Search Results for 'amp'

Step by step, how do I set up a Trends column on the righthand side of the pages after the Home page? I can use this information for the three websites I am working on.

Here is the main website with an example of the page it will be on:
https://thevalue.ca/featured/microsoft-unveils-search-engine-powered-by-chatgpt/

I did a search for the documentation and there were no results.

Thanks in advance.
G

Greetings.
Probing one of our websites, running Newspaper 12.2 with WordPress 6.1.1, we have found that there is a security vulnerability on category pages that use infinite loading.

This option:

Theme Panel > Categories > Category global settings > Pagination style > Infinite loading

When this infinite loading is active Newspaper does a POST request to wp-admin/admin-ajax.php with a loopState action to retrieve more posts, and the response is not properly escaped leading to an opening that can allow a reflected cross-site scripting attack.

Here’s an example on your own demo site:

The request:

curl 'https://demo.tagdiv.com/newspaper_pro/wp-admin/admin-ajax.php?td_theme_name=Newspaper&v=12.2' \
-H 'content-type: application/x-www-form-urlencoded; charset=UTF-8' \
-H 'x-requested-with: XMLHttpRequest' \
--data-raw 'action=td_ajax_loop&loopState%5BsidebarPosition%5D=no_sidebar&loopState%5BmoduleId%5D=17&loopState%5BcurrentPage%5D=2&loopState%5Bmax_num_pages%5D=2&loopState%5Batts%5D%5Bcategory_id%5D=1&loopState%5Batts%5D%5Boffset%5D=3&loopState%5Bajax_pagination_infinite_stop%5D=%3Cimg+src%3DBOGUS%3E&loopState%5Bserver_reply_html_data%5D='

The (truncated) response:

HTTP/1.1 200 OK
...
Content-Type: text/html; charset=UTF-8
...
{
"sidebarPosition":"no_sidebar",
"moduleId":"17",
"currentPage":"2",
"max_num_pages":"2",
"atts": {
"category_id":"1",
"offset":"3"
},
"ajax_pagination_infinite_stop":"",
"server_reply_html_data":""
}

Notice how parameters sent for the loopState action via ajax are reflected back to the client unescaped. In this example, the parameter ajax_pagination_infinite_stop was altered to include a bogus image tag instead of a number. Because HTML tags are not being properly escaped when the response JSON is encoded, and combined with the fact that the Content-Type of the response is text/html, this results in the malformed request being reflected towards the client and rendered as HTML, which can be abused by a malicious actor.

A possible solution:

On your td-composer plugin, the function on_ajax_loop of the class td_ajax deals with loopState requests. Currently it returns with the following statement:

die(json_encode($loopState));

Supplying the flag JSON_HEX_TAG to encode the symbols for opening and closing HTML tags seems to mitigate the issue:

die(json_encode($loopState, JSON_HEX_TAG));

Best regards.

Hello,
I would like to integrate the lead block into the content.
Do you have any solution?
Find an example right here:
It should be defined as ad to be integrated.

thanks,
Armand

Hi,

On the author pages, author posts are currently not displaying (despite the fact that I’ve selected the ‘post loop’). See here for an example: https://eydaily.nl/author/redactie-criminalitijd/

Kind regards,

Good morning! Which would be the best settings or which plugins in combination would be useful to free the page faster and from loads? Can also be plugins that have to be paid for. I’m happy with the speed, but would like to optimize even more. I’m currently using the WP Super Cache plugin with the settings they published. thank’s for the Tipps

I just published my website using your theme. The AMP pages used to work fine with the previous theme. Now they don’t look good at all, the images are not showing and the layout is all over the place. Link is https://www.mamapeinao.gr/portokalopita/amp/

I tried to use your mobile theme only for AMP, I followed your instructions from the forum and changed the settings and it made absolutely no difference. None of my changes on the theme panel were applied in the AMP pages.

How can I edit the AMP pages so they look good??

Hi,

am using the mobile theme only for AMP on https://tinyurl.com/wn4239zr. In addition, I’m using cloud templates for the standard site. I’m wondering, how can I bring the AMP as close as possible to the structure of the standard site? In this case especially, I’m trying to integrate the prev-next post element on top and bottom of each post.

Thanks,
eC

Hi,

I have developed my website using Newspaper using cloud templates for various pages such as Single Post Template, category Template, etc. However I am having an issue with this – these templates can be viewed by typing in the respective URL in the address bar. For example, typing the address http://www.sitename.com/single-template displays the single post template. How do I hide these templates/prevent users from viewing them via URL?

1. Is there a way to randomize the search results, or offer a rotation so that paid subscribers have equal number of time that they show on top, 2nd, 3rd etc, while free plans always show after paid subscribers in the search results?

2. Is there a way to change the way the search results are displayed? for example something like this:
https://www.psychologytoday.com/us/therapists?search=new%20york

Thank you