Changeset 58928

Timestamp:

08/23/2024 11:15:26 PM (6 weeks ago)

Author:

SergeyBiryukov

Message:

Upgrade/Install: Use an empty string for the default “Post via email” password.

This aims to avoid a security warning in Chrome, which could previously be triggered even if the default value is not actually used as a password.

Follow-up to [208], [230], [233], [662], [1599], [1601]

Props adamkheckler, sabernhardt, peterwilsoncc, psykro, petitphp.
Fixes #61332.

Location:

trunk

Files:

• src/wp-admin/includes/schema.php (modified) (1 diff)
• tests/phpunit/tests/admin/includesSchema.php (modified) (3 diffs)

trunk/src/wp-admin/includes/schema.php

@@ -425 +425 @@
         'mailserver_url'                  => 'mail.example.com',
         'mailserver_login'                => 'login@example.com',
-        'mailserver_pass'                 => 'password',
+        'mailserver_pass'                 => '',
         'mailserver_port'                 => 110,
         'default_category'                => 1,

trunk/tests/phpunit/tests/admin/includesSchema.php

@@ -124 +124 @@
                     'mailserver_url'   => 'mail.example.com',
                     'mailserver_login' => 'login@example.com',
-                    'mailserver_pass'  => 'password',
+                    'mailserver_pass'  => '',
                 ),
             ),
@@ -138 +138 @@
                     'mailserver_url'   => 'mail.example.com',
                     'mailserver_login' => 'login@example.com',
-                    'mailserver_pass'  => 'password',
+                    'mailserver_pass'  => '',
                 ),
             ),
@@ -152 +152 @@
                     'mailserver_url'   => 'mail.example.com',
                     'mailserver_login' => 'login@example.com',
-                    'mailserver_pass'  => 'password',
+                    'mailserver_pass'  => '',
                 ),
             ),