Make WordPress Core


Ignore:
Timestamp:
06/06/2020 09:58:55 AM (5 years ago)
Author:
SergeyBiryukov
Message:

Comments: Ensure that unmoderated comments won't be search indexed.

After a comment is submitted, only allow a brief window where the comment is live on the site.

Props jonkolbert, ayeshrajans, Asif2BD, peterwilsoncc, imath, audrasjb, jonoaldersonwp, whyisjake, SergeyBiryukov.
Merges [47887] and [47889] to the 5.2 branch.
See #49956.

Location:
branches/5.2
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/5.2

  • branches/5.2/src/wp-includes/class-wp.php

    r46479 r47917  
    404404        if ( is_user_logged_in() ) {
    405405            $headers = array_merge( $headers, wp_get_nocache_headers() );
     406        } elseif ( ! empty( $_GET['unapproved'] ) && ! empty( $_GET['moderation-hash'] ) ) {
     407            // Unmoderated comments are only visible for one minute via the moderation hash.
     408            $headers['Expires']       = gmdate( 'D, d M Y H:i:s', time() + MINUTE_IN_SECONDS );
     409            $headers['Cache-Control'] = 'max-age=60, must-revalidate';
    406410        }
    407411        if ( ! empty( $this->query_vars['error'] ) ) {
Note: See TracChangeset for help on using the changeset viewer.