Change notice text when wpnonce is missing

[mastermind]

Each security-relevant request in the WP admin requires a "nonce" to be present, which is embedded into a form or attached to a URL. If the wpnonce is missing, WP asks, if the user really intends to perform the requested action. So far so good.

Now, I realize that in my test installation, the buttons "Yes" and "No" are missing. WP only asks "Are you sure you want to do this?".

Reproducable with a direct call to calling ​http://example.org/wp-admin/update-core.php?action=do-core-upgrade.

Tested with r78666.

[filosofo]

You can't have the buttons because they're vulnerable to a CSRF attack (see here: #5838 ). Perhaps the text should be changed from "are you sure?" to something else.

[mastermind]

If this is so, then perhaps it should behave like in all the other situations (which explains why I couldn't reproduce it by deleting the _wpnonce from a URL): Simply say that the action has failed.

[janeforshort]

Punting to be evaluated in next development cycle due to time constraints.

[solarissmoke]

#15394 has a patch and is tagged for 3.2