security problem

  • darkstudio

    (@darkstudio)


    1 year, 5 months ago

    Hi,

    Your module create a file on root named manifest.json.

    This generates 2 major problems:
    1) manifest.jwon is already used for other applications such as PWAs, this file is used by PWA to list all the files needed by the PWA to work.
    2) the manifest.json file created by your module and publicly accessible lists sensitive information that could compromise the security of the wordpress site

    • This topic was modified 1 year, 5 months ago by darkstudio.
Viewing 1 replies (of 1 total)
  • Plugin Support BWU support

    (@duongcuong96)

    1 year, 5 months ago

    Hello @darkstudio
    Thank you for the suggestion, I already forwarded your request to our developers, and will back to you when I have something new.
    For now you can just remove the manifest.json file as a workaround solution.

Viewing 1 replies (of 1 total)
  • The topic ‘security problem’ is closed to new replies.