Automattic / Automattic/jetpack

Enhancement: Add randomized likes to Jetpack Like

Open
#40,027 2 comments 0 reactions 0 assignees View on GitHub
[Feature] Likes [Plugin] Jetpack Enhancement
Dominant language
PHP
Stars
1.8k
Forks
898
Avg merge
1d 18h
Merged PRs (30d)
774

Description

### Impacted plugin

Jetpack

### What

I would like the option to display a randomized selection of people who have liked a post instead of the latest 5

### How

This is probably an edge-case but here's the issue: Jetpack Like will show the Gravatar images of the 5 users who have liked a post last. A sufficiently motivated actor can create 5 Gravatar accounts with a letter as their profile image and use that to display profanities inside the block.

This can also be used to display any 5-letter profanities, or a 4-letter word with an exclamation mark at the end ... and any variation.

We think the simplest solution would be to showcase a randomized order of users to prevent such an "attack" but any other solution is welcome too.

Contributor guide

Open the contributing guide

Research direction

Start by locating the Jetpack Like implementation and the logic that selects the five users whose Gravatar images are displayed. Review how the current latest-five behavior works, then define and test a selection approach that avoids predictable profane displays while preserving the Like presentation.

Written by the indexing model from the issue text.

Assessment

Tech stack
php, wordpress
Domain
frontend, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.