Compare commits
1
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
19831cd2f3 |
+1
-2
@@ -1053,8 +1053,7 @@ and closed the one remaining documented security gap.
|
||||
- First phase of the "full admin takeover" initiative: Posts, Pages, Media
|
||||
Library, Users, and Comments no longer redirect to a separate
|
||||
`admin.php?page=...` URL — they now hijack their native screens in place
|
||||
(`ScreenHijack.php`, registered via `HijackedNativePages.php`), the same
|
||||
approach the original uixpress reference plugin used. WordPress's
|
||||
(`ScreenHijack.php`, registered via `HijackedNativePages.php`). WordPress's
|
||||
`load-{page}.php` hook fires before the native screen prints anything, so
|
||||
Aurora buffers and discards the native output and mounts its own Vue page
|
||||
in its place — the URL never changes, so there's no separate slug that can
|
||||
|
||||
+2
-2
@@ -287,8 +287,8 @@ URL with no rewrite needed.
|
||||
|
||||
**Plugins is the one exception, deliberately left on the old redirect
|
||||
mechanism** — `plugins.php` prints output in a way that can't be cleanly
|
||||
buffered (confirmed by the old uixpress reference plugin's own abandoned
|
||||
attempt at hijacking it the same way). It still has a real
|
||||
buffered (confirmed via a prior abandoned attempt at hijacking it the same
|
||||
way). It still has a real
|
||||
`aurora-admin-plugins` submenu under `plugins.php` and its own
|
||||
`redirect_native_pages()` branch in `SubApps.php`.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user