Excluding nonce from cache

  • Resolved kwjake

    (@kwjake)


    7 years ago

    I’m getting an nonce error when trying to subscribe from the footer on my site. I know this is probably due to autoptimize caching easy forms. I’m able to exclude certain .js scripts from caching, but I’m not sure which script to exclude to resolve this error. Here is the exact message:

    Error: Sorry, the nonce security check didn't pass. Please reload the page and try again. You may want to try clearing your browser cache as a last attempt.

    Searching support says I can just disable nonce, but wouldn’t that be a security risk?

    add_filter( 'yikes-mailchimp-use-nonce-verification', '__return_false' );

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Contributor yikesitskevin

    (@yikesitskevin)

    Hey @kwjake,

    We have a new option in the settings where you can disable the nonce without using a filter. However, as you say, this will disable a layer of security.

    Try removing these scripts from autoptimize:

    • wp-content/plugins/yikes-inc-easy-mailchimp-extender/public/js/form-submission-helpers.min.js
    • wp-content/plugins/yikes-inc-easy-mailchimp-extender/public/js/yikes-mc-ajax-forms.min.js

    Cheers,
    Kevin.

    Thread Starter kwjake

    (@kwjake)

    Thanks @yikesitskevin,

    I’ll give these things a shot. Where is the nonce option located? Can’t seem to find it.

    Plugin Contributor yikesitskevin

    (@yikesitskevin)

    The nonce option is on the main settings page – the same place you enter your API key.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Excluding nonce from cache’ is closed to new replies.

Tags