WordPress.org

Make WordPress Core

Opened 10 days ago

Closed 9 days ago

#50468 closed defect (bug) (invalid)

WordPress Amazon Embed code is adding affiliate tracking code when any amazon product URL is pasted on both editors

Reported by: jayantkumarrana Owned by:
Milestone: Priority: normal
Severity: normal Version: 5.2
Component: Embeds Keywords: has-screenshots close
Focuses: Cc:

Description

When I paste an amazon product URL (Either with affiliate id or without), WordPress by default is embediing the product on page(which is good) but also ading affiliate id its URL (Which is horrible).

I found this when I read this news on theDIgitalHacker(URL Given Below). I was finally relaxed when I got to know that my website is actually not hacked which I was preassuing when I saw this issue for the first time.

This website has covered the issue in details with proofs
https://thedigitalhacker.com/this-wordpress-bug-is-adding-amazon-affiliate-core-when-url-in-pasted-in-editor/
https://thedigitalhacker.com/wp-content/uploads/2020/06/Screenshot-2020-06-25-at-9.52.19-AM.png

Change History (3)

#1 @SergeyBiryukov
10 days ago

  • Keywords close added; needs-patch removed
  • Severity changed from critical to normal
  • Summary changed from WordPress Amzon Embed code is adding affiliate tracking code when any amazon product URL is pasted on both editors to WordPress Amazon Embed code is adding affiliate tracking code when any amazon product URL is pasted on both editors

Hi there, welcome to WordPress Trac! Thanks for the report.

There appear to be some misconceptions in the linked article:

Last edited 10 days ago by SergeyBiryukov (previous) (diff)

#2 @jayantkumarrana
9 days ago

Thanks for the reply @SergeyBiryukov . Can you please share the step to disable amazon auto-embed as it is creating a lot of issue while drafting prewritten articles.

#3 @johnbillion
9 days ago

  • Focuses coding-standards removed
  • Milestone Awaiting Review deleted
  • Resolution set to invalid
  • Status changed from assigned to closed

@jayantkumarrana Are you the author of that article? If so I recommend you redact it entirely, or contact the author and recommend that they do. kpembed-20 is the default ref value that's used for all Amazon oEmbeds and nobody is earning $17M commission from this.

This can be seen in the response to an oEmbed request to Amazon (https://read.amazon.com/kp/api/oembed?maxwidth=600&maxheight=870&url=https%3A%2F%2Fwww.amazon.com%2FAmazonBasics-Microfiber-Sheet-Set-Queen%2Fdp%2FB00Q7OAFDK%2F&dnt=1&format=json):

{
    "author_name": null,
    "width": 600,
    "html": "<iframe type=\"text/html\" width=\"600\" height=\"550\" frameborder=\"0\" allowfullscreen style=\"max-width:100%\" src=\"https://read.amazon.com/kp/card?preview=inline&linkCode=kpd&ref_=k4w_oembed_qWKQVhbjIwcPGC&asin=B00Q7OAFDK&tag=kpembed-20\"></iframe>",
    "provider_url": "https://www.amazon.com/b?ie=UTF8&node=13489836011",
    "type": "rich",
    "title": "AmazonBasics Lightweight Super Soft Easy Care Microfiber Sheet Set with 16\" Deep Pockets - Queen, Spa Blue",
    "provider_name": "Amazon",
    "version": "1.0",
    "height": 550
}
Note: See TracTickets for help on using tickets.