[wp-trac] [WordPress Trac] #10551: wp_die() triggers block when using ModSecurity Core Rules

WordPress Trac noreply at wordpress.org
Tue Oct 21 20:47:04 UTC 2014


#10551: wp_die() triggers block when using ModSecurity Core Rules
----------------------------------------------+-----------------------
 Reporter:  cstrosser                         |       Owner:  westi
     Type:  defect (bug)                      |      Status:  accepted
 Priority:  low                               |   Milestone:  4.1
Component:  Security                          |     Version:  2.7
 Severity:  normal                            |  Resolution:
 Keywords:  westi-likes has-patch needs-docs  |     Focuses:
----------------------------------------------+-----------------------
Changes (by johnbillion):

 * keywords:  needs-patch dev-feedback westi-likes => westi-likes has-patch
     needs-docs
 * version:  2.8.3 => 2.7
 * milestone:  Future Release => 4.1


Comment:

 I think this is fine because it changes the signature of `wp_die()` but
 doesn't change it for the various die handler callbacks.

 I agree with Joe, `wp_die( int $response_code = 500 )` would mean
 introducing a default error message and we don't want to encourage people
 to avoid providing their own.

 While we're at it, the inline docs for `_default_wp_die_handler()` need
 updating because `$message` can be a `WP_Error`.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/10551#comment:23>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list