Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

GH-179 : Implement nonce verification for Ajax calls #285

Merged
merged 10 commits into from
Feb 26, 2024
Merged

GH-179 : Implement nonce verification for Ajax calls #285

Show file tree
Hide file tree
Changes from 2 commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
c383f14
Implement nonce verification for Ajax calls
SohamPatel46 Feb 21, 2024
731d08d
Add missing comma for multiline array
SohamPatel46 Feb 21, 2024
686c118
Add prefixs and remove package-lock json file
SohamPatel46 Feb 22, 2024
27f8296
Build js file using Grunt Uglify
SohamPatel46 Feb 22, 2024
5addcd9
Rename nonce and remove extra escaping
SohamPatel46 Feb 22, 2024
5470b7f
Build transcoder admin js file
SohamPatel46 Feb 22, 2024
34a4e74
Rename ajax parameters
SohamPatel46 Feb 22, 2024
aab36a3
Build transcoder admin js file
SohamPatel46 Feb 22, 2024
2bdb263
Revert block editor build file
SohamPatel46 Feb 22, 2024
6bfb1cc
Remove unused ajax actions
SohamPatel46 Feb 23, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion admin/js/build/rt-transcoder-block-editor-support.build.js
View file
Open in desktop
gagan0123 marked this conversation as resolved.
Show resolved Hide resolved
gagan0123 marked this conversation as resolved.
Show resolved Hide resolved

Large diffs are not rendered by default.

3 changes: 2 additions & 1 deletion admin/js/rt-transcoder-admin.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,8 @@
if ( confirm( rt_transcoder_script.disable_encoding ) ) {

var data = {
action: 'rt_disable_transcoding'
action: 'rt_disable_transcoding',
security: rt_transcoder_script.security_nonce
gagan0123 marked this conversation as resolved.
Show resolved Hide resolved
};

if ( $( this ).next( 'img' ).length === 0 ) {
Expand Down
1 change: 1 addition & 0 deletions admin/rt-transcoder-admin.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -202,6 +202,7 @@ public function enqueue_scripts_styles() {
'enable_encoding' => esc_html__( 'Are you sure you want to enable the transcoding service?', 'transcoder' ),
'something_went_wrong' => esc_html__( 'Something went wrong. Please ', 'transcoder' ) . '<a href onclick="location.reload();">' . esc_html__( 'refresh', 'transcoder' ) . '</a>' . esc_html__( ' page.', 'transcoder' ),
'error_empty_key' => esc_html__( 'Please enter the license key.', 'transcoder' ),
'security_nonce' => esc_js( wp_create_nonce( 'check-transcoder-ajax-nonce' ) ),
gagan0123 marked this conversation as resolved.
Show resolved Hide resolved
);

wp_localize_script( 'rt-transcoder-main', 'rt_transcoder_script', $localize_script_data );
Expand Down
4 changes: 4 additions & 0 deletions admin/rt-transcoder-handler.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1269,6 +1269,7 @@ public function handle_callback() {
* @since 1.0.0
*/
public function hide_transcoding_notice() {
check_ajax_referer( 'check-transcoder-ajax-nonce', 'security', true );
update_site_option( 'rt-transcoding-service-notice', true );
update_site_option( 'rt-transcoding-expansion-notice', true );
echo true;
Expand All @@ -1281,6 +1282,7 @@ public function hide_transcoding_notice() {
* @since 1.0
*/
public function enter_api_key() {
check_ajax_referer( 'check-transcoder-ajax-nonce', 'security', true );
$apikey = transcoder_filter_input( INPUT_GET, 'apikey', FILTER_SANITIZE_FULL_SPECIAL_CHARS );
if ( ! empty( $apikey ) ) {
echo wp_json_encode( array( 'apikey' => $apikey ) );
Expand All @@ -1296,6 +1298,7 @@ public function enter_api_key() {
* @since 1.0.0
*/
public function disable_transcoding() {
check_ajax_referer( 'check-transcoder-ajax-nonce', 'security', true );
update_site_option( 'rt-transcoding-api-key', '' );
esc_html_e( 'Transcoding disabled successfully.', 'transcoder' );
die();
Expand All @@ -1307,6 +1310,7 @@ public function disable_transcoding() {
* @since 1.0.0
*/
public function enable_transcoding() {
check_ajax_referer( 'check-transcoder-ajax-nonce', 'security', true );
update_site_option( 'rt-transcoding-api-key', $this->stored_api_key );
esc_html_e( 'Transcoding enabled successfully.', 'transcoder' );
die();
Expand Down
Loading
Loading