Skip to content

fix: include readme.txt and license.txt in zip, fix phpcs:disable scope #49

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jackgranatowski merged 3 commits into from
Jun 19, 2026
Merged

fix: include readme.txt and license.txt in zip, fix phpcs:disable scope #49

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
91b39e7
fix: extend phpcs:disable to cover both lines of the manual CSS POST …
claude Jun 19, 2026
a43b33f
fix: include readme.txt and license.txt in plugin zip, fix phpcs:disa…
claude Jun 19, 2026
2286a2e
fix: mark readme.txt and license.txt as required in zip packaging
claude Jun 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion SLASHED-for-WP/includes/class-manual-css-page.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,10 +61,11 @@ public function handle_save() {
if ( 'clear' === $action ) {
update_option( self::OPTION_KEY, '' );
} else {
// phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- CSS cannot be sanitized via wp_kses without corrupting valid rules (e.g. `>`, `[attr~="val"]`). The value is validated below and stored raw; output is escaped at render time.
// phpcs:disable WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- CSS cannot be sanitized via wp_kses without corrupting valid rules (e.g. `>`, `[attr~="val"]`). The value is validated below against injection patterns and stored raw; output is escaped at render time.
$raw_css = isset( $_POST['slashed_manual_css'] )
? wp_unslash( $_POST['slashed_manual_css'] )
: '';
// phpcs:enable WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
// CSS must not be able to break out of an inline <style> context.
// Only block </style and <script; do NOT use wp_strip_all_tags() because
// it removes everything between < and >, corrupting valid CSS like
Expand Down
2 changes: 2 additions & 0 deletions scripts/zip-plugin.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,8 @@ const PLUGIN_ROOT = 'SLASHED-for-WP';
// src is the repo path; dest is the path inside the slashed/ zip folder.
const INCLUDE = [
{ src: `${PLUGIN_ROOT}/slashed.php`, dest: 'slashed.php' },
{ src: `${PLUGIN_ROOT}/readme.txt`, dest: 'readme.txt', required: true },
{ src: `${PLUGIN_ROOT}/license.txt`, dest: 'license.txt', required: true },
{ src: `${PLUGIN_ROOT}/includes`, dest: 'includes' },
{ src: `${PLUGIN_ROOT}/assets/admin-app`, dest: 'assets/admin-app', required: true },
{ src: `${PLUGIN_ROOT}/dist`, dest: 'dist', required: true },
Expand Down