Check marks are gone

Hello @stilldreaming and thanks for reaching out to us!

Which checkmarks do you mean? Are these the checks on the diagnostic or the WAF?

Thanks!

Thanks for your attention.

I mean all check marks in WordPress. For instance the ones on the left of the pages screen and so on. But also the ones in all sorts of plugins.

I’ve noticed that there is a file load-styles.php that is generated. It seems to be the same if Wordfence is there or not, just the order of lines is a little different. The line for:
input[type=”checkbox”]:checked::before
has a
content: url(data:image/svg+xml; utf8,….
definition.

If I change that in the developer tools of FF to
content: ‘A’
I will see an A where the check marks should be.

It looks like the svg defintion is somehow affected by the presence of WordFence.

Hope this adds more light on matters.

Any way you can share some screenshots of what you are seeing on your end? I would like to review them.

Thanks!

Hi @wfadam,

I don’t see the point in sharing screenshots of the admin side of my site here. It is just as I described it. Everything looks normal, you just can’t see the check marks. Or is there something special you are looking for?

The check marks are there (although not visible), because I can see something when I make changes in the developer tools as described above. And everything functions as if they are there. Somehow they are invisible. I’ve noticed this in 2 sites now. When WordFence is activated the check marks are invisible and as soon as I deactivate WordFence they become visible. Everything is of the latest version: WP 5.6, WF 7.4.14. Even after disabling all plugins and going back to the twentytwelve theme, with only WordFence installed it is there.

Turning off the antivirus tool on the PC makes no difference. The problem is there in Firefox and Edge.

I hope you can help, as this is hindering the normal development of 2 sites now. And I do value proper protection as provided by WordFence very much.

Hi @wfadam,

An update:
I checked some more and noticed that the dashicons weren’t loading. Apparently that was because I added the Content Security Policy headers for font-src and img-src. For now I have deleted them, and I will need to look into this some more to see what will work. For now things are solved, somewhat. It is still a mystery why Wordfence seems to be involved.

If you do find something, let me know!

I wonder if Learning Mode would have resolved it but still doesn’t make sense as to why it would be blocking it.

Thanks again for your information!

Hi @wfadam,

Later I realized that the enigma is bigger than I thought. I have tested this with all plugins (except WordFence) deactivated and just the twentytwelve theme. No caching. No caching on the server either. And no Content Security Policy headers. And it still worked as described: WordFence active: check marks invisible, WordFence deactivated: check marks visible. And that was on 2 sites. On 2 browsers. With and without virus checker on.

The funny thing is that for now I have deactivated the Content Security Policy headers and it all seems to work now. I’ll have to take a deeper look, but for now I am satisfied, as I can work on. Later I’ll have to take a better look as I do want to have Content Security Policy headers when the site goes live.

Thanks for now.

And… if anyone reads this and has some clue as to what is happening: feel free to chime in.