Title: Secure Gettext Author: Alex Kirk Published: જાન્યુઆરી 6, 2016 Last modified: જાન્યુઆરી 5, 2016 --- પ્લગીન શોધો આ પલ્ગઇન ** 2 વર્ષથી વધુમાં અપડેટ કરવામાં આવ્યો નથી **. એ કદાચ જાળવવામાં અથવા સપોર્ટેડ નહી હોય. વર્ડપ્રેસ ના વધુ તાજેતરનાં સંસ્કરણો સાથે ઉપયોગમાં લેવાય તો સુસંગતતા મુદ્દાઓ હોઈ શકે છે. ![](https://s.w.org/plugins/geopattern-icon/secure-gettext.svg) # Secure Gettext [Alex Kirk](https://profiles.wordpress.org/akirk/) દ્વારા [ડાઉનલોડ](https://downloads.wordpress.org/plugin/secure-gettext.zip) * [વિગતો](https://gu.wordpress.org/plugins/secure-gettext/#description) * [સમીક્ષાઓ](https://gu.wordpress.org/plugins/secure-gettext/#reviews) * [સ્થાપન](https://gu.wordpress.org/plugins/secure-gettext/#installation) * [ડેવલપમેન્ટ](https://gu.wordpress.org/plugins/secure-gettext/#developers) [સપોર્ટ](https://wordpress.org/support/plugin/secure-gettext/) ## વર્ણન This plugin ensures that any text coming from a translation file (`.po` or `.mo`) is run through an escaping function before it is output to the user. Escaping refers to the modification of the text so that special control characters do not have an effect (for example `<` in HTML). Example: If an original text does not contain HTML, then a translated text should not be allowed to contain HTML either. Thus, an HTML link introduced by a translator should have no effect because this was not intended by the developer. This plugin is in the proof-of-concept stage, it was created to test if the escaping of translated text can be handled in a general way, whether it severely affects the performance of a site, and if it breaks things. For text without HTML, the text is sent through `esc_html()`, for text containing HTML tags, it is sent through `wp_kses()` which is provided with a list of allowed HTML tags and attributes, derived from the original string. Thus this plugin tries to show a generic way of how to make sure that translated text is escaped. This is something that can eventually be ported to core. ## સ્થાપન 1. Upload the plugin files to the `/wp-content/plugins/secure-gettext` directory, or install the plugin through the WordPress plugins screen directly. 2. Activate the plugin through the ‘Plugins’ screen in WordPress ## એફએક્યુ (FAQ) #### Are you trying to convey that I cannot trust translations? Yes and no. The translation system on translate.wordpress.org is built on trust. Translation Editors will only approve strings that are just the translations of original text. This has worked very well so far. So indeed you can trust translations coming from there, for example through language packs. On the other hand, translation files provide a potential vector for attackers to insert malicious content. This could be spam links, or even JavaScript code. If you receive a translation file from an untrusted source, then it might be unsafe. This plugin doesn’t fully protect you from such dangers, but makes it harder for potential attackers to insert their own content into translated texts. #### How can I see that the plugin is working? If the plugin is activated, in the best case it doesn’t change anything visually. Translated text should behave the same way as before, there might be some escaping taking place (for example) something that had no HTML in the original text will have any HTML tags contained in the translated text be printed verbose. In order to be able to verify if the plugin is in fact active, there is a special URL parameter that you can use when you view a page with a logged-in user: ?secure- gexttext=show This mode will modify all screen text to be wrapped with a `[Escaped: ]`. This is purely for debugging functionality and might be removed in future. ## સમીક્ષાઓ ![](https://secure.gravatar.com/avatar/b31331326848163f891c5aed0f9286851f1f4a7e061dee35ba549813f1da00d3? s=60&d=retro&r=g) ### 󠀁[Thank you!](https://wordpress.org/support/topic/thank-you-1105/)󠁿 [blueprintmarketing](https://profiles.wordpress.org/blueprintmarketing/) સપ્ટેમ્બર 3, 2016 This is what must be done for all translations or multilingual sites [ 1 સમીક્ષાઓ વાંચો ](https://wordpress.org/support/plugin/secure-gettext/reviews/) ## ફાળો આપનાર & ડેવલપર્સ આ ઓપન સોર્સ સોફ્ટવેર છે. નીચેના લોકો એ આ પ્લગિન માટે ફાળો આપ્યો છે. ફાળો આપનારા * [ Alex Kirk ](https://profiles.wordpress.org/akirk/) [“Secure Gettext” ને તમારી ભાષામાં અનુવાદ કરો.](https://translate.wordpress.org/projects/wp-plugins/secure-gettext) ### વિકાસમાં રસ ધરાવો છો? [કોડ બ્રાઉઝ કરો](https://plugins.trac.wordpress.org/browser/secure-gettext/), જોવો [અસ્વીએન રેપોઝિટરીમાંથી](https://plugins.svn.wordpress.org/secure-gettext/),અથવા સબ્સ્ક્રાઇબ કરો[ડેવલપમેન્ટ](https://plugins.trac.wordpress.org/log/secure-gettext/) દ્વારા[આરઅસઅસ](https://plugins.trac.wordpress.org/log/secure-gettext/?limit=100&mode=stop_on_copy&format=rss). ## ચેન્જલૉગ #### 0.1 * Proof of concept ## મેટા * વર્ઝન **0.1** * છેલ્લી અપડેટ: **11 વર્ષ પહેલા** * સક્રિય સ્થાપનો: **10 કરતા ઓછા** * વર્ડપ્રેસ વર્ઝન ** 2.0.11 અથવા ઉચ્ચતર ** * **4.4.34** સુધી પરીક્ષણ કર્યું * ભાષા * [English (US)](https://wordpress.org/plugins/secure-gettext/) * ટૅગ્સ: * [escape](https://gu.wordpress.org/plugins/tags/escape/)[gettext](https://gu.wordpress.org/plugins/tags/gettext/) [html](https://gu.wordpress.org/plugins/tags/html/)[mo](https://gu.wordpress.org/plugins/tags/mo/) [po](https://gu.wordpress.org/plugins/tags/po/)[security](https://gu.wordpress.org/plugins/tags/security/) [translation](https://gu.wordpress.org/plugins/tags/translation/) * [વિગતવાર દૃશ્ય](https://gu.wordpress.org/plugins/secure-gettext/advanced/) ## પૉઇન્ટ્સ 5 માંથી 5 સ્ટાર. * [ 1 5-સ્ટાર સમીક્ષા ](https://wordpress.org/support/plugin/secure-gettext/reviews/?filter=5) * [ 0 4-સ્ટાર સમીક્ષાઓ ](https://wordpress.org/support/plugin/secure-gettext/reviews/?filter=4) * [ 0 3-સ્ટાર સમીક્ષાઓ ](https://wordpress.org/support/plugin/secure-gettext/reviews/?filter=3) * [ 0 2-સ્ટાર સમીક્ષાઓ ](https://wordpress.org/support/plugin/secure-gettext/reviews/?filter=2) * [ 0 1-સ્ટાર સમીક્ષાઓ ](https://wordpress.org/support/plugin/secure-gettext/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/secure-gettext/reviews/#new-post) [બધા સમીક્ષાઓ જુઓ](https://wordpress.org/support/plugin/secure-gettext/reviews/) ## ફાળો આપનારા * [ Alex Kirk ](https://profiles.wordpress.org/akirk/) ## સપોર્ટ કંઈક કહેવું છે? મદદ જોઈએ છે? [આધાર ફોરમ જુઓ](https://wordpress.org/support/plugin/secure-gettext/)