Bug + GDPR issue: cdn.rawgit.com hardcoded in v2.3.1

  • Resolved tamarazambrana

    (@tamarazambrana)


    2 weeks, 2 days ago

    Hi,

    v2.3.1 still has this hardcoded in frontend/class-frontend.php:
    $base_settings[‘clusterImagePath’] = ‘https://cdn.rawgit.com/googlemaps/js-marker-clusterer/gh-pages/images/m’;

    RawGit has been dead since 2019, so the cluster images don’t load — but more importantly, this has triggered a formal warning from our Data Protection Officer. Under GDPR, any third-party CDN requires a Data Processing Agreement, a privacy policy mention, and inclusion in the cookie consent banner. A dead/unknown domain makes that impossible.

    This is likely a GDPR issue for many EU users.

    Thanks

Viewing 6 replies - 1 through 6 (of 6 total)
  • Thread Starter tamarazambrana

    (@tamarazambrana)

    2 weeks, 2 days ago

    Code in the plugin that also calls this CDN

    <script type="text/javascript" id="wpsl-js-js-extra">
    /* <![CDATA[ */
    var wpslLabels = {"preloader":"Suche...","noResults":"Keine Ergebnisse gefunden","moreInfo":"Mehr Informationen","generalError":"Leider ist etwas schiefgelaufen. Bitte versuche es noch einmal","queryLimit":"API Nutzungslimit erreicht","directions":"Anfahrt","noDirectionsFound":"Es konnte keine Route zwischen Start- und Zielort gefunden werden.","startPoint":"Startort","back":"Zur\u00fcck","streetView":"Stra\u00dfenansicht","zoomHere":"Zoom hier","copyright":"Powered by Google, 2026 Google"};
    var wpslGeolocationErrors = {"denied":"The application does not have permission to use the Geolocation API.","unavailable":"Location information is unavailable.","timeout":"The geolocation request timed out.","generalError":"An unknown error occurred."};
    var wpslSettings = {"apiVersions":{"autocomplete":"legacy"},"startMarker":"","markerClusters":"1","streetView":"0","autoComplete":"0","autoLocate":"1","autoLoad":"0","markerEffect":"bounce","markerStreetView":"0","markerZoomTo":"1","newWindow":"0","resetMap":"0","directionRedirect":"1","phoneUrl":"0","clickableDetails":"1","moreInfoLocation":"info window","mouseFocus":"0","templateId":"default","maxResults":"150","searchRadius":"250","distanceUnit":"km","geoLocationTimeout":"7500","ajaxurl":"https://www.desitin.de/wp-admin/admin-ajax.php","language":"de","mapControls":"\u003Cdiv id=\"wpsl-map-controls\" \u003E\u003Cdiv class=\"wpsl-icon-direction\"\u003E\u003Cspan\u003E\ue800\u003C/span\u003E\u003C/div\u003E\u003C/div\u003E","storeMarker":"blue2x.png","mapType":"roadmap","mapTypeControl":"0","zoomLevel":"3","zoomControls":"0","cameraControl":"","fullscreen":"0","startLatlng":"53.629036,9.949775","autoZoomLevel":"15","scrollWheel":"1","controlPosition":"left","url":"https://www.desitin.de/wp-content/plugins/wp-store-locator/","markerIconProps":{"scaledSize":"24,35","origin":"0,0","anchor":"12,35"},"storeUrl":"1","maxDropdownHeight":"300","enableStyledDropdowns":"1","mapTabAnchor":"wpsl-map-tab","mapTabAnchorReturn":"","gestureHandling":"auto","directionsTravelMode":"DRIVING","runFitBounds":"1","clusterZoom":"0","clusterSize":"0","clusterImagePath":"https://cdn.rawgit.com/googlemaps/js-marker-clusterer/gh-pages/images/m","mapStyle":"","categoryIds":"22","excludeStartFromCluster":"1"};
    //# sourceURL=wpsl-js-js-extra
    /* ]]> */
    </script>
    Plugin Author Tijmen Smit

    (@tijmensmit)

    2 weeks, 2 days ago

    Hi,

    WPSL v3 will use the new cluster marker styles, but the current v2 path still works for me. When I enable the marker clusters they work just fine ( https://cdn.rawgit.com/googlemaps/js-marker-clusterer/gh-pages/images/m1.png is loaded ). It does have a redirect set on it.

    v3 will also have a build in GDPR check option, but otherwise plugins like Borlabs Cookie are also supported. Users will have agree to loading Google Maps before the plugin runs.

    Thread Starter tamarazambrana

    (@tamarazambrana)

    2 weeks, 2 days ago

    Hi @tijmensmit,

    Thank you for your previous response regarding the marker cluster images.

    We are using Borlabs Cookie to handle user consent before loading Google Maps, however we have a concern raised by our Data Protection Officer regarding the external resource being loaded from cdn.rawgit.com.

    Since rawgit.com was shut down in October 2018, there are no clear or up-to-date documents on how the data received by whatever service is currently behind that URL is being processed. This makes it difficult for us to comply with GDPR requirements, as we cannot establish a Data Processing Agreement (DPA) with an entity that no longer officially exists.

    Could you let us know if you have an approximate timeline for the release of v3, which you mentioned will use the new cluster marker styles? In the meantime, we will look into possible workarounds on our end.

    Thank you in advance.

    Plugin Author Tijmen Smit

    (@tijmensmit)

    2 weeks, 2 days ago

    I didn’t test it, but you should be able to use the wpsl_js_settings filter to change the clusterImagePath to a local url path ( self hosted ) where you stored the different cluster marker images ( m1.png to m5.png ). Then it will no longer make a request to an external source.

    I hope to release a public beta for the v3 update in the next weeks, the final 3.0 release all depends on the feedback to the beta version.

    Plugin Author Tijmen Smit

    (@tijmensmit)

    2 weeks, 2 days ago

    add_filter( 'wpsl_js_settings', 'custom_js_settings' );

    function custom_js_settings( $settings ) {

        $settings['clusterImagePath'] = 'https://yourdomain.com/path/to/clustermarkerimages/m';

        return $settings;
    }

    Add this to the functions.php inside your active theme filder, fix the domain + path and it should load them locally.

    Thread Starter tamarazambrana

    (@tamarazambrana)

    2 weeks, 2 days ago

    Hi @tijmensmit

    Thank you very much. It works 🙂 I had tried one that Claude gave me, but it didn’t work. This one works and removes all the code that called this URL. Thank you very much again

Viewing 6 replies - 1 through 6 (of 6 total)

You must be logged in to reply to this topic.