Changeset 50255

Timestamp:

02/08/2021 09:37:34 PM (6 years ago)

Author:

ocean90

Message:

Block Editor: Use a unique name for the nonce of the custom fields toggle form.

Avoids a browser warning for having two elements with a non-unique id #_wpnonce on the post edit screen.

See #23165.
Fixes #51483.
Props vandestouwe, Mista-Flo.

Location:

trunk/src/wp-admin

Files:

• includes/post.php (modified) (1 diff)
• post.php (modified) (1 diff)

trunk/src/wp-admin/includes/post.php

@@ -2304 +2304 @@
         </form>
         <form id="toggle-custom-fields-form" method="post" action="<?php echo esc_attr( admin_url( 'post.php' ) ); ?>">
-                <?php wp_nonce_field( 'toggle-custom-fields' ); ?>
+                <?php wp_nonce_field( 'toggle-custom-fields', 'toggle-custom-fields-nonce' ); ?>
                 <input type="hidden" name="action" value="toggle-custom-fields" />
         </form>

trunk/src/wp-admin/post.php

@@ -340 +340 @@
 
         case 'toggle-custom-fields':
-                check_admin_referer( 'toggle-custom-fields' );
+                check_admin_referer( 'toggle-custom-fields', 'toggle-custom-fields-nonce' );
 
                 $current_user_id = get_current_user_id();