WordPress / WordPress/plugin-check
Plugin "Check it!" button fails silently with nonce error
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 362
- Forks
- 126
- Avg merge
- 1d 23h
- Merged PRs (30d)
- 22
Description
If the tab is left open, and you come back after a while and want to rescan, it can fail.
It will show the spinner for a second and then just disappear, with no feedback.
In the console there are these errors:
Failed to load resource: the server responded with a status of 403 ()
plugin-check-admin.js?=1741816233:83
Error: Invalid nonce
at handleDataErrors (plugin-check-admin.js?=1741816233:334:10)
But there is not feedback for the user as to what's gone wrong.
Perhaps it should just automatically trigger a page reload, and show a message saying security check failed, please try again?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start in plugin-check-admin.js around the button flow and handleDataErrors, then reproduce the rescan after the tab has been idle long enough for the nonce to fail. Trace how the 403 and “Invalid nonce” response are handled; done means the user receives clear feedback, with the proposed reload behavior confirmed if appropriate.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, php
- Domain
- frontend, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 62/100