WordPress.org
Get WordPress

Make WordPress Core

Opened 8 years ago

Closed 8 years ago

Last modified 8 years ago

#43843 closed defect (bug) (fixed)

Set nocache_headers in wp-signup.php

Reported by: herregroen Owned by: SergeyBiryukov
Priority: normal Milestone: 4.9.6
Component: Login and Registration Version: 5.1
Severity: normal Keywords: has-patch
Cc: Focuses: multisite

Description

Currently no cache headers are being set on wp-signup.php.

This can lead to nonces being cached and still being served even when they've become invalid.

nocache_headers(); should be called in this file.

Attachments (1)

signup_cache_headers.patch​ (459 bytes ) - added by herregroen 8 years ago.

Download all attachments as: .zip

Change History (4)

@herregroen
8 years ago

#1 @SergeyBiryukov
8 years ago

  • Milestone Awaiting Review → 4.9.6
  • Owner set to SergeyBiryukov
  • Status new → reviewing

#2 @SergeyBiryukov
8 years ago

  • Resolution → fixed
  • Status reviewing → closed

In 43030:

Login and Registration: Send nocache_headers() on Multisite signup pages.

Props herregroen.
Fixes #43843.

#3 @SergeyBiryukov
8 years ago

In 43031:

Login and Registration: Send nocache_headers() on Multisite signup pages.

Props herregroen.
Merges [43030] to the 4.9 branch.
Fixes #43843.

Note: See TracTickets for help on using tickets.