Pretty sure bad actors are burdening my site with 20,000+ weekly uncached requests at /wp-json/tdw/save_css. I’ve seen guidance to disable Live CSS in td-composer.php to alleviate this issue. What functionality will I lose when I disable this? The ability to make CSS edits in the TD Composer?
Hello,
Please block /wp-json/tdw/save_css
If an attacker wants to target this URL /wp-json/tdw/save_css they can do so. Even if the website uses a different theme, the attacker can still try that URL. We could add an option to be able to enable/disable the Live CSS, it will be considered. But for now in order to remove it this can only be done with a modification to the composer plugin. I think that all that removing it requires is to comment this line of code – https://prnt.sc/RtwvL5Nc4ikR -> https://prnt.sc/ymZmhdUfp57U But as I mentioned, the attacker can still try to access the URL.
Thank you!
