David Cole

Thank you!

The CVE record is blank for me, it states, “CVE-YYYY-NNNN must be 4 digits or greater”. The patchstack.com is a false positive unless more detailed information can be supplied. I can assure you I have had several audits and there are no vulnerabilities. All code is escaped, no injects are possible, and NOUNCE security is in place so there is no CSRF.

I’ll be more than happy to adjust, add, or fix but I can’t work with vague none specific informations.

Thanks!

Regards,
David M. Cole, M.Sc. CS, BDes

This is a false positive. You can also help prevent this by installing a CSP in your .htaccess file.

https://content-security-policy.com/examples/htaccess/

https://web.dev/articles/csp

I will look into the %page% and %current_year% etc.

You can mark a post, page, tax, etc as noindex, nofollow, also in settings you can tell it to not include post types in the sitemap.

Click development trunk then you will see all translatable options. Thanks for translating!

I will in my next release.

@plan9 Thanks for the review, and I will look into this. I’m marking it as resolved but this on my list.

@jasminechristina Thank You!