[wp-trac] [WordPress Trac] #64782: Real-time collaboration awareness state can be mutated by another authorized user

[WordPress Trac]

#64782: Real-time collaboration awareness state can be mutated by another
authorized user
--------------------------------------+------------------------------
 Reporter:  czarate                   |       Owner:  ellatrix
     Type:  defect (bug)              |      Status:  reopened
 Priority:  normal                    |   Milestone:  Awaiting Review
Component:  Editor                    |     Version:  trunk
 Severity:  normal                    |  Resolution:
 Keywords:  has-patch has-unit-tests  |     Focuses:  rest-api
--------------------------------------+------------------------------
Changes (by dd32):

 * status:  closed => reopened
 * resolution:  fixed =>


Comment:

 I'm seeing this warning being triggered on WordPress.org thousands of
 times per 5 minutes:

 > E_WARNING: Undefined array key “wp_user_id” in wp-includes/collaboration
 /class-wp-http-polling-sync-server.php:194

 It looks like `$entry` is:
 {{{
 array (
   'client_id' => 1583....,
   'state' =>
   array (
   ),
   'updated_at' => 1772759838,
 )
 }}}
 or
 {{{
 array (
   'client_id' => 6209....,
   'state' =>
   array (
     'collaboratorInfo' =>
     array (
       'avatar_urls' =>
       array (
         24 => 'https://secure.gravatar.com/...',
         48 => 'https://secure.gravatar.com/...,
         96 => 'https://secure.gravatar.com/...',
       ),
       'browserType' => 'Chrome',
       'enteredAt' => 1772748369812,
       'id' => 227158,
       'name' => 'User Name',
       'slug' => 'userlogin',
     ),
   ),
   'updated_at' => 1772759838,
 )
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/64782#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform