[wp-trac] [WordPress Trac] #62617: Infinitive loop on API req in Block editor after wordpress_logged_in cookie is removed

WordPress Trac noreply at wordpress.org
Fri Nov 29 14:02:08 UTC 2024


#62617: Infinitive loop on API req in Block editor after wordpress_logged_in cookie
is removed
--------------------------+-----------------------------
 Reporter:  mustra        |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Editor        |    Version:  6.7.1
 Severity:  major         |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 When you log into the editor and manually remove the `wordpress_logged_in`
 cookie, any attempt to save or perform actions in the editor will trigger
 an infinite loop of API requests, resulting in a 403 Forbidden response
 with `rest_cookie_invalid_nonce`.

 Even after refreshing the page, these requests will persist, and the only
 way to stop them is to manually log out.

 This infinite loop of requests can spike your CPU to 100%, rendering your
 site unresponsive.

 Tested:
 * PHP - 8.3 and 7.4
 * Nginx
 * Laravel Herd 1.12.0 (locally) also on Ubuntu server 20.04.2 and 20.04.6
 * WP core - 6.1 - 6.7.1 (I didn't go further)
 * Plugin - none installed
 * Theme - twentytwentyfive, twentytwentyfour

 All details can be found here on the video:
 https://drive.google.com/file/d/1SpwEp_kg0okedNBe9yfHpAqMb-
 wQKdPi/view?usp=sharing

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/62617>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list