simple banner inserting post content into its script
-
This issue came to my attention because I have a plugin that detects unprotected email addresses on the site. It cannot protect email addresses that occur within scripts, so this generates a warning.
The simple banner script on our posts (but not pages) includes the entire text of the post. Here is an example of what that script looks like from the page source of a post:
<script type='text/javascript' id='simple-banner-script-js-extra'> /* <![CDATA[ */ var scriptParams = {"version":"2.10.0","hide_simple_banner":"no","simple_banner_position":"","header_margin":"","header_padding":"","simple_banner_text":"Banner text here","pro_version_enabled":"","disabled_on_current_page":"","debug_mode":"","id":"3153","disabled_pages_array":[],"post_object":[{"ID":3153,"post_author":"8","post_date":"2021-05-07 07:30:00","post_date_gmt":"2021-05-07 13:30:00","post_content":"
[ the entire post content was here, but I clipped it out! ]
"is_current_page_a_post":"1","disabled_on_posts":"","simple_banner_font_size":"","simple_banner_color":"#008e9d","simple_banner_text_color":"#ffffff","simple_banner_link_color":"#ffffff","simple_banner_close_color":"","simple_banner_custom_css":"","simple_banner_scrolling_custom_css":"","simple_banner_text_custom_css":"","simple_banner_button_css":"","site_custom_css":"","keep_site_custom_css":"","site_custom_js":"","keep_site_custom_js":"","wp_body_open_enabled":"","wp_body_open":"1","close_button_enabled":"","close_button_expiration":"","close_button_cookie_set":""}; /* ]]> */ </script>
Viewing 2 replies - 1 through 2 (of 2 total)
Viewing 2 replies - 1 through 2 (of 2 total)
- The topic ‘simple banner inserting post content into its script’ is closed to new replies.