Open
Description
Quick summary
I've recently noticed this script being injected into my pages:
<script>
var _activityPubOptions = {"namespace":"activitypub\/1.0","defaultAvatarUrl":"https:\/\/example.com\/wp-content\/plugins\/activitypub\/assets\/img\/mp.jpg","enabled":{"site":true,"users":false}};
</script>
I don't use a block theme. This code appears to do nothing. Is there any way to disable inject_activitypub_options
?
Steps to reproduce
Using a non-Gutenberg theme.
I've disabled some parts of the ActivityPub plugin using:
// Remove ActivityPub Plugin CSS
function remove_activitypub_block_css(){
wp_dequeue_style( 'activitypub-followers-style' );
wp_dequeue_style( 'activitypub-follow-me-style' );
wp_dequeue_style( 'activitypub-reactions-style' );
}
add_action( 'wp_enqueue_scripts', 'remove_activitypub_block_css', 100 );
/ Remove Fediverse Previews
// https://github.com/Automattic/wordpress-activitypub/blob/79ce3414b12b6dc80151de22ce10dce8d2cad9ab/includes/class-admin.php#L876
function modify_list_row_actions( $actions, $post ) {
return array_diff_key( $actions, array( "activitypub" => true ) );
}
add_filter( "post_row_actions", "modify_list_row_actions", 99, 2 );
Site owner impact
Fewer than 20% of the total website/platform users
Severity
Minor
What other impact(s) does this issue have?
No response
If a workaround is available, please outline it here.
No response
Activity