b-rad

Hi Jonathan. Reinstalling didn’t fix it and our host isn’t blocking anything. Is this plugin able to handle the cookie requirement that the target site has?

Try searching before posting. Your topic already has multiple threads about the same topic.

@flizzywp Please don’t make off-topic posts to this thread. It’s only about 400 Bad Request codes. if you’re having a different issue please start a new thread, thanks.

@tomusher I saw that other thread when it hit the forum a month ago. These are new 400, not 403 errors.

• This reply was modified 5 years, 9 months ago by b-rad.

Thanks for the plugin heads up Clayton

What version are you using? This issue was reported about a year ago (https://github.com/Automattic/Co-Authors-Plus/issues/508) but supposedly fixed in the latest update.

Changing from http to https didn’t fix this for me. Full error is:

403 Forbidden
Unknown YouTube API response received.
---
domain: usageLimits
reason: accessNotConfigured
message: Access Not Configured. YouTube Data API has not been used in project 341480211051 before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/youtube.googleapis.com/overview?project=341480211051 then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.
extendedHelp: https://console.developers.google.com/apis/api/youtube.googleapis.com/overview?project=341480211051

Link is broken.

This was reported back in April of 2018 but so far I see no resolution. See https://github.com/Automattic/Co-Authors-Plus/issues/508

@ste_95, yeah see but the thing is, they’re not. Do a diff for yourself and see.

thanks!

Shame. I was hoping to see the plugin owner update this plugin so that this security hole was fixed but it seems to have been ignored. I hope no one in a production environment is using this.

Does the author have any intent to close this security hole?

Thanks Jeremy, I send a support ticket via the link you posted.

Darn. I figured as much. Thanks for the confirmation.

Hmmm, I didn’t think of building a plugin for this, but that would probably work. Little more work than I was hoping for, but as a fallback I could see this working. Thanks for the suggestion.