Changeset 13753

Timestamp:

03/08/2024 01:42:55 AM (11 months ago)

Author:

imath

Message:

Only parse heartbeat requests which relates to BuddyPress context

Props Slaffik, needle, espellcaste

Fixes #9099 (branch 12.0)

Location:

branches/12.0/src/bp-core

Files:

• bp-core-catchuri.php (modified) (1 diff)
• bp-core-template-loader.php (modified) (1 diff)

branches/12.0/src/bp-core/bp-core-catchuri.php

@@ -31 +31 @@
     // Only set BuddyPress URI globals for registered Ajax actions.
     if ( ! bp_ajax_action_is_registered( $action ) ) {
+        return;
+    }
+
+    if ( 'heartbeat' === $action && empty( $_REQUEST['data']['bp_heartbeat'] ) ) {
         return;
     }

branches/12.0/src/bp-core/bp-core-template-loader.php

@@ -620 +620 @@
     }
 
+    if ( isset( $_POST['action'] ) && 'heartbeat' === $_POST['action'] && empty( $_POST['data']['bp_heartbeat'] ) ) {
+        return;
+    }
+
     // Prevent doing this again.
     remove_action( 'parse_query', 'bp_parse_ajax_referer_query', 2 );