• Resolved manuluyten

    (@manuluyten)


    As of 2.7.3 /inc/options/common/footer.php is loading a jQuery version from //s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js .
    This is unexpected and is generating Content Security Policy issues in my admin interface.

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Contributor Marko Vasiljevic

    (@vmarko)

    Hello @manuluyten

    Thank you for reaching out and I am happy to help!
    Let me check this and try to replicate the problem and I’ll get back to you with more information

    Thanks!

    Plugin Contributor Marko Vasiljevic

    (@vmarko)

    Hello @manuluyten

    Thank you for your patience.
    This was added in the latest release for the “Join the Newsletter!” section in the footer.
    You can simply ignore this or configure the CSP to allow s3.amazonaws.com in this case.

    Thanks!

    Thread Starter manuluyten

    (@manuluyten)

    Dear Marko,
    Thank you for looking into this.
    I understand the reasoning behind the business decision to add en email subscribe form in your product page.
    However, if you look into the amount of css and js that is loaded from an external location, I believe this is a poor integration.
    Do you really want your product to load such an amount of mailchimp js and css code on every w3tc admin page view? Every person that would subscribe would only subscribe just once and this code is loaded on each and every w3tc admin page visit.
    From a security perspective: you propose to allow the host s3.amazonaws.com to the CSP. This would render the CSP useless since this would allow any code hosted on S3 by any third party. So I do not consider this a solution.
    Kind regards,

    Plugin Contributor Marko Vasiljevic

    (@vmarko)

    Hey @manuluyten

    Thank you for your patience.
    Just to let you know that this will be fixed in the uplcoming release.

    Thank you for taking the time to suggest this and for your patience

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘2.7.3 is loading mailchimp jQuery from aws’ is closed to new replies.