Skip to content

Add the WordPress Plugin Check Action #21

Add the WordPress Plugin Check Action

Add the WordPress Plugin Check Action #21

Triggered via pull request January 17, 2025 18:48
Status Failure
Total duration 2m 7s
Artifacts

plugin-check.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

6 errors and 10 warnings
WordPress.Security.EscapeOutput.OutputNotEscaped: includes/Framework/PaymentGateway/Admin/views/html-admin-gateway-status.php#L28
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wc_help_tip'.
WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents: includes/API.php#L304
file_get_contents() is discouraged. Use wp_remote_get() for remote URLs instead.
WordPress.WP.AlternativeFunctions.json_encode_json_encode: includes/Gateway/Payment_Form.php#L300
json_encode() is discouraged. Use wp_json_encode() instead.
PluginCheck.CodeAnalysis.ImageFunctions.NonEnqueuedImage: includes/Handlers/Order.php#L842
Images should be added using wp_get_attachment_image() or similar functions
PluginCheck.CodeAnalysis.ImageFunctions.NonEnqueuedImage: includes/Framework/PaymentGateway/Payment_Gateway_Payment_Form.php#L530
Images should be added using wp_get_attachment_image() or similar functions
test
Process completed with exit code 1.
plugin_header_nonexistent_domain_path: woocommerce-square.php#L1
The "Domain Path" header in the plugin file must point to an existing folder. Found: "i18n/languages"
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized: includes/Gateway/Digital_Wallet.php#L900
Detected usage of a non-sanitized input variable: $_POST['shipping_option']
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized: includes/Gateway/Digital_Wallet.php#L973
Detected usage of a non-sanitized input variable: $_POST['wc-square-digital-wallet-type']
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized: includes/Gateway/Digital_Wallet.php#L1021
Detected usage of a non-sanitized input variable: $_SERVER['DOCUMENT_ROOT']
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized: includes/Gateway/Digital_Wallet.php#L1039
Detected usage of a non-sanitized input variable: $_SERVER['DOCUMENT_ROOT']
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized: includes/Gateway/Digital_Wallet.php#L1084
Detected usage of a non-sanitized input variable: $_POST['woocommerce_square_credit_card_digital_wallets_hide_button_options']
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized: includes/Gateway/Digital_Wallet.php#L1124
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized: includes/Gateway/Cash_App_Pay_Gateway.php#L1258
Detected usage of a non-sanitized input variable: $_REQUEST['type']
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized: includes/Gateway/Cash_App_Pay_Gateway.php#L1263
Detected usage of a non-sanitized input variable: $_REQUEST['data']
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized: includes/Gateway/Gift_Card.php#L616
Detected usage of a non-sanitized input variable: $_POST['token']