Changeset 14775

Timestamp:

03/29/2026 01:30:24 AM (9 hours ago)

Author:

obenland

Message:

Bad Requests: Validate email-share-nonce field in Jetpack Share by Email requests.

Avoids a PHP warning when vulnerability scanners send the nonce as an array.

File:

• sites/trunk/wordpress.org/public_html/wp-content/mu-plugins/pub/wporg-bad-request.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/mu-plugins/pub/wporg-bad-request.php

@@ -216 +216 @@
         'source_f_name',
         'source_name',
+        'email-share-nonce',
     ];