[wp-trac] [WordPress Trac] #48656: Views details blocked by SAMEORIGIN

WordPress Trac noreply at wordpress.org
Thu Apr 2 11:11:12 UTC 2026


#48656: Views details blocked by SAMEORIGIN
----------------------------+------------------------------
 Reporter:  sebastienserre  |       Owner:  (none)
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  Awaiting Review
Component:  Plugins         |     Version:  5.3
 Severity:  major           |  Resolution:
 Keywords:  needs-patch     |     Focuses:  multisite
----------------------------+------------------------------
Changes (by makdiahussain):

 * Attachment "48656.diff" added.

 Skip the network admin redirect in plugin-install.php when handling an
 IFRAME_REQUEST (plugin information modal). This prevents the cross-origin
 X-Frame-Options SAMEORIGIN block that occurs on multisite subsites when
 clicking "View Details" on a plugin.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/48656>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list