WordFence crashing page with embedded pocast player.

  • Resolved gaffer.wiles

    (@gafferwiles)


    4 years, 7 months ago

    A WordPress-based site running Divi has a module in it that allows you to insert some code. My Podcast host RedCircle allows its users to embed its own player on outside sites, but when I insert the code. It crashes the page and website completely.

    I deactivated all my plugins on the website and reactivated each one to see what was causing the issue. When I reactivated WordFence the crash occurred again.

    The embedded code is as follows (redacted) <script async defer onload=”redcircleIframe();” src=”https://api.podcache.net/embedded-player/sh/…”></script&gt;

    Any idea what I can do to prevent this. I do not want to deactivate WordFence unless absolutely necessary…

    The page I need help with: [log in to see the link]

Viewing 6 replies - 1 through 6 (of 6 total)

  • Can you check the server error logs to see why the site crashes? Wordfence shouldn’t crash the site because of that. It might block the code from being uploaded but it shouldn’t crash the site. Please let me know what the error logs show.

    Tim

    Thread Starter gaffer.wiles

    (@gafferwiles)

    I will see if I can get the server logs from my hosting company.

    Unfortunately this bulletin board does not accommodate screen shots so I can’t show you what I think is a crash.

    1. The webpage is displayed with all the text and graphics in place, including menus, links, button etc.

    2. I insert the code into the Divi Builder Code module and preview.

    3. Page flashes briefly and the website background texture and the menus appear but all the other graphics and modules are gone and the Divi Builder appears with the error message I posted earlier.

    4. I remove the code module and refresh the page and it displays normally with the RedCircle podcast player in place and working.

    5. I go to the Worpress backend Plugins menu and Deactivate WordFence and go back to the page and reinsert the podcast player page into the Divi code module and refresh and display the page.

    6. The player displays perfectly and plays correctly. I save the page and Reactivate the WordFence plugin and refresh the page and it flashes and displays only the background texture and the basic menu. all other content disappears.

    I don’t think it is a server issue.

    Thread Starter gaffer.wiles

    (@gafferwiles)

    A followup on the issue of the strange behavior of my Divi-based WordPress site WordFence when a podcast player script is embedded:

    I got the following notification from WordFence today and it seems to point to WordFence blocking what it sees as an XSS attack:

    105.233.84.247 (South Africa)

    Blocked for XSS: Cross Site Scripting in POST body: modules=[{“type”:”et_pb_section”,”attrs”:{“_builder_version”:”4.5.1″,”_module_preset”:”default”,”background_…

    Would there be some way to whitelist this particular activity without compromising on WordFence’s protection?

    Have you tried putting the firewall into learning mode and then uploading the script? That should whitelist the action going forward. Can you try that?

    Tim

    Thread Starter gaffer.wiles

    (@gafferwiles)

    I will try that. Thanks!

    Let us know how it goes.

    Tim

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘WordFence crashing page with embedded pocast player.’ is closed to new replies.