Skip to content

Jetpack Comments: Chrome prevent a logged in used from posting comments. #38520

@enejb

Description

@enejb

Impacted plugin

Jetpack

Quick summary

When you are a logged in user of your site and Wordpress.com in latest Chrome. You end up with an issue where the user is user is not able to submit a comment.

This happends because when we submit the comment via the invisible form. There request is not done as a logged in user but as a logged out request.

The request fails because the nonce fails on

wp_die( esc_html__( 'Nonce verification failed.', 'jetpack' ), 400 );

This happends because at this point the user is not logged any more when the request is done via the jetpack.wordpress.com iframe.

Steps to reproduce

  1. In Chrome
  2. Login as a user to both .com and the site you are currenly site.
  3. Leave a comment.
  4. You see the nonce error.
Screenshot 2024-07-24 at 2 30 30 PM

A clear and concise description of what you expected to happen.

As a logged in user you should always be able to leave a comment without seeing a nonce error.

What actually happened

Your are not able to leave a comment.

Impact

Many

Available workarounds?

Yes, use a different browser such as Firefox or Edge.

Platform (Simple and/or Atomic)

Atomic, Self-hosted

Logs or notes

Metadata

Metadata

Assignees

Labels

[Plugin] JetpackIssues about the Jetpack plugin. https://wordpress.org/plugins/jetpack/[Type] BugWhen a feature is broken and / or not performing as intended

Type

No type

Projects

Status

Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions