Automattic / Automattic/jetpack
Enhancement: Change Auto-Fix Behavior on Premium Plugins and Themes
- Dominant language
- PHP
- Stars
- 1.8k
- Forks
- 898
- Avg merge
- 1d 18h
- Merged PRs (30d)
- 774
Description
### Impacted plugin
Protect
### What
At present, the auto-fixer in Jetpack Protect deletes vulnerable premium themes and plugins. This can result in broken websites. We should change this behavior.
### How
We should consider alternatives to deleting premium plugins and themes. It would be preferable to mark them as threats that need a manual fix.
Contributor guide
Research direction
Start by reviewing the auto-fixer in Jetpack Protect and its handling of vulnerable premium themes and plugins. Determine how the current deletion behavior is implemented and define a manual-fix threat state; the work is done when premium items are no longer deleted automatically and are instead marked for manual remediation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php, wordpress
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100