Google notified about exposing an API key on the auto generated aiovg page

  • Resolved Tony Zeoli

    (@tonyzeoli)


    1 year, 8 months ago

    Google sent us a notification that an API key is exposed publicly and not restricted on the https://uxpa.org/aiovg_videos/a-guided-reflection-for-ux-professionals/ page.

    I’ve investigated the settings and there is no YouTube API key in the panel for that feature.

    I’ve looked at our assigned page for the gallery and that page is empty save for the title of the page.

    I’m not sure what to make of this notification and how to resolve it. I’m new to this project for this organization, so I don’t know what the former developer may or may not have done.

    We’re looking at our Google Console to understand why the API key was generated and what it’s for, but I surmise that we don’t need a Google Console API key for this plugin, is that correct?

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Contributor wpvideogallery

    (@wpvideogallery)

    Yes, I see the Google API Key exposed publicly on your website. But, that comes from the “geodirectory” plugin. Kindly check this plugin’s settings to hide it from the front end. If there are no settings, kindly write to this plugin author about this.

    Thread Starter Tony Zeoli

    (@tonyzeoli)

    Ah, thanks. Got it. I thought because we were using your plugin that it was related to the YouTube API. Since I’m new here I was just checking off the boxes. I didn’t know how to check the front end for the exposed api key, so thought I’d ask first and see what the response was. Thanks for looking at that and identifying the issue.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Google notified about exposing an API key on the auto generated aiovg page’ is closed to new replies.