Changeset 11596

Timestamp:

02/23/2022 09:23:46 AM (3 years ago)

Author:

dd32

Message:

Bad Requests: Use wp_die() on admin requests.

File:

• sites/trunk/wordpress.org/public_html/wp-content/mu-plugins/pub/wporg-bad-request.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/mu-plugins/pub/wporg-bad-request.php

@@ -207 +207 @@
     if (
         str_contains( $_SERVER['HTTP_HOST'], 'wordpress.org' ) &&
-        ! defined( 'XMLRPC_REQUEST' ) && ! defined( 'REST_REQUEST' )
+        ! defined( 'XMLRPC_REQUEST' ) && ! defined( 'REST_REQUEST' ) &&
+        ! is_admin() /* admin-ajax, admin-post */
     ) {
         status_header( 400 );