{"id":41681,"date":"2024-03-11T18:56:09","date_gmt":"2024-03-11T18:56:09","guid":{"rendered":"https:\/\/s.b\/oikcom\/?post_type=shortcode_example&#038;p=50370"},"modified":"2024-03-12T12:37:43","modified_gmt":"2024-03-12T12:37:43","slug":"bw_contact_button-security-fix","status":"publish","type":"shortcode_example","link":"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/","title":{"rendered":"bw_contact_button <span class=\"summary\">&#8211; security fix<\/span>"},"content":{"rendered":"\n<p>This post demonstrates the security fix implemented to prevent Cross Site Scripting using the link parameter in a number of shortcodes.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p>Without the security fix, when the links are clicked on a JavaScript alert box is displayed.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"563\" height=\"187\" src=\"https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2024\/03\/image.png\" alt=\"\" class=\"wp-image-41683\" srcset=\"https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2024\/03\/image.png 563w, https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2024\/03\/image-300x100.png 300w, https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2024\/03\/image-376x125.png 376w\" sizes=\"auto, (max-width: 563px) 100vw, 563px\" \/><\/figure>\n\n\n\n<p> With the fix applied the JavaScript alert message is NOT DISPLAYED when the link is clicked on.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">bw_button shortcode<\/h2>\n\n\n<div class=\"wp-block-oik-css-geshi\"><div class=\"bw_geshi none\"><pre>&#091;bw_button link=&quot;javascript:alert(&#039;bw_button&#039;)&quot;]<\/pre><\/div><\/div>\n\n\n<p><a class=\"button \">dummy<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">bw_contact_button shortcode<\/h2>\n\n\n<div class=\"wp-block-oik-css-geshi\"><div class=\"bw_geshi none\"><pre>&#091;bw_contact_button link=&quot;javascript:alert(&#039;bw_contact_button&#039;)&quot;]<\/pre><\/div><\/div>\n\n\n<p><a class=\"button bw_contact\" title=\"Write to oik\">Contact oik<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">bw_link shortcode<\/h2>\n\n\n<div class=\"wp-block-oik-css-geshi\"><div class=\"bw_geshi none\"><pre>&#091;bw_link link=&quot;javascript:alert(&#039;bw_link&#039;)&quot;]<\/pre><\/div><\/div>\n\n\n<p><a class=\"bw_link\">javascript:alert(&#8216;bw_link&#8217;)<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">bw_logo shortcode<\/h2>\n\n\n<div class=\"wp-block-oik-css-geshi\"><div class=\"bw_geshi none\"><pre>&#091;bw_logo link=&quot;javascript:alert(&#039;bw_logo&#039;)&quot;]<\/pre><\/div><\/div>\n\n\n<p><div class=\"bw_logo\"><a class=\"bw_logo\" title=\"oik-plugins\"><img decoding=\"async\" class=\"bw_logo\" src=\"https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2013\/10\/oik-plugins.png\" title=\"oik-plugins\" alt=\"oik-plugins\"  \/><\/a><\/div><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">bw_qrcode shortcode<\/h2>\n\n\n<div class=\"wp-block-oik-css-geshi\"><div class=\"bw_geshi none\"><pre>&#091;bw_qrcode link=&quot;javascript:alert(&#039;bw_qrcode&#039;)&quot;]<\/pre><\/div><\/div>\n\n<p><a title=\"oik-plugins\"><img decoding=\"async\" class=\"\" src=\"https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2011\/08\/oik-plugins-qrcode-256.png\" title=\"QR code for oik-plugins\" alt=\"QR code for oik-plugins\"  \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><!-- wp:paragraph --><\/p>\n<p>This post demonstrates the security fix implemented to prevent Cross Site Scripting using the link parameter in a number of shortcodes.<\/p>\n<p><!-- \/wp:paragraph --><\/p>\n<p><!-- wp:more --><\/p>\n","protected":false},"featured_media":41683,"template":"","letters":[523],"class_list":{"0":"post-41681","1":"shortcode_example","2":"type-shortcode_example","3":"status-publish","4":"has-post-thumbnail","6":"letters-b","7":"entry"},"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>bw_contact_button - security fix - [oik] plugins.com<\/title>\n<meta name=\"description\" content=\"This post demonstrates the effectiveness of the security fix for the shortcodes that were affected prior to oik v4.10.2\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"bw_contact_button - security fix - [oik] plugins.com\" \/>\n<meta property=\"og:description\" content=\"This post demonstrates the effectiveness of the security fix for the shortcodes that were affected prior to oik v4.10.2\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/\" \/>\n<meta property=\"og:site_name\" content=\"[oik] plugins.com\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-12T12:37:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2024\/03\/image.png\" \/>\n\t<meta property=\"og:image:width\" content=\"563\" \/>\n\t<meta property=\"og:image:height\" content=\"187\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/\",\"url\":\"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/\",\"name\":\"bw_contact_button - security fix - [oik] plugins.com\",\"isPartOf\":{\"@id\":\"https:\/\/www.oik-plugins.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2024\/03\/image.png\",\"datePublished\":\"2024-03-11T18:56:09+00:00\",\"dateModified\":\"2024-03-12T12:37:43+00:00\",\"description\":\"This post demonstrates the effectiveness of the security fix for the shortcodes that were affected prior to oik v4.10.2\",\"breadcrumb\":{\"@id\":\"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/#primaryimage\",\"url\":\"https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2024\/03\/image.png\",\"contentUrl\":\"https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2024\/03\/image.png\",\"width\":563,\"height\":187,\"caption\":\"JavaScript alert message\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Shortcode examples\",\"item\":\"https:\/\/www.oik-plugins.com\/shortcode_example\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"bw_contact_button &#8211; security fix\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.oik-plugins.com\/#website\",\"url\":\"https:\/\/www.oik-plugins.com\/\",\"name\":\"[oik] plugins.com\",\"description\":\"WordPress plugins and themes\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.oik-plugins.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"bw_contact_button - security fix - [oik] plugins.com","description":"This post demonstrates the effectiveness of the security fix for the shortcodes that were affected prior to oik v4.10.2","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/","og_locale":"en_US","og_type":"article","og_title":"bw_contact_button - security fix - [oik] plugins.com","og_description":"This post demonstrates the effectiveness of the security fix for the shortcodes that were affected prior to oik v4.10.2","og_url":"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/","og_site_name":"[oik] plugins.com","article_modified_time":"2024-03-12T12:37:43+00:00","og_image":[{"width":563,"height":187,"url":"https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2024\/03\/image.png","type":"image\/png"}],"twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/","url":"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/","name":"bw_contact_button - security fix - [oik] plugins.com","isPartOf":{"@id":"https:\/\/www.oik-plugins.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/#primaryimage"},"image":{"@id":"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/#primaryimage"},"thumbnailUrl":"https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2024\/03\/image.png","datePublished":"2024-03-11T18:56:09+00:00","dateModified":"2024-03-12T12:37:43+00:00","description":"This post demonstrates the effectiveness of the security fix for the shortcodes that were affected prior to oik v4.10.2","breadcrumb":{"@id":"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/#primaryimage","url":"https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2024\/03\/image.png","contentUrl":"https:\/\/www.oik-plugins.com\/wp-content\/uploads\/2024\/03\/image.png","width":563,"height":187,"caption":"JavaScript alert message"},{"@type":"BreadcrumbList","@id":"https:\/\/www.oik-plugins.com\/shortcode_example\/bw_contact_button-security-fix\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Shortcode examples","item":"https:\/\/www.oik-plugins.com\/shortcode_example\/"},{"@type":"ListItem","position":2,"name":"bw_contact_button &#8211; security fix"}]},{"@type":"WebSite","@id":"https:\/\/www.oik-plugins.com\/#website","url":"https:\/\/www.oik-plugins.com\/","name":"[oik] plugins.com","description":"WordPress plugins and themes","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.oik-plugins.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.oik-plugins.com\/wp-json\/wp\/v2\/shortcode_example\/41681","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.oik-plugins.com\/wp-json\/wp\/v2\/shortcode_example"}],"about":[{"href":"https:\/\/www.oik-plugins.com\/wp-json\/wp\/v2\/types\/shortcode_example"}],"version-history":[{"count":2,"href":"https:\/\/www.oik-plugins.com\/wp-json\/wp\/v2\/shortcode_example\/41681\/revisions"}],"predecessor-version":[{"id":41684,"href":"https:\/\/www.oik-plugins.com\/wp-json\/wp\/v2\/shortcode_example\/41681\/revisions\/41684"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.oik-plugins.com\/wp-json\/wp\/v2\/media\/41683"}],"wp:attachment":[{"href":"https:\/\/www.oik-plugins.com\/wp-json\/wp\/v2\/media?parent=41681"}],"wp:term":[{"taxonomy":"letters","embeddable":true,"href":"https:\/\/www.oik-plugins.com\/wp-json\/wp\/v2\/letters?post=41681"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}