WordPress.org
Get WordPress

Make WordPress Core

Opened 13 years ago

Closed 11 years ago

#17398 closed enhancement (fixed)

Logout with ays should still respect redirect_to

Reported by: mitchoyoshitaka's profile mitchoyoshitaka Owned by: mitchoyoshitaka's profile mitchoyoshitaka
Milestone: 3.9 Priority: normal
Severity: minor Version: 2.8.4
Component: Security Keywords: has-patch
Focuses: Cc:

Description

When logging out with a bad nonce, you're taken to the "Are you sure?" page, but even if you were sent there with a redirect_to parameter, this parameter is later ignored when you do choose to log out.

Attachments (1)

17398.diff​ (1.0 KB) - added by mitchoyoshitaka 13 years ago.

Download all attachments as: .zip

Change History (4)

@mitchoyoshitaka
13 years ago

#1 @kurtpayne
13 years ago

  • Cc kpayne@… added
  • Type changed from defect (bug) to feature request
  • Version set to 2.8.4

#2 @nacin
11 years ago

  • Component changed from General to Security
  • Milestone changed from Awaiting Review to 3.9
  • Type changed from feature request to enhancement

#3 @nacin
11 years ago

  • Resolution set to fixed
  • Status changed from new to closed

In 27272:

Keep redirect_to when hitting the log out AYS.

props mitchoyoshitaka for initial patch.
fixes #17398.

Note: See TracTickets for help on using tickets.