: str_replace(): Passing null to parameter #2 ($replace) of type array|string is deprecated in
* @output wp-includes/js/wp-auth-check.js
* Shows the authentication form popup.
var parent = $( '#wp-auth-check' ),
form = $( '#wp-auth-check-form' ),
noframe = wrap.find( '.wp-auth-fallback-expired' ),
// Add unload confirmation to counter (frame-busting) JS redirects.
$( window ).on( 'beforeunload.wp-auth-check', function( event ) {
event.originalEvent.returnValue = window.wp.i18n.__( 'Your session has expired. You can log in again from this page or go to the login page.' );
frame = $( '<iframe id="wp-auth-check-frame" frameborder="0">' ).attr( 'title', noframe.text() );
frame.on( 'load', function() {
// Remove the spinner to avoid unnecessary CPU/GPU usage.
form.removeClass( 'loading' );
body = $( this ).contents().find( 'body' );
wrap.addClass( 'fallback' );
parent.css( 'max-height', '' );
if ( body && body.hasClass( 'interim-login-success' ) ) {
parent.css( 'max-height', height + 40 + 'px' );
} else if ( ! body || ! body.length ) {
// Catch "silent" iframe origin exceptions in WebKit
// after another page is loaded in the iframe.
wrap.addClass( 'fallback' );
parent.css( 'max-height', '' );
}).attr( 'src', form.data( 'src' ) );
$( 'body' ).addClass( 'modal-open' );
wrap.removeClass( 'hidden' );
* WebKit doesn't throw an error if the iframe fails to load
* because of "X-Frame-Options: DENY" header.
* Wait for 10 seconds and switch to the fallback text.
wrap.addClass( 'fallback' );
* Hides the authentication form popup.
var adminpage = window.adminpage,
$( window ).off( 'beforeunload.wp-auth-check' );
// When on the Edit Post screen, speed up heartbeat
// after the user logs in to quickly refresh nonces.
if ( ( adminpage === 'post-php' || adminpage === 'post-new-php' ) && wp && wp.heartbeat ) {
wp.heartbeat.connectNow();
wrap.fadeOut( 200, function() {
wrap.addClass( 'hidden' ).css( 'display', '' );
$( '#wp-auth-check-frame' ).remove();
$( 'body' ).removeClass( 'modal-open' );
* Set or reset the tempHidden variable used to pause showing of the modal
* after a user closes it without logging in.
function setShowTimeout() {
window.clearTimeout( tempHiddenTimeout );
tempHiddenTimeout = window.setTimeout(
* Binds to the Heartbeat Tick event.
* - Shows the authentication form popup if user is not logged in.
* - Hides the authentication form popup if it is already visible and user is
* @param {Object} e The heartbeat-tick event that has been triggered.
* @param {Object} data Response data.
* Hides the authentication form popup when the close icon is clicked.
wrap = $( '#wp-auth-check-wrap' );
wrap.find( '.wp-auth-check-close' ).on( 'click', function() {
}).on( 'heartbeat-tick.wp-auth-check', function( e, data ) {
if ( 'wp-auth-check' in data ) {
if ( ! data['wp-auth-check'] && wrap.hasClass( 'hidden' ) && ! tempHidden ) {
} else if ( data['wp-auth-check'] && ! wrap.hasClass( 'hidden' ) ) {