Skip to content

Conversation

@adamziel
Copy link
Contributor

@adamziel adamziel commented Sep 23, 2025

Paul reported this issue on the WordPress support forums: [WordPress Importer] Version 0.9.1 trips anti-malware

Version 0.9.1 is tripping up our anti-malware scanner because the following file…

php-toolkit/DataLiberation/vendor-patched/rowbot/punycode/src/Punycode.php
…uses a code obfuscation technique. It’s putting comments inside a for statement, like this:

for ( $k = self::BASE; /* no condition */; $k += self::BASE )
Putting a comment in there is a technique used by malware to hide nasties.

Request: Can you please remove these comments from your patched Punycode.php file?

This PR does just that and removes those comments. Thank you for the ping @dd32

As a follow-up item, let's remove them in the php-toolkit repo as well.

@adamziel adamziel requested a review from zaerl September 23, 2025 22:58
@adamziel adamziel merged commit cde32d8 into WordPress:master Sep 25, 2025
24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant