Make WordPress Core

Opened 9 years ago

Closed 9 years ago

Last modified 9 years ago

#41269 closed defect (bug) (fixed)

AJAX hook URL returns 200 when bad/missing action

Reported by: ryanrolds Owned by: johnbillion
Priority: normal Milestone: 4.9
Component: Administration Version:
Severity: normal Keywords: has-patch
Cc: Focuses:

Description

When requesting /wp-admin/admin-ajax.php with an invalid/missing action the response has a status code of 200, which indicates a successful request. A 400 response with a reason would be more fitting.

Attachments (1)

41269.1.patch (511 bytes ) - added by ayeshrajans 9 years ago.

Download all attachments as: .zip

Change History (5)

#1 @ayeshrajans
9 years ago

Hi @ryanrolds. I'm not a core maintainer and I hope one of them will reply to this ticket soon. I also think an appropriate error response code makes sense.

I went ahead and made some changes so that invalid/forged admin-ajax.php requests die with a 400 error code. It will still print 0 to the screen (for compatibility).

Attaching patch. Link to tests: https://travis-ci.org/Ayesh/wordpress-develop/builds/251543055

Last edited 9 years ago by ayeshrajans (previous) (diff)

@ayeshrajans
9 years ago

#2 @johnbillion
9 years ago

  • Component PluginsAdministration
  • Keywords has-patch added
  • Milestone Awaiting Review4.9
  • Owner set to johnbillion
  • Status newreviewing
  • Version 4.8

#3 @johnbillion
9 years ago

  • Resolutionfixed
  • Status reviewingclosed

In 41120:

Administration: Send an appropriate HTTP response status code when an invalid action is passed to admin-ajax.php.

Props ryanrolds, ayeshrajans

Fixes #41269

This ticket was mentioned in Slack in #core by clorith. View the logs.


9 years ago

Note: See TracTickets for help on using tickets.