Filters - Question | JoomShaper

Filters

GL

Grant Linneberg

Helix Framework 1 week ago

My site quit displaying my embedded media player. After a lot of digging, my expert found that it was filters on the Helix Ultimate template. He write me this, and I thought you'd be interested:

"Nothing is hacked. The audio player has nothing to do with the JCE exploit or SP Page Builder, so you can park that worry.

The cause is a bug in your Helix Ultimate template, version 2.2.9. It runs the "audio" field holding your Buzzsprout embed through a security filter, and that filter is configured backwards. Its own documentation says it uses an allowlist of safe tags, but the code tells it to do the opposite, so it strips out the script tag the Buzzsprout player needs to load. The empty container still got written to the page, and the template wrapped it in a 16:9 video-shaped box, which is the large blank space you were seeing above each episode.

I've fixed it with a template override, so the embed renders as you entered it again. Episode 415 is playing properly now and I checked five other recent episodes too. The fix sits in the template's overrides folder rather than in the template or plugin files themselves, so a future Helix Ultimate update won't wipe it out.

The same faulty filter also strips iframes, so a video embed from a source the template doesn't recognise would disappear the same way. Worth reporting to JoomShaper so they fix it at source."

I hope this helps squash a bug.

0
3 Answers
Mehtaz Afsana Borsha
Mehtaz Afsana Borsha
Accepted Answer
Support Agent 9 hours ago #231494

Hi,

Again thanks for sharing, could you please close this post by accepting the answer?

0
Mehtaz Afsana Borsha
Mehtaz Afsana Borsha
Accepted Answer
Support Agent 1 week ago #230914

Hi,

Thank you for the detailed investigation and for sharing your findings.

We are glad to hear that the issue was not related to a security compromise and that the Buzzsprout player is now working correctly.

Using an override is a sensible temporary solution because it should remain in place after normal template updates. However, we recommend keeping a copy of the modification and testing it again after future Helix Ultimate updates.

Thank you again for reporting this clearly and helping us identify a potential issue.

-Regards.

0
Mehtaz Afsana Borsha
Mehtaz Afsana Borsha
Accepted Answer
Support Agent 6 hours ago #231511

Thanks for accepting the answer.

0