• Wordfence detects http://track.id in the Simple Podcast Press plugin for the following files.

    /simple-podcast-press/responsive_audio_player/videojs/video.min.js.map
    /simple-podcast-press/responsive_audio_player/videojs/video.js
    /simple-podcast-press/responsive_audio_player/videojs/alt/video.novtt.min.js.map
    /simple-podcast-press/responsive_audio_player/videojs/video.js.map
    /simple-podcast-press/responsive_audio_player/videojs/alt/video.novtt.js

    However in the actual code track.id is the track objects id property.

    Thought you may want to look into why this is being flagged when there’s no http reference.

    Thanks,
    Wil.

    https://wordpress.org/plugins/wordfence/

Viewing 5 replies - 1 through 5 (of 5 total)
  • Hi Will,

    I’ll pass this along to have it looked at.

    -Brian

    Thanks Wil for pointing this out!

    Hi Brian I’m the creator of the Simple Podcast Press plugin.

    The false warnings are being reported on filea that belong to a reputable open source video player library called videojs.com. That library can be found here – https://github.com/videojs

    Please let us know when the false warnings can be removed as we are getting contacted daily by our customers concerned about SPP.

    Thank you!
    Cheers,
    Hani

    Hi Hani,

    Thanks for the info! I’ve opened an internal ticket to have this issue looked into and get it resolved.

    -Brian

    FB1243

    You’re very welcome Brian!

    Just touching base to see if this issue has been resolved. We are still having customers asking us about this.

    Hi Brian. Any updates on this issue?

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘False Positive for Simplepodcastpress plugin’ is closed to new replies.