Some WordPress users began to panic when Windows Defender flagged the WordPress 6.6.1 zip file as containing Trojan:Win32/Phish!MSR.
Some even reported that their host locked down their sites due to the malware flag.
The alert was primarily triggered by a specific string of code in \wp-includes\css\dist\block-library\style.min.css because Defender determined it contained a URL reference flagged as a Trojan.
The warning was a false positive caused by an insecure URL (beginning with http) in the CSS file: http://www.w3.org/2000/svg
This reference is a common inclusion at the beginning of svg files (in this case an inline SVG), and there was no real security issue in the update.
Here’s a valuable learning experience about XML namespaces and SVGs within coding: simply changing http to https would have solved the issue.
Google’s URL shortener service (goo.gl) will stop working completely on August 25, 2025.
This shutdown will affect billions of redirected URLs, leading them to serve a 404 not found error.
Google initially halted the creation of new redirects with this service in March 2019, but continued to support the redirects.
Beginning August 23, 2024, goo.gl links will start showing an interstitial page before navigating to target URLs that will notify users that the link will no longer be supported after August 25, 2025.
Third-party link tracking tools have identified billions of goo.gl links that will be impacted by this change.
Here’s another Google service being sunsetted. Does this make you think twice about building any business-critical process there?
With Anthropic’s Claude you can create personalized bots that can perform personalized tasks. Called “tool use,” the feature will allow Claude to interact with external APIs of your choosing. Interesting possibilities here.
