Skip to content

Comments: Accept a stale nonce from the site's own page - #53532

Merged
arcangelini merged 7 commits into
trunkfrom
fix/comments-nonce-same-origin
Oct 13, 2026
Merged

Comments: Accept a stale nonce from the site's own page#53532
arcangelini merged 7 commits into
trunkfrom
fix/comments-nonce-same-origin

Comments: Refuse a same-site check with no headers

a895b71
Select commit
Loading
Failed to load commit list.
JP Launch Control / WordPress.com Tests succeeded Oct 13, 2026 in 5m 47s

Passed! 249479-ghe-Automattic/wpcom

WordPress.com Tests run 19964538 - 249479-ghe-Automattic/wpcom

Tests have passed. See 249479-ghe-Automattic/wpcom for details.

View more details on JP Launch Control