← All changes
|
includes/widgets/Form_Builder/helpers/Upload_Email_File.php
+4
-0
51.1.79
→
51.1.83
View file →
| @@ -256,8 +256,12 @@ | ||
| 256 | 256 | |
| 257 | 257 | /** |
| 258 | 258 | * AJAX handler for generating a fresh form nonce. |
| 259 | 259 | * |
| 260 | + * This nonce is a CSRF token for Form Builder AJAX. It is not authorization | |
| 261 | + * to read or change a submission: payment reuse requires the per-submission | |
| 262 | + * access secret issued when that submission was created. | |
| 263 | + * | |
| 260 | 264 | * Requires a published page that actually contains the Form Builder widget. |
| 261 | 265 | * A bare form_public flag is not accepted. |
| 262 | 266 | * |
| 263 | 267 | * @return void |