Make WordPress Core

Opened 8 years ago

Closed 7 years ago

#44108 closed enhancement (fixed)

wp-admin/load-styles.php returns 200 status code and empty response if required GET parameter is missing or invalid

Reported by: compilenix Owned by: SergeyBiryukov
Priority: low Milestone: 5.3
Component: Script Loader Version:
Severity: major Keywords: has-patch dev-feedback needs-testing
Cc: Focuses:

Description

It happend to me that a nginx reverse proxy did cut off all query parameters.
This resulted in no CSS and JS for the WP backend / login.

Because the request was manipulated by a (reverse-) proxy i wasn't able to see that the request passed to wordpress was indeed "invalid", beacuse the load[] parameter is required to do something meaningful.

I want to add a small patch which checks if the load[] parameter is set and is formally valid.
In the case where the load[] parameter isn't valid there should be an appropiate indicator that there is something wrong.
With this I'm aiming to make it easier, for a developer or system administrator, to find this kind of "error".

Attachments (1)

44108.diff (2.8 KB ) - added by compilenix 8 years ago.

Download all attachments as: .zip

Change History (11)

@compilenix
8 years ago

This ticket was mentioned in Slack in #core-committers by compilenix. View the logs.


8 years ago

#2 @swissspidy
8 years ago

  • Component GeneralScript Loader
  • Keywords has-patch dev-feedback needs-testing added

#3 @johnbillion
8 years ago

  • Milestone Awaiting Review5.0
  • Owner set to johnbillion
  • Priority normallow
  • Severity trivialmajor
  • Status newreviewing
  • Version trunk

Thanks for the patch, @compilenix, and welcome to WordPress Trac!

#4 @johnbillion
8 years ago

  • Milestone 5.05.1

#5 @pento
8 years ago

  • Milestone 5.15.2

Patch needs review and decision.

#6 @desrosj
7 years ago

  • Milestone 5.25.3

This ticket has not received any attention during the 5.2 cycle. With beta
1 tomorrow, going to punt this to 5.3.

#7 @desrosj
7 years ago

This ticket has not received any attention during the 5.2 cycle. With beta 1 tomorrow, going to punt this to 5.3.

#8 @johnbillion
7 years ago

  • Owner johnbillion removed

#9 @SergeyBiryukov
7 years ago

  • Owner set to SergeyBiryukov

#10 @SergeyBiryukov
7 years ago

  • Resolutionfixed
  • Status reviewingclosed

In 45731:

Script Loader: Send a 400 Bad Request status code in load-scripts.php and load-styles.php if the required load[] parameter is not set.

Props compilenix.
Fixes #44108.

Note: See TracTickets for help on using tickets.