#15922 closed defect (bug) (fixed)
WP_MS_Themes_List_Table plural
| Reported by: |
|
Owned by: |
|
|---|---|---|---|
| Milestone: | 3.1 | Priority: | normal |
| Severity: | minor | Version: | |
| Component: | Security | Keywords: | needs-patch |
| Focuses: | Cc: |
Description
Currently, the plural is set to 'plugins'. This is a hack to avoid duplicating CSS.
The problem is that the plural is used for generating the nonce too.
The attached patch limits the hack to only the CSS class, allowing the correct nonce to be generated and checked.
Attachments (2)
Change History (15)
#4
@
15 years ago
I hesitated to add the styles, since I think it would be better if we had a single, generic 'themesorplugins' class (with a better name obviously).
#5
follow-up:
↓ 6
@
15 years ago
Decision from scribu, JohnONolan and me. Keep the .plugins class and add instead of the .themes class a more generic class name, which we will use for the plugins and themes list. Proposals for a name?
(Sitenote: We need to find a way to deprecate CSS.)
#6
in reply to:
↑ 5
@
15 years ago
Replying to ocean90:
Decision from scribu, JohnONolan and me. Keep the .plugins class and add instead of the .themes class a more generic class name, which wil will use for the plugins and themes list. Suggestions?
Fine by me.
#7
@
15 years ago
Per IRC discussion, we're going with the simple, conservative 15922.diff patch and whatever nonce fixes that requires.
#9
@
15 years ago
The 'bulk-themes' nonce is already set in /network/themes.php but it doesn't seem to be checked anywhere. If it were, there would be some errors, without this patch.
#11
@
15 years ago
- Keywords needs-patch added; has-patch removed
- Resolution fixed deleted
- Status changed from closed to reopened
As stated above, the nonce check is missing.
Can we not just add themes to the CSS file in the relevant places too?