« first day (3070 days earlier)      last day (1874 days later) » 

Feeds
Feeds
2:36 AM
WordPress News: WordPress 5.1.1 Security and Maintenance Release
posted on March 12, 2019 by Luke Carbis

WordPress 5.1.1 is now available! This security and maintenance release introduces 10 fixes and enhancements, including changes designed to help hosts prepare users for the minimum PHP version bump coming in 5.2. This release also includes a pair of security fixes that handle how comments are filtered and then stored in the database. With a maliciously […]

 
 
12 hours later…
Michael Ecklund
Michael Ecklund
2:09 PM
Question
Can the nonce be optional in AJAX calls to the REST API?
I've been getting errors saying the nonce header is missing
and it breaks my script...
I'm referring to the default X-WP-Nonce
 
 
2 hours later…
Tom J Nowell
Tom J Nowell
3:54 PM
@MichaelEcklund for authenticated requests, nope, not unless you provide your own authentication mechanism
it's best to just always send it
e.g. for external commands that aren't browser based, you'd need something like OAuth1 or 2 ( stick to 2 )
 
Michael Ecklund
Michael Ecklund
@TomJNowell This is for unauthenticated requests.
I removed the call to x-wp-nonce in my AJAX calls, and all is good now.
 

« first day (3070 days earlier)      last day (1874 days later) »