Plugin check #520
tillkrusslint.yml
on: pull_request
EditorConfig
8s
Plugin Check
1m 50s
Matrix: phpstan
Annotations
8 errors and 5 warnings
|
Squiz.PHP.Heredoc.NotAllowed:
includes/object-cache.php#L1880
Use of heredoc and nowdoc syntax ("<<<") is not allowed; use standard strings or inline HTML instead
|
|
Squiz.PHP.Heredoc.NotAllowed:
includes/object-cache.php#L1926
Use of heredoc and nowdoc syntax ("<<<") is not allowed; use standard strings or inline HTML instead
|
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
includes/object-cache.php#L3031
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.
|
|
WordPress.WP.AlternativeFunctions.parse_url_parse_url:
includes/object-cache.php#L3043
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
|
|
WordPress.WP.AlternativeFunctions.parse_url_parse_url:
includes/class-predis.php#L209
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
|
|
Squiz.PHP.Heredoc.NotAllowed:
includes/class-plugin.php#L830
Use of heredoc and nowdoc syntax ("<<<") is not allowed; use standard strings or inline HTML instead
|
|
Squiz.PHP.Heredoc.NotAllowed:
includes/class-plugin.php#L854
Use of heredoc and nowdoc syntax ("<<<") is not allowed; use standard strings or inline HTML instead
|
|
Plugin Check
Process completed with exit code 1.
|
|
EditorConfig
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
PHPStan (PHP 8.2; Relay 0.7.0)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
PHPStan (PHP 7.4; Relay 0.7.0)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
WordPress.Security.ValidatedSanitizedInput.MissingUnslash:
includes/class-plugin.php#L1079
$_POST['nonce'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized:
includes/class-plugin.php#L1079
Detected usage of a non-sanitized input variable: $_POST['nonce']
|