I redownloaded the package straight from
gantry-framework.org/
, and the same string exists in them. I checked the source code of my site, turns out javascript is automatically redirecting the Google search bot to these links. Are these 2 main.js part of Gantry? Are they compromised on your dev server?
Please would you post your URL, superuser id and pswd in the secure tab of your post and i'll have a look for you.
Please post your FTP logon, password and FTP URL in the secure area of your post.
What template are you using? What version of Gantry 5?
Regards, Mark.
Please search forums before posting. Please make sure your post includes the version of the CMS you are using and a link to the problem. Annotations on screenshots can also be helpful to explain problems/goals. Please use the "secure" tab for confidential information.
I've entered the URL, but I cannot provide the other information as it's a corporate website. Simply go to the URL, view source, and search for "deepMatches" for example. I'm using Apache PageSpeed, so the javascript files content are displayed on the page itself.
However, you really need not do any of that. As I've mentioned in my previous post, if you look at the 2 main.js files (just download it from gantry's website) I listed, do a search with the list of queries provided by Google (in the screenshot), you will find those words.
*version is latest, which is the one on gantry-framework.org. I downloaded the package to check if the js files are identical. They are.
I can't really help if I can't look at your site. I can tell you that nothing is compromised in our original files.
Looking at your screenshot it looks to me like you are using a CDN? the can often give rise to 404s so turn that off and clear it's cache and see if that improves things.
Regards, Mark.
Please search forums before posting. Please make sure your post includes the version of the CMS you are using and a link to the problem. Annotations on screenshots can also be helpful to explain problems/goals. Please use the "secure" tab for confidential information.
If there's nothing compromised, then the only reason would be that the new Gantry version does not work with Apache PageSpeed inline javascript parameter. Any chance this be fixed?
By the way, like I said, with the problem I'm listing, there is no need to check the files (it's the latest - believe me, I'm a Joomla extensions developer). The part of the page source that is responsible for these fake links is here:
If there is nothing wrong with words like "deepMatches" and "dollar-extras", then the main.js files of the latest Gantry version has some undeclared variables that is causing variable leaking, which then causes the compressed version to be sharing variables with other javascripts. As you can see from the chart, it only happens after I updated to the latest Gantry version (4+ weeks ago, when it was released)
Sorry but I don't understand any of what you are asking so I'll have to ask one of our developers... this may take a while for me to respond.
Regards, Mark.
Please search forums before posting. Please make sure your post includes the version of the CMS you are using and a link to the problem. Annotations on screenshots can also be helpful to explain problems/goals. Please use the "secure" tab for confidential information.
Hello Mike,
those 2 main.js files are G5 legit JavaScript file, all functions referenced in your screenshot, except for the first cdn-cgi one, are also part of Gantry 5.