• Hello!

    I’m on WordPress version 6.4.3 using Twenty Twenty-Three theme version 1.3. Whenever I try to save anything in the Styles section of the Editor (including Additional CSS), I get a red bar across the top of the page reading “Saving failed.” If I try again, a second bar appears, and so on. I was able to edit the navigation without issue, however editing the Template section had the same issue (though that seemed to just be the Style section anyway).

    This is my first time on a Block Editor theme, so maybe I’m doing something wrong?

    I tried deactivating all plugins, incognito mode, separate browser – same issue. Any ideas?

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Moderator threadi

    (@threadi)

    Does this only happen when saving the CSS code? Everything else works? Which CSS code are you inserting exactly?

    The message also indicates a server-side error. A look at the error log could show exactly what kind of error has occurred. Your hoster’s support can help you find the error log.

    Thread Starter John Mazz

    (@johnmazz)

    Hi @threadi, thanks for the reply! I’ll check with my webhost to see if there’s any error log from our site.

    So this occurs with any edits to the Style section in the Editor, not just the Additional CSS secion (though it’s there too). Even just using the GUI interface to edit colors or fonts in the Style section presents this error.

    grigb

    (@grigb)

    This is the only mention of this devastating, show-stopping issue I could find.

    Not sure what John (above) discovered, but my logs suggested that saving the “Additional CSS” looks like a SQL injection attack to the firewall on my DreamHost VPS.

    By turning off the “highly recommended” Web Application Firewall in Dreamhost, the problem was “fixed”.

    [Tue May 21 14:20:17.339665 2024] [:error] [pid 462816:tid 140412454508096] [remote REDACTED] [client REDACTED] ModSecurity: Warning. detected SQLi using libinjection with fingerprint ‘f(n)’ [file “/etc/modsecurity/mod_sec3_CRS/REQUEST-942-APPLICATION-ATTACK-SQLI.conf”] [line “65”] [id “942100”] [msg “SQL Injection Attack Detected via libinjection”] [data “Matched Data: f(n) found within ARGS:styles.typography.fontFamily: var(–wp–preset–font-family–inter)”] [severity “CRITICAL”] [ver “OWASP_CRS/3.3.2”] [tag “application-multi”] [tag “language-multi”] [tag “platform-multi”] [tag “attack-sqli”] [tag “paranoia-level/1”] [tag “OWASP_CRS”] [tag “capec/1000/152/248/66”] [tag “PCI/6.5.2”] [hostname “REDACTED”] [uri “/wp-json/wp/v2/global-styles/14”] [unique_id “ZkytoZXBKDcLaggRPyFIvABOi5A”], referer: https://REDACTED/wp-admin/site-editor.php?postType=wp_template&postId=twentytwentyfour%2F%2Fhome&canvas=edit

    • This reply was modified 2 years ago by grigb.
    Thread Starter John Mazz

    (@johnmazz)

    Thank you @grigb for the followup and solution. I haven’t tried to resolve this since my post but if it becomes an issue, I’ll try as you suggested. Thanks!

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘“Saving failed” in Editor’ is closed to new replies.