Currently setting up Newspaper on my staging site. Security plugin is flagging wp-includes/js/thickbox/thickbox.min.css as a suspicious file in the WordPress core and recommending removal. Is this a vital file of the theme to be left alone? Wanting to make sure that I don’t have any issues and Newspaper is the only thing recently added to the staging site.
Hi,
Normally that isn’t a wordpress file. This is what the wordpress thickbox folder contains by default -> https://prnt.sc/CkuhzGWRM5mz So there is a thickbox.css file, not a thickbox.min.css file.
If maybe you use any optimization plugins on the website, such plugins can create minified files of actual wordpress files, to speed up the website. So an optimization plugin could take this file thickbox.css and create thickbox.min.css. Since this isn’t a file normally found in wordpress, security plugins may flag it, as they don’t know what it is.
That’s probably what’s happening. I still suggest checking what that file contains exactly. If it’s just minified CSS code, like this -> https://prnt.sc/-oKT6kxcaKnU then it’s fine.
Thank you!
