Blocked Background Request

Viewing 3 replies - 1 through 3 (of 3 total)
  • wfdave

    (@wfdave)

    4 years, 1 month ago

    Hi @mesmer7,

    The URL fragment ?wpacu_check_urls=https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,300,300italic,40 shouldn’t trigger any XSS rules.

    Can you expand the traffic row to see the entire URL? Currently there’s three dots at the end of the URL, so I can’t see the whole URL.

    It’s possible that another plugin on the editor page is requesting Google Fonts – note that even a CSS file can request google fonts.

    Dave

    Thread Starter mesmer7

    (@mesmer7)

    4 years, 1 month ago

    I think this is it:

    https://www.hypnoticdreams.com/wp-admin/admin-ajax.php?wpacu_check_external_url=

    This just started happening today. But it has happened almost every time I’ve edited a post or product today. I ran a malware scan on my browser, cleared my cache and cookies, and ran a Wordfence scan on the web site. Still can’t identify the cause.

    Thread Starter mesmer7

    (@mesmer7)

    4 years, 1 month ago

    It took a couple of hours of experimenting, but I finally managed to eliminate the warning by reverting to a previous version of Asset Cleanup. The current version is 1.3.5.9 (which was released 3 days ago), and I had to revert to 1.3.5.7.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Blocked Background Request’ is closed to new replies.