Uploaded image for project: 'Planet4'
  1. Planet4
  2. PLANET-6717

Remove google-sitemap-generator plugin

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Merged
    • Icon: Blocker Blocker
    • 2.77.1
    • None
    • 3
    • Security
    • Sprint #182

      Suddenly every CI build started failing because a plugin we install in the base repository has been unpublished suddenly.

      google-sitemap-generator has been removed from the Wordpress registry.

      To investigate:

      • Why was the plugin removed? If not security related we might be able to host a copy for some time.
      • Which sites make use of it?
      • Workaround to unblock development?

      Findings

      • It was removed due to a security vulnerability and a ownership change.
      • There was also [a commit|https://plugins.trac.wordpress.org/changeset/2706751/ that potentially fixes the issue, but the new release is not yet available on wpackagist.
      • Relevant discussion with people complaining about security issues.

      Outcome

      • Remove the plugin for now and monitor the situation
      • Rely on the built-in WP functionality for generating wp-sitemap.xml
      • Set up a redirect from sitemap.xml to wp-sitemap.xml to make Google Search Console happy.

            nroussos Nikos Roussos
            pvincent Pieter Vincent (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: