• Resolved josephrajewski

    (@josephrajewski)


    https://ibb.co/wghmSkt
    https://ibb.co/KV8ntNq

    See images, when Wordfence is in Learning mode I have no issues.
    However, as soon as it’s fully activated.. we see the error above.
    This happens when using Page Builder’s Live Editor preview button (see 1st image).. the error is presented after clicking on this.

    Reverting Wordfence back to Learning mode makes the error go away. I’ve scoured settings for both the editor & Wordfence & can’t determine why WordFence in full-activation mode would break the live editor preview. Any insights would be greatly helpful!

    PS: checking the false positive has no effect on anything.

    • This topic was modified 3 years, 7 months ago by josephrajewski. Reason: added note
Viewing 15 replies - 1 through 15 (of 20 total)
  • Plugin Support Andrew Misplon

    (@misplon)

    Hi Joseph

    Thanks for reaching out. If you have a moment, please, try the steps outlined here and let us know how it goes.

    Thread Starter josephrajewski

    (@josephrajewski)

    Andrew, we’ll re-enable WF & try & capture that.. I hope to report back later..

    Plugin Support Andrew Misplon

    (@misplon)

    Sounds good, chat then.

    Thread Starter josephrajewski

    (@josephrajewski)

    https://ibb.co/hdJkcL6

    Seems to be related to XSS, but don’t we want that XSS protection enabled w/ the firewall?
    I can confirm I have XSS protection turned on

    Thoughts?

    Plugin Support Andrew Misplon

    (@misplon)

    Thanks for the update.

    You could perhaps create a test page, click Layouts > Clone: Pages, clone the page in question, and then remove the widgets one by one, saving after each removal. Does the Live Editor open normally after deleting a specific widget? The Text widget might be a good one to start with.

    Thread Starter josephrajewski

    (@josephrajewski)

    the widgets don’t seem to matter.
    https://ibb.co/wghmSkt

    It simply doesn’t like that the “live editor” button preview attempts to run some sort of XSS..

    Plugin Support Andrew Misplon

    (@misplon)

    Thanks for the update.

    1. Does the issue persist on other Page Builder pages on this site?

    2. Does the issue persist if you create a new page and click the Live Editor button without adding content to the page?

    Thread Starter josephrajewski

    (@josephrajewski)

    1) the page appears to be irrelevant, so yes it persists on other pages.
    2) no, new page doesn’t present the issue. But the greater issue is all our existing content & editing that..

    Plugin Support Andrew Misplon

    (@misplon)

    Thanks. Please, send us an export of the page featured in your screenshots. You can do that from Layouts > Import/Export > Download Layout. You can upload the JSON file to WeTransfer.com (no email address required) or any cloud location and send us the link.

    Thread Starter josephrajewski

    (@josephrajewski)

    it’s a custom build layout from theme elements, I have nothing in the export page I can send you when I see the Download Layout button.

    I’m happy to jump on a zoom over my lunch break 12>1 MST.. just ask.

    Plugin Support Andrew Misplon

    (@misplon)

    Thanks for the update.

    We offer email support and direct logged in assistance as part of our SiteOrigin Premium plugin. Our free support tier is offered either here on the .org forums or on our forum at https://siteorigin.com/thread.

    Here is how the JSON file download process should look https://imgur.com/a/ctODKPm.

    Thread Starter josephrajewski

    (@josephrajewski)

    yes, that was the exact steps I took.. see console log, it’s unable to complete:
    https://ibb.co/fSqb691

    We’re using Version 1.17.11 of SiteOrigin Widgets Bundle
    And pay for all plugins requiring renewal. I don’t actually see an installation under PLUGINS for the SiteOrigin Premium plugin FWIW

    Plugin Support Andrew Misplon

    (@misplon)

    You can try temporarily deactivating all plugins not authored by SiteOrigin to see if the 403 error resolves. That’s where I recommend starting.

    SiteOrigin Premium isn’t a requirement to make use of Page Builder, the Widgets Bundle, or SiteOrigin CSS but rather an addon.

    Thread Starter josephrajewski

    (@josephrajewski)

    Ok, I’ll have to wait till this evening to try that out after-hours.. thx. More to follow then

    Thread Starter josephrajewski

    (@josephrajewski)

    I wasn’t able to try this last weekend, I will tonight & report back. Sorry for the lag in responding.

Viewing 15 replies - 1 through 15 (of 20 total)
  • The topic ‘WordFence + LiveEditor preview’ is closed to new replies.