Add Plugin Check workflow #11
adamsilversteinplugin-check.yml
on: pull_request
Build and check plugin
11m 56s
Annotations
10 errors and 10 warnings
|
WordPress.Security.EscapeOutput.ExceptionNotEscaped:
admin/menu/class-replacevar-editor.php#L150
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
|
WordPress.Security.EscapeOutput.ExceptionNotEscaped:
admin/menu/class-replacevar-editor.php#L151
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$field_name'.
|
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
admin/class-my-yoast-proxy.php#L92
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.
|
|
WordPress.Security.EscapeOutput.ExceptionNotEscaped:
admin/views/class-yoast-feature-toggle.php#L161
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
|
WordPress.Security.EscapeOutput.ExceptionNotEscaped:
admin/views/class-yoast-feature-toggle.php#L161
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$key'.
|
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
admin/views/paper-collapsible.php#L75
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$content'.
|
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
admin/google_search_console/views/gsc-display.php#L44
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$gsc_style_alert'.
|
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
admin/google_search_console/views/gsc-display.php#L45
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$gsc_style_alert_icon'.
|
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
admin/google_search_console/views/gsc-display.php#L52
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$gsc_style_alert_content'.
|
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
admin/google_search_console/views/gsc-display.php#L52
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$gsc_notification'.
|
|
WordPress.DB.PreparedSQL.InterpolatedNotPrepared:
admin/class-bulk-editor-list-table.php#L281
Use placeholders and $wpdb->prepare(); found interpolated variable {$subquery} at "SELECT COUNT(ID) FROM {$subquery}\n
|
|
WordPress.DB.PreparedSQL.InterpolatedNotPrepared:
admin/class-bulk-editor-list-table.php#L308
Use placeholders and $wpdb->prepare(); found interpolated variable {$subquery} at \t\t\t\t\t\t\t\tSELECT COUNT(ID) FROM {$subquery}\n
|
|
WordPress.DB.PreparedSQL.InterpolatedNotPrepared:
admin/class-bulk-editor-list-table.php#L330
Use placeholders and $wpdb->prepare(); found interpolated variable {$subquery} at "SELECT COUNT(ID) FROM {$subquery}\n
|
|
WordPress.DB.PreparedSQL.InterpolatedNotPrepared:
admin/class-bulk-editor-list-table.php#L383
Use placeholders and $wpdb->prepare(); found interpolated variable {$subquery} at "SELECT DISTINCT post_type FROM {$subquery}\n
|
|
WordPress.DB.PreparedSQL.InterpolatedNotPrepared:
admin/class-bulk-editor-list-table.php#L542
Use placeholders and $wpdb->prepare(); found interpolated variable {$subquery} at "SELECT COUNT(ID) FROM {$subquery}\n
|
|
WordPress.DB.PreparedSQL.InterpolatedNotPrepared:
admin/class-bulk-editor-list-table.php#L543
Use placeholders and $wpdb->prepare(); found interpolated variable {$all_states} at \t\t\t\tWHERE post_status IN ({$all_states})\n
|
|
WordPress.DB.PreparedSQL.InterpolatedNotPrepared:
admin/class-bulk-editor-list-table.php#L544
Use placeholders and $wpdb->prepare(); found interpolated variable {$post_type_clause} at \t\t\t\t\t{$post_type_clause}\n
|
|
WordPress.DB.PreparedSQL.InterpolatedNotPrepared:
lib/migrations/adapter.php#L263
Use placeholders and $wpdb->prepare(); found interpolated variable $table at "SELECT * FROM $table LIMIT 1"
|
|
update_modification_detected:
inc/class-addon-manager.php#L1
Detected code which may be altering WordPress update routines. Detected: pre_set_site_transient_update_plugins
|
|
update_modification_detected:
inc/class-addon-manager.php#L1
Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
|