Plugin Author
Mehedi
(@imehedidip)
Hi,
I’ve no idea why it’s there. I used fontello.com to generate the icons.
Please let me know if there is anything wrong with that file.
Regards
Andrew Nevins
(@anevins)
WCLDN 2018 Contributor | Volunteer support
So, Mehedi is saying he’s used a CSS generator for the fonts. That’s why there is base64 code there. Can you identify what’s wrong with the code?
No, I can’t actually “identify” anything. I’m just accustomed to reading that encrypted base64 code is bad to see. Sucuri, Wordfence, and a billion other blogs almost always mentions that base64 is never good to have in a file.
I honestly don’t know if it’s “wrong” or “right”.
….because it’s encoded 😉
So, if something is encoded, why? And how is ‘Joe Schmoe’ supposed to know and / or see what the code actually does (wrong or right)? And, shouldn’t the ‘source’ code be open and readable anyways @anevins?
Andrew Nevins
(@anevins)
WCLDN 2018 Contributor | Volunteer support
He doesn’t have to know in detail what the bits of an embedded font mean, nobody knows it. People just assumes it’s safe because it’s just CSS. It’s done that way so that it loads quicker on your site and is generally easier to use. I don’t think there’s reason for alarm just for the reason that it’s base64.
