- This topic has 10 replies, 5 voices, and was last updated 4 years, 1 month ago by
.
-
Posts
-
Recently I have scanned my website on an online malware scanner website and they show me “Heur.CSS.Hidden.gen” as a threat.
Here is the code: [[<style id=’generate-style-inline-css’> body{background-color:#f7f8f9;color:#222222;}a{color:#1e73be;}a:hover, a:focus, a:active{color:#f1c40f;}.grid-container{max-width:1280px;}.wp-block-group__inner-container{max-width:1280px;margin-left:auto;margin-right:auto;}.site-header .header-image{width:320px;}.generate-back-to-top{font-size:20px;border-radius:3px;position:fixed;bottom:30px;right:30px;line-height:40px;width:40px;text-align:center;z-index:10;transition:opacity 300ms ease-in-out;}.navigation-search{position:absolute;left:-99999px;pointer-events:none;visibility:hidden;z-index:20;width:100%;top:0;transition:opacity 100ms ease-in-out;opacity:0;}.navigation-search.nav-search-active{left:0;right:0;pointer-events:auto;visibility:visible;opacity:1;}.navigation-search input[type=”search”]{outline:0;border:0;vertical-align:bottom;line-height:1;opacity:0.9;width:100%;z-index:20;border-radius:0;-webkit-appearance:none;height:60px;}.navigation-search input::-ms-clear{display:none;width:0;height:0;}.navigati
I think this is the cause that I am not on google.
Customer Support
Hi there,
I think you will find that is a false positive – what online scanning tool did you use?
As a note – if your site contained malware then google search console would most commonly flag that under security:
https://developers.google.com/search/docs/advanced/security/malware
here is the link: https://quttera.com/detailed_report/needforgaming.com
and I don’t want that code displayed in my post CSS code and you say google shows in the security threat but Bing shoes me that my 70 plus URLs with malware with this code.Here is the post URL with malware affected: view-source:https://needforgaming.com/anime-fighters-simulator/
Lead Developer
Hi there,
The code you shared is just plain CSS – nothing malicious going on there at all.
Have you tried any other scanners? If that one is flagging regular CSS like that as malicious, my guess is it’s likely not functioning correctly.
Let me know 🙂
Yes, I used another scanner and they also show malsious code. Is there any way to remove or hide this CSS code.
Customer Support
Hi there,
As Tom mentioned, that code you shared is plain CSS. It doesn’t do anything aside from styling your page. If you try to remove this, the site will look weird as there will be no styling.
This CSS is generated from the theme’s customizer settings.
You can try moving it to an external file through Appearance > Customize > General and set the
dynamic print methodtoExternal Fileand see if anything changes.I have set it to an external file but still, the code is appearing.
Can you share a screenshot of the Bing search console malware report that identifies those lines as an issue ?
The problem has been solved Thanks Elvin
Hi
Some security scans flags css code as a thread if there isvisibility: hiddenas this can hidden a maliciuos thing….No problem. 🙂
@Loginos, thanks for sharing. 😀
- You must be logged in to reply to this topic.
