WordPress.org
Get WordPress

Make WordPress Core

Changeset 58319


Ignore:
Timestamp:
06/04/2024 06:28:47 AM (4 months ago)
Author:
audrasjb
Message:

Upgrade/Install: Remove the download authenticity message from Core/Plugins/Themes updates.

This changeset deactivates the download authenticity message by disabling package signature verification, at least until software signing is fully implemented on wordpress.org. The provided message had no actionability and only led to more support.

Props jipmoors, afercia, bridgetwillard, s0what, rajinsharwar, audrasjb, johnbillion, peterwilsoncc.
Fixes #47315.

Location:
trunk/src/wp-admin/includes
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • trunk/src/wp-admin/includes/class-core-upgrader.php

    r56174 r58319  
    122122        }
    123123
    124         $download = $this->download_package( $current->packages->$to_download, true );
     124        $download = $this->download_package( $current->packages->$to_download, false );
    125125
    126126        /*

  • trunk/src/wp-admin/includes/class-wp-upgrader.php

    r58128 r58319  
    829829         * to an existing local file, it will be returned untouched.
    830830         */
    831         $download = $this->download_package( $options['package'], true, $options['hook_extra'] );
     831        $download = $this->download_package( $options['package'], false, $options['hook_extra'] );
    832832
    833833        /*
Note: See TracChangeset for help on using the changeset viewer.