'] ) ) {
+            // Unmoderated comments are only visible for one minute via the moderation hash.
+            $headers['Expires']       = gmdate( 'D, d M Y H:i:s', time() + MINUTE_IN_SECONDS );
+            $headers['Cache-Control'] = 'max-age=60, must-revalidate';
         }
         if ( ! empty( $this->query_vars['error'] ) ) {