• I got a few emails warning of this Security Alert, and was wondering if there was a simple way to search where this file is located. The Participant Database is one of the plugins that uses Google.

    It stats the following:

    New Advisory Notification
    
    Dear Google Cloud customer,
    
    You've received an important Google Cloud notification affecting your resource, cleancourts-maps’s Google Cloud service(s).
    
    Notification Title: [Security Alert]: Polyfill.io Issue for Google Maps Platform users
    View Notification Details
    Sincerely,
    The Google Cloud team

    Here are the details linked to the above, they are below:

    [Security Alert]: Polyfill.io Issue for Google Maps Platform users
    6/28/24, 4:25 PM
    
    Hello Google Maps Platform Customer,
    
    We're writing to let you know that a security issue may be affecting websites using specific third-party libraries (including polyfill.io). 
    
    What happened
    
    We have become aware of a security issue that may be affecting websites using specific third-party libraries (including polyfill.io). This issue can sometimes redirect visitors away from the intended website without website owner knowledge or permission, or potentially cause other malicious behavior. Many of the Maps JavaScript API samples in the Developer Documentation previously included a polyfill.io script declaration. We have removed this from those samples. If you have used the Maps JavaScript API samples that contain this declaration, we recommend removing the declaration.
    
    What to do
    
    Please see below to learn how to take action, if needed:
    
        Investigate your website: Check your website's code to see if you're loading any compromised libraries (including polyfill.io).
    
        Remove or replace the code: If you find compromised libraries, consider:
    
            Hosting a clean, secure version of the code yourself
    
            Switching to an alternative library or provider
    
            Removing the library if you don’t need it
    
        Re-deploy your code through your regular process.
    
    For your reference, attached is a list of your projects where we have detected Maps Javascript API usage. Please check all sites associated with these projects.
    
    We're here to help
    
    We know that taking action on this issue can be disruptive. If you have any questions or require assistance, please feel free to contact our support team at Google Maps Platform Support.
    
    Thanks for choosing Google Maps Platform.
    
    Sincerely, 
    
    The Google Maps Platform Team

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Author xnau webdesign

    (@xnau)

    I’m aware of this, our plugin does not use the polyfill.io library, in fact it uses no third-party libraries for Google services. As far as our Locations Map plugin is concerned, you don’t have to do anything.

    However, if you are using any other plugins that use Google Maps Javascript API, those should be checked. Contact the developer for those other products.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.