[wp-trac] [WordPress Trac] #38661: There is no one way of checking the nonce on plugin uninstallation

[WordPress Trac]

#38661: There is no one way of checking the nonce on plugin uninstallation
--------------------------+-----------------------------
 Reporter:  szepe.viktor  |      Owner:
     Type:  enhancement   |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Plugins       |    Version:  4.6.1
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Before the shiny AJAX plugin de/activation and un/installation in the
 registered (register_uninstall_hook) plugin uninstall function we should
 have used `check_admin_referer( 'bulk-plugins' );`

 But now `check_ajax_referer( 'updates' );` works only unless the user has
 disabled JavaScript.

 I think there is no way to use only one function for validating the nonce.
 Please advise.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/38661>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform