CampusPress: Changes to Advanced Settings and Possible Impact on Some Sites

We have recently made a security-related change to some of the advanced settings available in CampusPress.

CampusPress has reviewed sites that may have been affected by this change and provided a report to help identify those that may be using the settings concerned. While this has helped us identify potential impacts, the reporting does not capture every possible use case, so there may be a small number of sites that have not been identified.

Some Advanced Settings may create a security risk as they could potentially allow malicious scripts to be stored on a site and run in the browsers of people viewing content. As a precaution, these settings have therefore been disabled.

Could this affect my site?

For most users, there should be no impact. However, we have identified one case where disabling the settings has caused existing content to display incorrectly.

This may affect sites using custom HTML, JavaScript or custom CSS, as well as sites that make use of features such as JSON feeds, HubSpot or WP-CORS.

What do I need to do?

If you notice anything unusual with your site that you believe may be related to this change, please raise a ticket with IT Support. We can investigate the issue and determine whether it is related to the change.

This change has been made as a precaution to reduce a potential security risk to CampusPress sites and their users.