Hi,
we have Accordion Pro on our site http://www.vpz.hr…the problem is with this site for example…https://www.vpz.hr/zupanijska-uprava/upravni-odjel-za-graditeljstvo-zastitu-okolisa-i-imovinsko-pravne-poslove/
and then tab Oglasna ploča….
on desktop its ok….but on mobile its not…there’s some “custom css” code in front of the actual code that works what I entered in that particular accordion…
that “custom css” code wasnt here before…it just appeared somehow hmm
They said this:
Last wordfence security team alert us to minor security issue for outputting script and style may cause security issue,
we are now using wp_kses function to escape accordion content, which causing strip all style and scripts from 3rd party shortcode,
to solve this issue, third party plugins authors must update their plugin to load style and script to header or footer not via old style via content.
I hope you understand, you may report to plugin author that you are using via accordion plugin content.
WHAT CAN WE DO !??
Hi,
Unfortunately the website isn’t loading for me -> https://prnt.sc/yXMEzMaq-AMb And I don’t quite understand what the problem is, or how I can help.
I can take a look if there’s some custom CSS and you can’t find what it is for, or what is loading it. Please let me know when I can check on the website, right now it isn’t loading.
Thank you!
i now downgraded the plugin to v2.3.22 as they said and now its okey…
but that needs to be fixed somehow hmm for future versions…
I had to use a VPN to see the website, maybe it is restricted per country. It would have been useful to know about it before.
Either way, now I can see the website and I’m checking it now. The problem seems to be solved after you downgraded the plugin. But please let’s try to clarify the cause of the problem.
So you are using the Accordion plugin you mentioned. And after you updated it there is a problem, meaning that CSS styles from the theme are getting displayed in the page. Then after you downgraded the plugin, the problem was solved. Since the theme works correctly with the older version of the plugin, or by itself, maybe the problem is with the updated version of the Accordion.
I will let our developer team know about it, but I can’t promise that the plugin will be tested unfortunately. It remains to be seen.
I’m very sorry for the inconvenience.
Thank you!
sorry for the VPN thing…the hosting is some from the government, because its a website for the County in Croatia…I didnt know about the restrictions…
this is what they said to me:
Last wordfence security team alert us to minor security issue for outputting script and style may cause security issue, we are now using wp_kses function to escape accordion content, which causing strip all style and scripts from 3rd party shortcode, to solve this issue, third party plugins authors must update their plugin to load style and script to header or footer not via old style via content.
what should I do?
What if you activate the theme options to load the styles in the header? The options are in the theme panel -> https://prnt.sc/C7UG2E3pnput Please activate those settings and clear the caching. Then you could update the plugin again and check if the issue is solved.
Thank you!
