Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Wpcom – A curated directory of resources and tools for WordPress.
- WordPress does not come with proper password hashing, and uses the phpass library. https://wordpress.org/plugins/password-hash/ will change this to use bcrypt/Argon2ID
- Comment forms do not have CSRF tokens, and hackerone/tickets for them have been neglected as trivial. https://wordpress.org/plugins/comment-form-csrf-protection/ This plugin adds a CSRF token to comment forms.
There are no comments on this comment yet.
- WordPress does not come with proper password hashing, and uses the phpass library. https://wordpress.org/plugins/password-hash/ will change this to use bcrypt/Argon2ID
- Comment forms do not have CSRF tokens, and hackerone/tickets for them have been neglected as trivial. https://wordpress.org/plugins/comment-form-csrf-protection/ This plugin adds a CSRF token to comment forms.