Enabling WordPress to handle SVG files safely – cont’d

Uploading an SVG might seem like a routine task, but it’s a gamble if you’re not careful. These files are XML, and XML is powerful, but also dangerous. They can conceal embedded JavaScript, which, if left unchecked, can lead to serious data breaches. Imagine the consequences: your visitors’ personal information stolen, their browsing session hijacked, or your website defaced. Don’t let a seemingly simple image become the weak link in your website security.

Enabling WordPress to handle SVG files safely

Scalable Vector Graphics (SVGs) as the ideal choice for ensuring crisp, scalable reactions across all devices. However, SVGs can hide harmful code, posing security risks. Due to these risks, WordPress excludes SVGs from its list of supported file types by default. This precaution helps safeguard websites from these potential threats, though it often frustrates users seeking clean, scalable graphics. This post picks up from there, exploring the steps needed to overcome this roadblock.

A reaction plugin 3: emergency

A ticking time bomb in the form of an outdated plugin. With the clock relentlessly counting down and my blog’s security at stake, I launched into a frantic search for a replacement reaction plugin. Truncated lists, outdated options, rudimentary interfaces, and puzzling notifications left me spiraling through a gauntlet of confusion and dead ends. Every attempt felt like a step closer to disaster. It was a race against time—one misstep and the integrity of my site could be compromised. Would I find the solution before it was too late, or would panic be my undoing?

Wrapping up my blog posts housekeeping series

In the concluding chapter of my “Blog posts housekeeping” series, I uncover the valuable lessons learned and the myriad of improvements yet to be implemented. From tackling various tasks involving HTML, CSS, and SEO, to the monumental challenge of updating up to 341 posts, this roundup reveals the depth of my endeavors.

Cache me if you can: a glitch in the Matrix

Just when I thought my blog was a well-oiled machine, the universe decided to drop a virtual spanner in the works. An entire archive page gone rogue, loading slower than a sloth on a lazy Sunday, and displaying half-baked content as if it had taken a coffee break mid-load. My knee-jerk reaction? Blame the mysterious forces of caching. Let's just say the real culprit took me by surprise. Who knew something so simple could wreak such havoc?

External links best practices—concl’d

Except for very specific cases, no link—be it external or not—should open in a new tab or window! This violates web accessibility standards. Based on my research, using rel="external noreferrer" for external links is also the best practice. The former helps identify external links and the latter covers privacy and security. This approach ensures that my external links are both secure and aligned with modern web standards. Now, if you think that’s all, do not read this concluding part!

External links best practices—cont’d

What are the most appropriate values for the rel attribute for external links? Should I consider replacing rel="external" with more standardized ones? Navigating the nuances of the rel attribute for external links is crucial for preventing security vulnerabilities, protecting user privacy, and managing how your site interacts with search engines. Join me as I dive into this topic—exploring when and why to use these attributes—to ensure my external links are both secure and in line with modern coding practices.

External links best practices

The use of target="_blank" to open links in a new tab or window has been a topic of debate for a while. I embarked on a quest for the truth, diving into a sea of contradictory opinions and expert advice. Drawing on credible sources and authoritative guidelines, I sought to uncover the best practices for handling external links. Join me as I put an end to this ongoing debate.

A worrying proposal

WordPress has traditionally released a new default theme each year, providing a solid foundation for site owners. However, maintaining a large number of default themes can be challenging. A recent proposal suggests retiring older themes after a minimum of five years of support and when their usage falls below 1% of all WordPress sites. This move aims to streamline development efforts and enhance the experience for users who rely on newer default themes. Should I worry?

Second SiteGround Security Report

Will I receive – every month – a notification that I should purchase Site Scanner? This was a question I had before receiving the first Security Report from SiteGround. This was more a figure of speech than an actual question; still, …