[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLJlXYFmmpxVwjVqFr3i7E7lwr0Xwda4D0SMbVZ1VMq4":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":21,"download_link":22,"security_score":13,"vuln_count":23,"unpatched_count":23,"last_vuln_date":24,"fetched_at":25,"vulnerabilities":26,"developer":27,"crawl_stats":24,"alternatives":34,"analysis":35,"fingerprints":160},"acf-openstreetmap-field","ACF OpenStreetMap Field","1.6.1","podpirate","https:\u002F\u002Fprofiles.wordpress.org\u002Fpodpirate\u002F","\u003Cp>Hazzle free OpenStreetMap with \u003Ca href=\"https:\u002F\u002Fwww.advancedcustomfields.com\u002F\" rel=\"nofollow ugc\">ACF\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Ch4>In the Fieldgroup editor:\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Return Format:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cem>Raw data\u003C\u002Fem> will return an array holding the field configuration.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cem>Leaflet JS\u003C\u002Fem> will return a fully functional leaflet map. Just include \u003Ccode>\u003C?php the_field('my_field_name'); ?>\u003C\u002Fcode> in your Theme.\u003Cbr \u002F>\nYou can choose from a long list of map styles and it supports multiple markers.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cem>iFrame (OpenStreetMap.org)\u003C\u002Fem> Will return an iFrame HTML. Only four map styles are supported\u003Cbr \u002F>\n– the ones you find on \u003Ca href=\"https:\u002F\u002Fwww.openstreetmap.org\u002F\" rel=\"nofollow ugc\">OpenStreetMap\u003C\u002Fa> – and not more than one marker.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Map Appearance:\u003C\u002Fstrong> Pan and zoom on the map and select from the Map layers to set the initial map position and style in the editor.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Map Position:\u003C\u002Fstrong> If you’re more like a numbers person here you can enter numeric values for the map position.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Allow layer selection:\u003C\u002Fstrong> Allow the editors to select which map layers to show up in the frontend.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Height:\u003C\u002Fstrong> Map height in the frontend and editor.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Max. number of Markers\u003C\u002Fstrong>\u003Cbr \u002F>\n – \u003Cem>No value:\u003C\u002Fem> infinite markers\u003Cbr \u002F>\n – \u003Cem>0:\u003C\u002Fem> No markers\u003Cbr \u002F>\n – \u003Cem>Any other value:\u003C\u002Fem> Maximum number of markers. If the return format is \u003Cem>iFrame\u003C\u002Fem> there can ony be one marker.\u003C\u002Fp>\n\u003Ch3>Map Proxy\u003C\u002Fh3>\n\u003Cp>The plugin comes with a proxy mechanism for map tiles. If enabled the Browser will load the tiles from your server rather than directly from the tile provider.\u003C\u002Fp>\n\u003Cp>Use the proxy to hide sensitive credentials from the users out there or if you have to comply with local privacy regulations. the European GDPR.\u003C\u002Fp>\n\u003Ch3>Development\u003C\u002Fh3>\n\u003Cp>Please head over to the source code \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmcguffin\u002Facf-openstreetmap-field\" rel=\"nofollow ugc\">on Github\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.advancedcustomfields.com\u002F\" rel=\"nofollow ugc\">ACF\u003C\u002Fa> for sure!\u003C\u002Fli>\n\u003Cli>The \u003Ca href=\"https:\u002F\u002Fwww.openstreetmap.org\u002F\" rel=\"nofollow ugc\">OpenStreetMap\u003C\u002Fa> project\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fleafletjs.com\u002F\" rel=\"nofollow ugc\">The Leaflet Project\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>The maintainers and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fleaflet-extras\u002Fleaflet-providers\u002Fgraphs\u002Fcontributors\" rel=\"nofollow ugc\">contributors\u003C\u002Fa> of \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fleaflet-extras\u002Fleaflet-providers\" rel=\"nofollow ugc\">Leaflet providers\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>The \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fperliedman\u002Fleaflet-control-geocoder\u002Fgraphs\u002Fcontributors\" rel=\"nofollow ugc\">very same\u003C\u002Fa> for \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fperliedman\u002Fleaflet-control-geocoder\" rel=\"nofollow ugc\">Leaflet Control Geocode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.domoritz.de\u002F\" rel=\"nofollow ugc\">Dominik Moritz\u003C\u002Fa> who delighted us with \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fdomoritz\u002Fleaflet-locatecontrol\" rel=\"nofollow ugc\">Leaflet locate control\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Numerous individuals and organizations who provide wonderful Map related services free of charge. (You are credited in the map, I hope)\u003C\u002Fli>\n\u003Cli>The proxy feature was inspired by an article by Klaus Meffert, Dr. DSGVO Blog, \u003Ca href=\"https:\u002F\u002Fdr-dsgvo.de\u002Fdatenschutzfreundliches-karten-plugin-fur-webseiten-statt-google-maps-neue-moglichkeiten\" rel=\"nofollow ugc\">Link (German)\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","A configurable OpenStreetMap Field for ACF.",9000,133634,92,24,"2024-12-22T11:45:00.000Z","6.7.5","4.8","5.6",[20],"map-acf-openstreetmap-leaflet","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Facf-openstreetmap-field","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Facf-openstreetmap-field.1.6.1.zip",0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":28,"total_installs":29,"avg_security_score":30,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},6,50800,97,345,77,"2026-04-04T14:01:57.171Z",[],{"attackSurface":36,"codeSignals":122,"taintFlows":147,"riskAssessment":148,"analyzedAt":159},{"hooks":37,"ajaxHandlers":118,"restRoutes":119,"shortcodes":120,"cronEvents":121,"entryPointCount":23,"unprotectedCount":23},[38,44,49,53,57,60,64,67,70,75,78,80,82,87,91,95,100,104,109,112,115],{"type":39,"name":40,"callback":41,"file":42,"line":43},"action","acf\u002Finclude_field_types","include_field_types","include\\ACFFieldOpenstreetmap\\Compat\\ACF.php",15,{"type":45,"name":46,"callback":47,"file":42,"line":48},"filter","polylang_acf_sync_supported_fields","add_pll_sync_field_type",18,{"type":39,"name":50,"callback":51,"file":42,"line":52},"acf\u002Finput\u002Fadmin_enqueue_scripts","acf_admin_enqueue_scripts",20,{"type":39,"name":40,"callback":54,"priority":23,"file":55,"line":56},"instance","include\\ACFFieldOpenstreetmap\\Core\\Core.php",19,{"type":39,"name":58,"callback":54,"file":55,"line":59},"init",21,{"type":39,"name":61,"callback":62,"file":55,"line":63},"wp_enqueue_scripts","register_assets",23,{"type":39,"name":65,"callback":62,"file":55,"line":66},"login_enqueue_scripts",25,{"type":39,"name":68,"callback":62,"file":55,"line":69},"admin_enqueue_scripts",28,{"type":45,"name":71,"callback":72,"priority":73,"file":74,"line":52},"acf_osm_leaflet_providers","proxify_providers",50,"include\\ACFFieldOpenstreetmap\\Core\\MapProxy.php",{"type":39,"name":76,"callback":77,"file":74,"line":63},"update_option_acf_osm_provider_tokens","setup_proxies",{"type":39,"name":79,"callback":77,"file":74,"line":14},"update_option_acf_osm_providers",{"type":39,"name":81,"callback":77,"file":74,"line":66},"update_option_acf_osm_proxy",{"type":39,"name":83,"callback":84,"file":85,"line":86},"admin_init","maybe_upgrade","include\\ACFFieldOpenstreetmap\\Core\\Plugin.php",31,{"type":45,"name":88,"callback":89,"file":85,"line":90},"extra_plugin_headers","add_plugin_header",32,{"type":39,"name":92,"callback":93,"file":85,"line":94},"plugins_loaded","load_textdomain",34,{"type":39,"name":96,"callback":96,"priority":97,"file":98,"line":99},"get_template_part",10,"include\\ACFFieldOpenstreetmap\\Core\\Templates.php",27,{"type":39,"name":101,"callback":101,"file":102,"line":103},"print_media_templates","include\\ACFFieldOpenstreetmap\\Field\\OpenStreetMap.php",72,{"type":39,"name":105,"callback":106,"priority":107,"file":102,"line":108},"wp_footer","maybe_print_media_templates",11,391,{"type":39,"name":83,"callback":110,"file":111,"line":48},"register_settings","include\\ACFFieldOpenstreetmap\\Settings\\Settings.php",{"type":39,"name":113,"callback":113,"file":114,"line":99},"admin_menu","include\\ACFFieldOpenstreetmap\\Settings\\SettingsOpenStreetMap.php",{"type":39,"name":116,"callback":117,"file":114,"line":69},"load-settings_page_acf_osm","enqueue_assets",[],[],[],[],{"dangerousFunctions":123,"sqlUsage":124,"outputEscaping":126,"fileOperations":144,"externalRequests":23,"nonceChecks":23,"capabilityChecks":145,"bundledLibraries":146},[],{"prepared":23,"raw":23,"locations":125},[],{"escaped":127,"rawEcho":28,"locations":128},38,[129,132,134,137,139,141],{"file":42,"line":130,"context":131},57,"raw output",{"file":102,"line":133,"context":131},331,{"file":135,"line":136,"context":131},"include\\proxy.php",129,{"file":138,"line":59,"context":131},"templates\\admin.php",{"file":140,"line":63,"context":131},"templates\\leaflet.php",{"file":142,"line":143,"context":131},"templates\\osm.php",22,4,2,[],[],{"summary":149,"deductions":150},"The acf-openstreetmap-field plugin v1.6.1 exhibits a strong security posture based on the provided static analysis.  The absence of any detected AJAX handlers, REST API routes, shortcodes, or cron events with potential attack surfaces, coupled with no identified dangerous functions, raw SQL queries, or critical taint flows, indicates robust security development practices.  The high percentage of properly escaped output and the use of prepared statements for SQL queries further reinforce this positive assessment.  The plugin's vulnerability history is also clear, with no known CVEs, suggesting a lack of past exploitable issues.  However, the presence of file operations, while not inherently problematic, warrants attention to ensure they are implemented securely.  The lack of explicit nonce and capability checks on any identified entry points (though none were found) is a point of note, as it could become a concern if new entry points are introduced in future versions.  Overall, this plugin appears to be secure in its current state, with a low risk profile due to its minimal attack surface and well-implemented code signals. The primary areas for continued vigilance would be in how any file operations are handled and the continued absence of exploitable vulnerabilities.",[151,154,156],{"reason":152,"points":153},"No nonce checks on potential entry points",5,{"reason":155,"points":153},"No capability checks on potential entry points",{"reason":157,"points":158},"Presence of file operations",3,"2026-03-16T17:52:14.570Z",{"wat":161,"direct":174},{"assetPaths":162,"generatorPatterns":167,"scriptPaths":168,"versionParams":169},[163,164,165,166],"\u002Fwp-content\u002Fplugins\u002Facf-openstreetmap-field\u002Fassets\u002Fcss\u002Facf-osm-leaflet.css","\u002Fwp-content\u002Fplugins\u002Facf-openstreetmap-field\u002Fassets\u002Fjs\u002Facf-osm-frontend.js","\u002Fwp-content\u002Fplugins\u002Facf-openstreetmap-field\u002Fassets\u002Fjs\u002Facf-input-osm.js","\u002Fwp-content\u002Fplugins\u002Facf-openstreetmap-field\u002Fassets\u002Fcss\u002Facf-input-osm.css",[],[164,165],[170,171,172,173],"acf-openstreetmap-field\u002Fassets\u002Fcss\u002Facf-osm-leaflet.css?ver=","acf-openstreetmap-field\u002Fassets\u002Fjs\u002Facf-osm-frontend.js?ver=","acf-openstreetmap-field\u002Fassets\u002Fjs\u002Facf-input-osm.js?ver=","acf-openstreetmap-field\u002Fassets\u002Fcss\u002Facf-input-osm.css?ver=",{"cssClasses":175,"htmlComments":177,"htmlAttributes":178,"restEndpoints":179,"jsGlobals":180,"shortcodeOutput":183},[176],"acf-osm-marker-icon",[],[],[],[181,182],"acf_osm","acf_osm_admin",[]]