Make WordPress Core

Opened 6 years ago

Closed 6 years ago

#50468 closed defect (bug) (invalid)

WordPress Amazon Embed code is adding affiliate tracking code when any amazon product URL is pasted on both editors

Reported by: jayantkumarrana Owned by:
Priority: normal Milestone:
Component: Embeds Version: 5.2
Severity: normal Keywords: has-screenshots close
Cc: Focuses:

Description

When I paste an amazon product URL (Either with affiliate id or without), WordPress by default is embediing the product on page(which is good) but also ading affiliate id its URL (Which is horrible).

I found this when I read this news on theDIgitalHacker(URL Given Below). I was finally relaxed when I got to know that my website is actually not hacked which I was preassuing when I saw this issue for the first time.

This website has covered the issue in details with proofs
https://thedigitalhacker.com/this-wordpress-bug-is-adding-amazon-affiliate-core-when-url-in-pasted-in-editor/
https://thedigitalhacker.com/wp-content/uploads/2020/06/Screenshot-2020-06-25-at-9.52.19-AM.png

Change History (3)

#1 @SergeyBiryukov
6 years ago

  • Keywords close added; needs-patch removed
  • Severity criticalnormal
  • Summary WordPress Amzon Embed code is adding affiliate tracking code when any amazon product URL is pasted on both editorsWordPress Amazon Embed code is adding affiliate tracking code when any amazon product URL is pasted on both editors

Hi there, welcome to WordPress Trac! Thanks for the report.

There appear to be some misconceptions in the linked article:

Last edited 6 years ago by SergeyBiryukov (previous) (diff)

#2 @jayantkumarrana
6 years ago

Thanks for the reply @SergeyBiryukov . Can you please share the step to disable amazon auto-embed as it is creating a lot of issue while drafting prewritten articles.

#3 @johnbillion
6 years ago

  • Focuses coding-standards removed
  • Milestone Awaiting Review
  • Resolutioninvalid
  • Status assignedclosed

@jayantkumarrana Are you the author of that article? If so I recommend you redact it entirely, or contact the author and recommend that they do. kpembed-20 is the default ref value that's used for all Amazon oEmbeds and nobody is earning $17M commission from this.

This can be seen in the response to an oEmbed request to Amazon (https://read.amazon.com/kp/api/oembed?maxwidth=600&maxheight=870&url=https%3A%2F%2Fwww.amazon.com%2FAmazonBasics-Microfiber-Sheet-Set-Queen%2Fdp%2FB00Q7OAFDK%2F&dnt=1&format=json):

{
    "author_name": null,
    "width": 600,
    "html": "<iframe type=\"text/html\" width=\"600\" height=\"550\" frameborder=\"0\" allowfullscreen style=\"max-width:100%\" src=\"https://read.amazon.com/kp/card?preview=inline&linkCode=kpd&ref_=k4w_oembed_qWKQVhbjIwcPGC&asin=B00Q7OAFDK&tag=kpembed-20\"></iframe>",
    "provider_url": "https://www.amazon.com/b?ie=UTF8&node=13489836011",
    "type": "rich",
    "title": "AmazonBasics Lightweight Super Soft Easy Care Microfiber Sheet Set with 16\" Deep Pockets - Queen, Spa Blue",
    "provider_name": "Amazon",
    "version": "1.0",
    "height": 550
}
Note: See TracTickets for help on using tickets.