Blocking doesn’t seems to work in Woo coupon

  • Resolved hammm

    (@hammm)


    4 years, 11 months ago

    Hello,

    Blokking entities from the coupon field in the woocommerce cart seems not to work.
    I tested the theme search field and this works fine.

    It there a possibility to support the Woocommerce field?

    Regards,

    Jos

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Sami Ahmed Siddiqui

    (@sasiddiqui)

    @hammm It depends on how they are handling the WooCommerce coupon field. Can you provide me an example for the coupon field so I can reproduce and verify this on my end?

    Regards,
    Sami

    Thread Starter hammm

    (@hammm)

    Hi Sami,

    First i enabled the coupon field by setting the flag in woocommerce settings – tab General. This will display the coupon field in the shopping cart.
    Next fill in the coupon field with a text including some entities what should be blocked. In my case the text: <(entities should be blocked)>.
    Woocommerce displays thye message: the Coupon “”<(entities should be blocked)>”” does not exist! . The entities <()> should be blocked.

    Kind regards,

    Jos Hamers

    Plugin Author Sami Ahmed Siddiqui

    (@sasiddiqui)

    Hi @hammm

    Sorry for the late reply. This plugin prevent your site from Reflected XSS and Self XSS Attacks only.

    Reflected XSS means if someone trying the XSS attack using URL then these entities is removed and prevent the attack.

    Self XSS if someone telling your customer to open the site and then open a browser console to run some malicious code to hack someone accounts or anything etc then this plugin informs the customer that DO NOT do that until or unless you know what you are actually doing.

    Let me know if you have any other questions.

    Thanks and Regards,
    Sami

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Blocking doesn’t seems to work in Woo coupon’ is closed to new replies.