search

dwrensha / wordpress-sandstorm

wordpress as a sandstorm app
Apache License 2.0
13 stars 4 forks source link

In the future, Sandstorm's Content Security Policy will block external content. #6

Open dwrensha opened 9 years ago

dwrensha commented 9 years ago

This will have an effect on:

  1. gravatar usage in the admin area
  2. themes using fonts.googleapis.com
  3. other things, possibly

We'll want to replace gravatar with Sandstorm's own user profile features. For the fonts, maybe we can bundle them?

ocdtrekkie commented 9 years ago

I bundled Google fonts that Scrumblr used. Stuff like jQuery as well may need to be bundled if WordPress uses it.

When WordPress allows people to upload their own themes, Google fonts may also be a problem.

dwrensha commented 9 years ago

I've learned that avatars can be turned off with update_option('show_avatars', 0); and they can be overridden through the pluggable get_avatar() function.

Ryman commented 8 years ago

Looks like some oembed stuff doesn't work without curl, so I guess that's affected by this too? http://help.semplicelabs.com/customer/portal/questions/12932083-vimeo-embed-troubleshooting

xet7 commented 6 years ago

This issue was moved to wpsandstorm/wordpress-sandstorm#4