Make WordPress Core


Ignore:
Timestamp:
05/16/2023 02:47:21 PM (13 months ago)
Author:
audrasjb
Message:

Media: Prevent CSRF setting attachment thumbnails.

Props martinkrcho, paulkevan, peterwilsoncc, xknown, peterwilsoncc.
Merges [55764] to branch 6.2.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/6.2/src/wp-includes/media.php

    r55318 r55769  
    45294529        'captions'          => ! apply_filters( 'disable_captions', '' ),
    45304530        'nonce'             => array(
    4531             'sendToEditor' => wp_create_nonce( 'media-send-to-editor' ),
     4531            'sendToEditor'           => wp_create_nonce( 'media-send-to-editor' ),
     4532            'setAttachmentThumbnail' => wp_create_nonce( 'set-attachment-thumbnail' ),
    45324533        ),
    45334534        'post'              => array(
Note: See TracChangeset for help on using the changeset viewer.