WordPress.org

Make WordPress Core

Opened 14 months ago

Last modified 8 weeks ago

#44108 reviewing enhancement

wp-admin/load-styles.php returns 200 status code and empty response if required GET parameter is missing or invalid

Reported by: compilenix Owned by:
Milestone: 5.3 Priority: low
Severity: major Version:
Component: Script Loader Keywords: has-patch dev-feedback needs-testing
Focuses: Cc:

Description

It happend to me that a nginx reverse proxy did cut off all query parameters.
This resulted in no CSS and JS for the WP backend / login.

Because the request was manipulated by a (reverse-) proxy i wasn't able to see that the request passed to wordpress was indeed "invalid", beacuse the load[] parameter is required to do something meaningful.

I want to add a small patch which checks if the load[] parameter is set and is formally valid.
In the case where the load[] parameter isn't valid there should be an appropiate indicator that there is something wrong.
With this I'm aiming to make it easier, for a developer or system administrator, to find this kind of "error".

Attachments (1)

44108.diff (2.8 KB) - added by compilenix 14 months ago.

Download all attachments as: .zip

Change History (9)

@compilenix
14 months ago

This ticket was mentioned in Slack in #core-committers by compilenix. View the logs.


14 months ago

#2 @swissspidy
14 months ago

  • Component changed from General to Script Loader
  • Keywords has-patch dev-feedback needs-testing added

#3 @johnbillion
14 months ago

  • Milestone changed from Awaiting Review to 5.0
  • Owner set to johnbillion
  • Priority changed from normal to low
  • Severity changed from trivial to major
  • Status changed from new to reviewing
  • Version trunk deleted

Thanks for the patch, @compilenix, and welcome to WordPress Trac!

#4 @johnbillion
9 months ago

  • Milestone changed from 5.0 to 5.1

#5 @pento
6 months ago

  • Milestone changed from 5.1 to 5.2

Patch needs review and decision.

#6 @desrosj
4 months ago

  • Milestone changed from 5.2 to 5.3

This ticket has not received any attention during the 5.2 cycle. With beta
1 tomorrow, going to punt this to 5.3.

#7 @desrosj
4 months ago

This ticket has not received any attention during the 5.2 cycle. With beta 1 tomorrow, going to punt this to 5.3.

#8 @johnbillion
8 weeks ago

  • Owner johnbillion deleted
Note: See TracTickets for help on using tickets.