• Resolved JR104

    (@jr104)


    Hi
    Have you recently introduced calls to zencdn.net in your plugin?
    I use a cookie declaration plugin, and it’s highlighted this DNS prefetch on every page of my site.
    <link rel='dns-prefetch' href='//vjs.zencdn.net' />
    Another example is
    <link rel='stylesheet' id='videojs-css-css' href='https://vjs.zencdn.net/7.18.1/video-js.css?ver=1' type='text/css' media='all' />
    Why is this needed please, I would rather not have this in use…

Viewing 9 replies - 1 through 9 (of 9 total)
  • Thread Starter JR104

    (@jr104)

    OK, so I found a setting that allows scripts only on the pages that use them:

    Enable script control (It will load the WP VR scripts on the pages with virtual tours only):
    List of allowed pages to load WP VR scripts (The URLs of the pages on your site with virtual tours):

    I guess at this point I’m ok. Can you confirm the call to zencdn is legitimate please?

    Hi @jr104 ,

    We’re glad that you could exclude it in the settings.

    Thank you for pointing out the concern with zencdn.

    We’ve already added it to our current sprint and it’ll be removed on the next update of the plugin.

    Until then, you can keep it excluded from loading.

    And if you find any more security issues or concerns in the plugin, please let us know or add it to our roadmap here: https://rextheme.com/wpvr-roadmap/

    Regards,

    Hi @jr104 ,

    We’ve prepared a fixed version for this.

    ZenCDN has been removed from this version.

    You can find the fixed version of WPVR Free here: https://workdrive.zohoexternal.com/external/d9a6ef2861dfd5d53d4079290e12d39145245a9cb88c0a4f895032c525c2c3e6

    Please install this version of the plugin and see if everything is alright.

    Let us know how it goes.

    Regards,

    Hi @jr104 ,

    Let us know if you have tried this version.

    Your feedback will really help us improve the plugin.

    Regards,

    Thread Starter JR104

    (@jr104)

    Hi
    I uploaded the new version of free and pro on the given link, as I’m a pro customer, disabled the exclusion setting given the expectation it should work, and it’s all still there on multiple pages.

    <link rel='stylesheet' id='videojs-css-css' href='https://vjs.zencdn.net/7.18.1/video-js.css?ver=1' type='text/css' media='all' />

    I’ve set the exclusion setting once again, and blocked my site from using that prefetch until you can do something more meaningful. Thank you.

    • This reply was modified 2 years, 6 months ago by JR104.

    Hi @jr104 ,

    We’re really sorry for the late reply.

    And thank you for notifying us about it.

    We’ve worked on it and prepared and version with a fix to this one as well.

    However, since you’re a pro user, would you mind contacting us on our website?

    You see, this forum is actually for our free users.

    We can continue the conversation and send you the fixed versions on our support platform.

    Hope you understand.

    Regards,

    Thread Starter JR104

    (@jr104)

    Thank you.
    It shouldn’t be on any version though, there’s no need… Unless I’m missing something?
    So whether I contact you here or not is immaterial.
    And, we should have a pro/free version without this in the normal release, I really don’t want a special version without the prefetch, as a branch can get forgotten, then when an update is required I would once again have the same issue.
    Just remove this and push it out to all users as a normal update please. Unless that is something you don’t wish to do.

    Hi @jr104 ,

    Sure, hopefully, we’ll be releasing an update of the plugin within a couple of days and we’ll surely include it in the new update.

    You can check it after we release the update.

    Or, I’ll inform you here once we release it.

    Thank you for your patience.

    Regards,

    Hello @jr104 ,

    We’ve just released an update of the plugin.

    Please have a look and let us know if it’s alright now.

    Regards,

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘zencdn.net’ is closed to new replies.