JSONP by hook libraries, and security clarification
-
Hi
- JSONP is still used within your hooks libraries. We actually want to disable JSONP for security reasons, and would like to know if this would affect how your plugin works or will it fallback and still function well?
- Can you suggest any way to prevent any new snippets being created, ideally from wp-config, unless the a directive is toggled to “true” ? Use case, we’re disallowing file edits and any updates or installs from wpconfig for security reasons. However using this really useful plugin is actually a direct pipeline to bedlam if we’re ever compromised. So I wanted to know if there is a way to make it impossible to make additional snippets or edit existing ones (essentially null edits and creation) unless we explicitly want to. If not seems my only option is to enqueue muplugins.
Appreciate feedback in advance
Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
You must be logged in to reply to this topic.