api_key leak

  • Resolved Ov3rfly

    (@ov3rfly)


    2 years, 10 months ago

    The $api_key is always sent to error_log without conditions in these files:

    • admin/utils/class-indexnow-url-submission-admin-utils.php line 117
    • includes/class-indexnow-url-submission-activator.php line 25
    error_log($api_key);

    Suggested fix, add WP_DEBUG checks similar to other error_log() calls in plugin or better remove leak of $api_key to error_log completely.

    IndexNow Plugin 1.0.0

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘api_key leak’ is closed to new replies.

Tags