Home>Support>Nonce Issue with the New Save Feature in Expanded Mode

Nonce Issue with the New Save Feature in Expanded Mode


I’ve found a potential bug with the new save feature that I wanted to ask about. I spent around an hour in the “Expanded Mode” of the “Site Origin CSS” Plugin, and when I attempted to use the new save feature to save my work, I received a popup from my Localhost install that said “the supplied nonce is invalid.” The same thing will happen if you leave the tab open to go work on something else for an extended period of time.

Since I could not save my work, I copied the few lines of code I had written over to my notes, then clicked the “Expanded Mode” button once more. After this, the code I had written was no longer there. Thankfully, I just pasted the code from my notes to the default Custom CSS menu, and clicked the “Save CSS” button at the top left. I have no problem as a result and know how to get around it in the future, but I thought it would be worth mentioning here.

I’m not too familiar with the term “nonce,”

This is our free support forum. Replies can take several days. If you need fast email support, please purchase a SiteOrigin Premium license.

  1. 2 days, 16 hours ago Andrew Misplon Hi, I Work Here

    Hi Evan

    Thanks for taking the time to report your experience. Apologies for the hassle. I’ve asked our developer Alex to attend and update you once he’s taken a look.

  2. 1 day, 17 hours ago Andrew Misplon Hi, I Work Here

    Hi Evan

    Thanks for the wait.

    We’ve run a test for a few hours. At the moment we’re unable to replicate the issue.

    A nonce is a “number used once” to help protect URLs and forms from certain types of misuse, malicious or otherwise. WordPress nonces aren’t numbers but are a hash made up of numbers and letters. Nor are they used only once, but have a limited “lifetime” after which they expire. During that time period, the same nonce will be generated for a given user in a given context. The nonce for that action will remain the same for that user until that nonce life cycle has completed.

    Nonces “expire” after 24 hours, the session expires (closes the browser), or the user logs out. We’re unsure why the expiry happened while you were working. Apologies for the hassle. I’m glad you didn’t lose any work. We’ll continue to monitor for this issue.

Please log in to post on our forums. Signing up is free.

Get The Most Out of SiteOrigin with SiteOrigin Premium

Find Out More