Timeline for How to know which wordpress plugin is exporting site information to plugin author?
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 13, 2014 at 9:57 | comment | added | wp student | Thanks for clearing. I just realized that in both cases we will need to whitelist domains. eg; for social login requests or automatic remote backup transfers etc etc. | |
| May 13, 2014 at 9:29 | comment | added | Rarst | @Waqas that's the point of whitelisting, you only need to know domains to allow, rest is blocked by default. Disabling POST requests is also a possibility of course, but it will naturally kill anything that needs to make such requests. | |
| May 13, 2014 at 9:09 | comment | added | wp student |
Its the solution. But I think It still requires the user to know the data requesting URLs. For which users will have to dig into plugin code. What if we disable wp_remote_post instead of above solution. Will it affect wordpress' other functions in anyway?
|
|
| May 13, 2014 at 5:57 | vote | accept | wp student | ||
| May 12, 2014 at 14:39 | history | answered | Rarst | CC BY-SA 3.0 |