• Resolved Abigailm

    (@abigailm)


    Here’s the problem: I run a website that is directory with several hundred listings. Each listing may include a link to an external web site. Links are set up as target=”_blank” (to open a new window.

    However, on one listing, I noticed that the link did not work, and clicking produced a javascript-type error message (in a popup box) that said, “This content failed to load.”) This problem went away if I temporarily coded a different web url – so the problem was specific to he URL in the link.

    To test, I disabled Wordfence and as soon as I did that, the link worked again. When I re-enabled Wordfence, the same problem recurred.

    Disabling the Wordfence firewall didn’t help — only if I fully disabled Wordfence.

    I ran a Gravity Scan of the website, and it seemed fine except for a yellow-bulletin “Medium” security notice that a private file was exposed – but that was a false positive. (I checked and the URL of the “private” file link was clearly a public page, linked from the site menu — so false alarm). I also ran a Securi scan and site was clean there as well. So the site doesn’t have malware.

    I was not previously aware that Wordfence would do anything to block user access to outbound links on a site. I certainly can see the value of that to protect against sites with malware…. but not when it creates false positives–especially in a case such as here where the service our site provides depends on the ability to include active links on listings.

    So question 1: What aspect of Wordfence is causing this? I assume that the website must be blacklisted in some sort of database that Wordfence uses — but how do I address this problem?

    Question 2: How do I disable whatever is causing this problem with this particular link on my site? I certainly don’t want to disable Wordfence entirely – but is there is an option or setting that will avoid this problem? I tried disabling all these options:

    __Scan file contents for malicious URLs

    __ Scan posts for known dangerous URLs and suspicious content

    But it didn’t seem to make any difference. Still get the same error when clicking the link.

Viewing 4 replies - 1 through 4 (of 4 total)
  • Hi abigailm,
    Please try to disable “Monitor Background Requests for False Positives” on both “Front” and “Admin Panel” in (Wordfence > Firewall) then re-check this issue.

    Thanks.

    Thread Starter Abigailm

    (@abigailm)

    I tried that and it it didn’t change anything — Wordfence continues to block/disable the link the website on the page.

    I am not sure why disabling the monitor background requests option would help in any case. My problem is NOT that the link is being reported as a “false positive”, it is that Wordfence is actively preventing site visitors from clicking on a legitimate link within the body of a post — and there does not seem to be a way to correct that behavior.

    However, I am no longer certain whether Wordfence is causing the problem. When I tested before posting this thread, it seemed that the problem was resolved when I deactivated wordfence (but not when I merely disabled the firewall) — but in testing again today the problem seems to persist even with wordfence disabled. It seems to be specific to this one URL — and I can work around it by creating a shortcut link tied to a redirect from another URL (the equivalent of a tinyurl link) — so there is something about the string within that particular URL that is creating a probem… but again, at this poitnt it is not at all clear whether Wordfence is the source of the problem.

    This line “This content failed to load” exist in the script we use in admin ajax watcher, that’s why I thought about disabling background requests monitoring would help in narrowing down this issue, but it doesn’t seem to be the case.

    Did you try disabling other installed plugins and re-checking this issue?

    Thanks.

    Thread Starter Abigailm

    (@abigailm)

    I have tested with disabling the plugins that I thought could potentially cause the error, but have not yet gone the full route of disabling all plugins because I would need to take the site offline in order to test any plugins that impact front end display and site function- (so that will have wait for an appropriate time).

    I’ll mark this as “resolved” for now and come back if find out anything more– or if the problem crops up with any other links.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘False positive – Wordfence blocking linked site (?)’ is closed to new replies.