Make WordPress Core

Changes between Version 2 and Version 3 of Ticket #50510, comment 4


Ignore:
Timestamp:
06/24/2021 07:16:30 PM (5 years ago)
Author:
chaoix
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #50510, comment 4

    v2 v3  
    66* Adds a browser id to the nonce action to help prevent known hash reuse.
    77* Reject nonces from browsers with no or invalid user agent strings. This will prevent lazy bots from submitting requests.
     8
     9I have had these changes running live on 4 higher traffic sites with no issues. I have not run or made any unit tests for these changes.