Closed Bug 646633 Opened 15 years ago Closed 15 years ago

Review wordpress plugin

Categories

(mozilla.org :: Security Assurance, task)

Product:
mozilla.org
Component:
Security Assurance
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
VERIFIED FIXED

People

(Reporter: fligtar, Assigned: ygjb)

Details

(Whiteboard: [completed secreview])

The Tweet Button plugin we used for Add-ons Blog isn't quite doing what we wanted, and we found a better one that's a lot simpler and does what we want. http://svn.mozilla.org/addons/trunk/blog/wp-content/plugins/tweet-button-with-shortening/ It's just one file. Please let me know if it's okay to update to this new one.
I will take a look at this. which 3rd party services are you planning to configure API keys for?
Assignee: infrasec → yboily
none, since Twitter uses its own shortener anyway
Hi. Any news?
Whiteboard: [pending secreview]
From a security perspective this is fine, but be aware that there would be privacy policy implications if 3rd party link shorteners are turned on. Not sure if it is worth filing a separate bug for, but the plugin uses a deprecated api (update_usermeta) that might break in a future release.
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
Whiteboard: [pending secreview] → [completed secreview]
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.