Skip to content

Comments: Accept a stale nonce from the site's own page - #53532

Merged
arcangelini merged 7 commits into
trunkfrom
fix/comments-nonce-same-origin
Oct 13, 2026
Merged

Comments: Accept a stale nonce from the site's own page#53532
arcangelini merged 7 commits into
trunkfrom
fix/comments-nonce-same-origin

Comments: Refuse a same-site check with no headers

a895b71
Select commit
Loading
Failed to load commit list.
JP Launch Control / Test wpcom filename restrictions succeeded Oct 13, 2026 in 1m 9s

Tests passed

Post-Build run #38422435928 for Build run #38420008163

✅ jetpack: All good!
✅ jetpack-mu-wpcom-plugin: All good!

See run #38422435928 for details.

View more details on JP Launch Control