| @@ -437,11 +437,14 @@ | ||
| 437 | 437 | 'auto_scan' => true, |
| 438 | 438 | 'scan_frequency' => 'daily', |
| 439 | 439 | 'notify_level' => 'suspicious_only', |
| 440 | 440 | 'instant_alert' => false, |
| 441 | - 'excluded_paths' => array( | |
| 442 | - 'wp-content/cache', | |
| 443 | - ), | |
| 441 | + // Empty for a new installation. It used to start with | |
| 442 | + // wp-content/cache, from when nothing in the scan looked in | |
| 443 | + // that folder anyway; the scan now searches it for hidden | |
| 444 | + // code. A site that has the entry saved keeps it: what is in | |
| 445 | + // this list is the site's own, and an update does not edit it. | |
| 446 | + 'excluded_paths' => array(), | |
| 444 | 447 | 'excluded_extensions' => array( |
| 445 | 448 | // Translations (regenerated per-locale, never in checksums). |
| 446 | 449 | '.po', '.mo', '.pot', |
| 447 | 450 | // Binary images (cosmetic, not executable; often rewritten by image-optimizer plugins). |
