filters - Forum | JoomShaper
Solved Helix Framework

filters

Asked by Grant Linneberg 2 months ago Last activity 1 month ago

My site quit displaying my embedded media player. After a lot of digging, my expert found that it was filters on the Helix Ultimate template. He write me this, and I thought you'd be interested:

"Nothing is hacked. The audio player has nothing to do with the JCE
exploit or SP Page Builder, so you can park that worry.

The cause is a bug in your Helix Ultimate template, version 2.2.9. It
runs the "audio" field holding your Buzzsprout embed through a
security filter, and that filter is configured backwards. Its own
documentation says it uses an allowlist of safe tags, but the code
tells it to do the opposite, so it strips out the script tag the
Buzzsprout player needs to load. The empty container still got written
to the page, and the template wrapped it in a 16:9 video-shaped box,
which is the large blank space you were seeing above each episode.

I've fixed it with a template override, so the embed renders as you
entered it again. Episode 415 is playing properly now and I checked
five other recent episodes too. The fix sits in the template's
overrides folder rather than in the template or plugin files
themselves, so a future Helix Ultimate update won't wipe it out.

The same faulty filter also strips iframes, so a video embed from a
source the template doesn't recognise would disappear the same way.
Worth reporting to JoomShaper so they fix it at source."

I hope this helps squash a bug.

Accepted answer

Marked as the solution
Mehtaz Afsana Borsha Staff

Hi,

Again thanks for sharing, could you please close this post by accepting the answer?

2 more replies

Mehtaz Afsana Borsha Staff

Hi,

Thank you for the detailed investigation and for sharing your findings.

We are glad to hear that the issue was not related to a security compromise and that the Buzzsprout player is now working correctly.

Using an override is a sensible temporary solution because it should remain in place after normal template updates. However, we recommend keeping a copy of the modification and testing it again after future Helix Ultimate updates.

Thank you again for reporting this clearly and helping us identify a potential issue.

-Regards.

Mehtaz Afsana Borsha Staff

Thanks for accepting the answer.

Log in to reply.