"Enqueue a safe version of jQuery" option is using WordPress-adres (URL)

I think this might be a misunderstanding.

The “https://mydomain.com/wp-install” (WordPress address) url being displayed just in front of the checkbox is a bug introduced in iTSec 4.6.2
I guess an iThemes developer has been debugging this option and forgot to remove the debug line … (print site_url();).

The function that checks your current WP jQuery version is get_jquery_version() and the code looks like this:

global $wp_scripts;

if ( ( is_home() || is_front_page() ) && is_user_logged_in() ) {

	// Get the WP built-in version
	$jquery_ver = $wp_scripts->registered['jquery']->ver;

	update_site_option( 'itsec_jquery_version', $jquery_ver );

}

Still feel like there is something important that I’m missing in your post … So not feeling sure I fully get your issue.
What exactly do you do when you get the 404 ?
Did you get the 404 after ticking the checkbox and then Save settings ?

dwinden

Ah, never mind. Just found the problem in the tweaks_wordpress_safe_jquery() function. Indeed using site_url() (twice).

dwinden

What exactly do you do when you get the 404 ?
Did you get the 404 after ticking the checkbox and then Save settings ?

No, but the click here to check again link in the commentary underneath the checkbox also points to the wordpress install folder and not the homepage.

Ah, never mind. Just found the problem in the tweaks_wordpress_safe_jquery() function. Indeed using site_url() (twice).

Cool, so this will be fixed in the next version?

Thanks for your confirmation.

Cool, so this will be fixed in the next version?

Perhaps if iThemes is regularly monitoring this forum and notices this topic …

To draw a bit more attention to this topic you could add [BUG] to the
start position of the ‘Topic title’.

Or conjunctively submit a bug report at:

https://ithemes.com/security/bugs/

dwinden