austinheap / wordpress-security-txt Goto Github PK

First, thank you for this plugin - I was very happy to find it :)
I've just installed the plugin and enabled it on the setting section. For some reason, when I'm trying to access .well-known/security.txt, I got 404 error from nginx. The plugin is working, because the redirect from security.txt to .well-known/security.txt is working - just the security.txt is not rendered.

Those are my settings:

enable: true (string)
redirect: true (string)
menu: true (string)
contact: <redacted>(string)
encryption: (NULL)
acknowledgement: (NULL)
disclosure: full (string)
cache: true (string)
credits: true (string)
statistics: false (string)
debug: true (string)

And these are the cache settings:

Enabled: true (boolean)
Location: /tmp//wordpress-security-txt-cache.txt
Cleared: false
Exists: false

I've also tried to disable the cache - but this doesn't help. I looked on the code and couldn't find any logs that can help me understand what's going on. Can you please help me out?
Thanks in advance!

Running PHP 7.2, getting an error due to the use of "sizeOf()" against a non-countable variable in class-wordpress-security-txt-public.php.

Line 234 replace "sizeOf()" with "strlen()" to make it work with PHP 7.2.

header('Content-Length: ' . sizeof($output));
Becomes:
header('Content-Length: ' . strlen($output));

According to the spec, email addresses used in the Contact field, should include the mailto: protocol prefix. Right now, this plugin's sanitizer rejects an email specified in that way.