[wp-trac] [WordPress Trac] #27536: AJAX call returns all page errors along with plugin's response

WordPress Trac noreply at wordpress.org
Thu Mar 27 00:34:22 UTC 2014


#27536: AJAX call returns all page errors along with plugin's response
------------------------------+-------------------------
 Reporter:  Justin Folvarcik  |       Owner:
     Type:  defect (bug)      |      Status:  closed
 Priority:  normal            |   Milestone:
Component:  General           |     Version:  3.8.1
 Severity:  normal            |  Resolution:  invalid
 Keywords:                    |     Focuses:  javascript
------------------------------+-------------------------

Comment (by nacin):

 Replying to [comment:6 Justin Folvarcik]:
 > Maybe I'm coming off as a bit rude, but that's because I've spent five
 hours now trying to debug this and the only reply I got was "Thanks, but
 no. Please go ask somewhere else for help." I've noticed that another
 plugin we have that uses AJAX is also returning other plugin errors, and
 it's echoing them right onto the page.
 >
 > If what Helen says is true, then the WordPress AJAX has a huge hole in
 it which allows errors to potentially cripple plugins. That seems like a
 pretty big oversight to me, and that in and of itself sounds like
 something that should be addressed. But for now, I suppose I'll relent.
 Sorry for snapping.

 Understood, and no problem. You may be interested in #26262, in that case.
 PHP's display_errors should never be run in production, and many
 developers will log them to a file, so this is only an issue when one of
 those things is not true and when a plugin is doing something particularly
 harmful.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/27536#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list