Merge pull request #485 from wpengine/bug-fix-logging-nonce-issue

chore:  Added nonce for the detail page for the download link.

Author: colinmurphy

.changeset/curly-phones-look.md

@@ -0,0 +1,5 @@
+---
+"@wpengine/wpgraphql-logging-wordpress-plugin": patch
+---
+
+chore:  Added nonce for the detail page for the download link.

plugins/wpgraphql-logging/src/Admin/View/Templates/WPGraphQLLoggerView.php

@@ -2,6 +2,8 @@
 
 declare(strict_types=1);
 
+use WPGraphQL\Logging\Admin\ViewLogsPage;
+
 /**
  * Log detail view template.
  *
@@ -17,13 +19,15 @@
 		<h1><?php esc_html_e( 'Log Entry', 'wpgraphql-logging' ); ?></h1>
 		<a href="
 		<?php
+		$wpgraphql_logging_download_nonce = wp_create_nonce( ViewLogsPage::ADMIN_PAGE_DOWNLOAD_NONCE . '_' . $log->get_id() );
 		echo esc_url(
 			admin_url(
 				sprintf(
-					'admin.php?page=%s&action=%s&log=%d',
+					'admin.php?page=%s&action=%s&log=%d&_wpnonce=%s',
 					\WPGraphQL\Logging\Admin\ViewLogsPage::ADMIN_PAGE_SLUG,
 					'download',
-					$log->get_id()
+					$log->get_id(),
+					$wpgraphql_logging_download_nonce
 				)
 			)
 		);