Changeset 13885 for sites/trunk/buddypress.org/public_html/wp-content/plugins/buddypress-org/buddypress-dot-org.php

Timestamp:

07/09/2024 12:50:39 AM (12 months ago)

Author:

dufresnesteven

Message:

Buddypress-dot-org: Update action support list.

See: https://meta.trac.wordpress.org/ticket/7695

File:

• sites/trunk/buddypress.org/public_html/wp-content/plugins/buddypress-org/buddypress-dot-org.php (modified) (1 diff)

sites/trunk/buddypress.org/public_html/wp-content/plugins/buddypress-org/buddypress-dot-org.php

@@ -62 +62 @@
     // Allow registered unprivileged admin-ajax.php requests for
     // profiles.wordpress.org to pass through.
-    if (    'profiles.wordpress.org' == $_SERVER['HTTP_HOST']
-            && isset( $_REQUEST['action'] )
-            && has_action( 'wp_ajax_nopriv_' . $_REQUEST['action'] )
+    if (
+        'profiles.wordpress.org' == $_SERVER['HTTP_HOST'] &&
+        isset( $_REQUEST['action'] ) &&
+        (
+            has_action( 'wp_ajax_nopriv_' . $_REQUEST['action'] ) ||
+            in_array( $_REQUEST['action'], [ 'webauthn_preregister', 'webauthn_register', 'webauthn_delete_key', 'rest_nonce' ] )
         )
+    ) {
         return;
+    }
 
     wp_safe_redirect( home_url( '/' ) );