Python in code block preventing post saving

  • Resolved Kyle Nel

    (@devnel)


    1 year, 3 months ago

    Hi! I noticed that when I write a post that contains certain types of Python code in a code block, or inline code, that the post won’t save while Jetpack Protect is active.

    The specific error is:

    rule 932160 – reason Remote Command Execution: Unix Shell Code Found

    This makes sense, but since the code is intentionally included inside a code syntax highlight block as part of the post content, I’d like to find a way around this.

    Do you have any suggestions?

    The page I need help with: [log in to see the link]

Viewing 10 replies - 1 through 10 (of 10 total)
  • Plugin Support Stef (a11n)

    (@erania-pinnera)

    1 year, 3 months ago

    Hi there, @devnel,

    Thanks for raising this interesting question. I checked our internal documentation and I didn’t find anything useful to answer it, so I have asked our tech team to take a look at it.

    We’ll circle back as soon as we have updates! Thanks for bearing with us meanwhile 🙂

    (for internal ref: GH issue 9386)

    Thread Starter Kyle Nel

    (@devnel)

    1 year, 3 months ago

    Thanks Stef! Appreciate whatever help you can offer. If you need anything from me, please do let me know 🙂

    Plugin Support Stef (a11n)

    (@erania-pinnera)

    1 year, 3 months ago

    Hey @devnel,

    Thanks a lot for your offer, that’s well noted!

    We’ll get back with questions or reports as soon as possible. Take care meanwhile!

    Plugin Support Animesh Gaurav (a11n)

    (@bizanimesh)

    1 year, 3 months ago

    👋 Hey @devnel, we are checking your issue.

    Could you please share example of Python code which when used with a code block or inline code, doesn’t save the post while Jetpack Protect is active?

    Thread Starter Kyle Nel

    (@devnel)

    1 year, 3 months ago

    Hey Animesh. Hopefully I can send it here! 😅

    this is the main offending piece of code:

    #!/usr/bin/env python3

    It’s a shebang used at the beginning of a python file to indicate the location of the python executable. This appears both in a code block alongside a larger python code file, as well as an inline code line.

    Plugin Support Stef (a11n)

    (@erania-pinnera)

    1 year, 3 months ago

    Hey @devnel,

    That’s brilliant, thanks so much! I have passed it on to our tech team for investigation. We’ll circle back as soon as we hear from them 🙂

    Plugin Support Animesh Gaurav (a11n)

    (@bizanimesh)

    1 year, 3 months ago

    Hey @devnel – I tried to reproduce the issue but on my side it working fine with Jetpack Protect plugin active. Could you please check this recording and let me know if I’m missing any step?

    Looking forward to your reply. 🙂

    Thread Starter Kyle Nel

    (@devnel)

    1 year, 3 months ago

    Those steps look right! This is a production server with a few other things running so perhaps this is an interaction between the extension and my server firewall or another plugin. I’ll test a few more things and get back to you if I find anything!

    Plugin Support Paulina H. (a11n)

    (@pehaa)

    1 year, 3 months ago

    Sounds like a plan @devnel. Please keep us updated.

    Thank you!

    Plugin Support Stef (a11n)

    (@erania-pinnera)

    1 year, 3 months ago

    Hello @devnel,

    Do you have updates about that, do you still need help? We usually close inactive threads after one week of no movement, but we want to make sure we’re all set before marking it as solved. Thanks!

Viewing 10 replies - 1 through 10 (of 10 total)

The topic ‘Python in code block preventing post saving’ is closed to new replies.

Tags