austinheap / wordpress-security-txt Goto Github PK

According to the spec, email addresses used in the Contact field, should include the mailto: protocol prefix. Right now, this plugin's sanitizer rejects an email specified in that way.

Running PHP 7.2, getting an error due to the use of "sizeOf()" against a non-countable variable in class-wordpress-security-txt-public.php.

Line 234 replace "sizeOf()" with "strlen()" to make it work with PHP 7.2.

header('Content-Length: ' . sizeof($output));
Becomes:
header('Content-Length: ' . strlen($output));

First, thank you for this plugin - I was very happy to find it :)
I've just installed the plugin and enabled it on the setting section. For some reason, when I'm trying to access .well-known/security.txt, I got 404 error from nginx. The plugin is working, because the redirect from security.txt to .well-known/security.txt is working - just the security.txt is not rendered.

Those are my settings:

enable: true (string)
redirect: true (string)
menu: true (string)
contact: <redacted>(string)
encryption: (NULL)
acknowledgement: (NULL)
disclosure: full (string)
cache: true (string)
credits: true (string)
statistics: false (string)
debug: true (string)

And these are the cache settings:

Enabled: true (boolean)
Location: /tmp//wordpress-security-txt-cache.txt
Cleared: false
Exists: false

I've also tried to disable the cache - but this doesn't help. I looked on the code and couldn't find any logs that can help me understand what's going on. Can you please help me out?
Thanks in advance!