canmove, Confirmed users
2,745
edits
Bsternthal (talk | contribs) |
Bsternthal (talk | contribs) No edit summary |
||
| Line 37: | Line 37: | ||
# 3rd Party Plugin Such As Disqus. | # 3rd Party Plugin Such As Disqus. | ||
There are no issues using the default commenting that comes with wordpress. If a 3rd party plugin such as Disqus is required it | There are no issues using the default commenting that comes with wordpress. If a 3rd party plugin such as Disqus is required, it will need a legal / privacy review. An additional concern with a 3rd party system is that aggregated data (such as most commented on) may be either difficult or impossible for the WP code to access. | ||
== General Guidelines Regarding WP Plugins == | |||
If the plugin does not handle Personally Identifying Information (PII) our web security team will perform automated scans against the development/staging/production environments as requested. These reviews generally won't block and look for XSS and other common problems. | |||
If the plugin DOES handle PII the completion of a sec and privacy review is a per-requisite for the plugins use in production. | |||