Conversation
WordPress.org requires every third-party service a plugin can contact to be named in the readme, with what is sent, when, and links to its terms and privacy policy. The plugin itself contacts nothing; the bundled editor can, but only for content the author deliberately builds with it -- a YouTube video, a GeoGebra activity, an H5P embed, a molecule loaded from the RCSB PDB. Each entry says which iDevice triggers it and what leaves the browser.
Contributor
Test in WordPress PlaygroundTest the plugin with the code from this branch:
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #126 +/- ##
=========================================
Coverage 96.87% 96.87%
Complexity 864 864
=========================================
Files 39 39
Lines 4323 4323
=========================================
Hits 4188 4188
Misses 135 135
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Document external services and remote resources used by the bundled editor, including their purpose, trigger, browser data and provider policies.
The disclosure covers authoring, preview and published content, including content created by other authors. It distinguishes local ELPX storage from browser requests and avoids claiming that no user/site data leaves the browser or that every provider is account-free. GeoGebra sends a material identifier. H5P policies depend on the actual host. JW Player loads when the interactive-video editor opens. Legacy lightbox share widgets are disabled by the normal initializer and send the page URL if enabled.
H5P privacy now links to the policy linked by h5p.org itself. EducaMadrid links to Mediateca's own legal/privacy/cookie notice.
This documentation does not resolve the prohibition on non-service CDN code. Reconcile the entries against the actual editor build before submission: the upstream tree already removes the obsolete mindmap HTML and changes MathJax packaging, while the currently installed dist/static still contains the older resources. No claim is made that pending upstream vendoring/upgrades are complete.
Validation: reviewed against the local editor and installed bundle; checked the corrected policy destinations; git diff --check passed. No runtime changes in this PR.