3 ms·
I have come across a situation, where an automatic Wordpress update (need to keep up to date, against vulnerabilities) made a site I maintain violate the law:
by zelphirkalt 2y ago
I have come across a situation, where an automatic Wordpress update (need to keep up to date, against vulnerabilities) made a site I maintain violate the law:
I used a unicode symbol for something in text. Wordpress out of nowhere and by itself decided, that it would be better to replace that symbol with a bloody svg, that is loaded from some third party. At first I could not believe my eyes, then it dawned on me, how incredible reckless they acted with that update. They must really have no clue what they are doing.
Then I scrambled to reverse this bs and tried various things, including editing the theme minimally, which originally I never wanted to do, because I do not want to maintain a theme in addition to the site. Well nothing worked, except for installing a plugin, whose sole purpose it is to reverse this stupidity.
If I had not had functionality connected to the DOM structure around my unicode symbol, I might not have noticed it, because that functionality also broke.
So there we go, WP automatically making the site violating the law by loading from third party without consent and also breaking my functionality and basically forcing me to install a plugin to correct WP core mistakes. Of course it is very clear now, that it is completely unfit for any business website, when the core developers make such bad decisions. It requires constant maintenance, even if you update nothing but WP itself. Alternatively you let it get outdated and get hacked due to vulnerabilities. Great.
- simonjgreen 2y agoAre you intentionally not mentioning which country and law?
- selfmodruntime 2y agoThey definitely are and I would bet money it's China.
- addandsubtract 2y agoChina has laws against loading content from third parties without consent? Sounds more like an EU thing.
- selfmodruntime 2y agoChina has laws against graphic displays of blood. I could not find a European country that does.
- simonjgreen 2y agoHow is that relevant?
- hawski 2y agoMy bet is EU and making it non-compliant with GDPR.
- zelphirkalt 2y agoGDPR, EU. You cannot simply load third party shit on your website, without asking for consent. By downloading an SVG from a third party provider, I would need to ask the visitor, whether transmitting their IP address is OK or not, since that is personal data. Aside form all the information associated with when someone accesses the site.
- simonjgreen 2y agoGotcha, thanks
- eertami 2y ago> You cannot simply load third party shit on your website, without asking for consent That's not how the GDPR works at all. If it were, there would be no content distribution networks operating in the EU. Linking to a third party image in document markup does not involve you transmitting anything.
- JimDabell 2y agoBy including external references to third-parties, you’re effectively leaking your visitors’ IP addresses to the third-party. Those IP addresses are considered PII and are covered by the GDPR. https://www.theregister.com/2022/01/31/website_fine_google_fonts_gdpr/ https://www.theregister.com/2022/01/31/website_fine_google_f...
- deleted 2y ago[deleted]
- hawski 2y ago> Of course it is very clear now, that it is completely unfit for any business website, when the core developers make such bad decisions. I'm not saying it is or it isn't, but I do wonder how many people are doing business with WP while never considering a donation or whatever value add for the project. At the same time maybe you do pay, maybe they already swim in money.