Changeset 50255

Timestamp:

02/08/2021 09:37:34 PM (17 months ago)

Author:

ocean90

Message:

Block Editor: Use a unique name for the nonce of the custom fields toggle form.

Avoids a browser warning for having two elements with a non-unique id #_wpnonce on the post edit screen.

See #23165.
Fixes #51483.
Props vandestouwe, Mista-Flo.

Location:

trunk/src/wp-admin

Files:

• includes/post.php (modified) (1 diff)
• post.php (modified) (1 diff)

trunk/src/wp-admin/includes/post.php

@@ -2304 +2304 @@
     </form>
     <form id="toggle-custom-fields-form" method="post" action="<?php echo esc_attr( admin_url( 'post.php' ) ); ?>">
-        <?php wp_nonce_field( 'toggle-custom-fields' ); ?>
+        <?php wp_nonce_field( 'toggle-custom-fields', 'toggle-custom-fields-nonce' ); ?>
         <input type="hidden" name="action" value="toggle-custom-fields" />
     </form>

trunk/src/wp-admin/post.php

@@ -340 +340 @@
 
     case 'toggle-custom-fields':
-        check_admin_referer( 'toggle-custom-fields' );
+        check_admin_referer( 'toggle-custom-fields', 'toggle-custom-fields-nonce' );
 
         $current_user_id = get_current_user_id();