From 2ca21c444e810e5f6101a0d01eb4fa6c9014fa16 Mon Sep 17 00:00:00 2001
From: Weston Ruter <weston@xwp.co>
Date: Wed, 12 Jul 2017 22:51:40 +0000
Subject: [PATCH] REST API: Remove `_wpnonce` value from being used in hashed
 oEmbed proxy cache key.

Amends [40628].
Props r-a-y, westonruter.
See #40450.
Fixes #41048.

Built from https://develop.svn.wordpress.org/trunk@41035


git-svn-id: http://core.svn.wordpress.org/trunk@40885 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-includes/class-wp-oembed-controller.php | 1 +
 wp-includes/version.php                    | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/wp-includes/class-wp-oembed-controller.php b/wp-includes/class-wp-oembed-controller.php
index d825c415d2..e6dae0670d 100644
--- a/wp-includes/class-wp-oembed-controller.php
+++ b/wp-includes/class-wp-oembed-controller.php
@@ -159,6 +159,7 @@ final class WP_oEmbed_Controller {
 		$args = $request->get_params();
 
 		// Serve oEmbed data from cache if set.
+		unset( $args['_wpnonce'] );
 		$cache_key = 'oembed_' . md5( serialize( $args ) );
 		$data = get_transient( $cache_key );
 		if ( ! empty( $data ) ) {
diff --git a/wp-includes/version.php b/wp-includes/version.php
index 1524968e92..c1e9abdd38 100644
--- a/wp-includes/version.php
+++ b/wp-includes/version.php
@@ -4,7 +4,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '4.9-alpha-41034';
+$wp_version = '4.9-alpha-41035';
 
 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.