Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Improvement]: Move grid data related functions from pimcore/pimcore v11.3 #457

Merged
merged 27 commits into from
Jun 18, 2024

Conversation

kingjia90
Copy link
Contributor

src/Service/GridData/DataObject.php Fixed Show fixed Hide fixed
src/Service/GridData/DataObject.php Fixed Show fixed Hide fixed
src/Service/GridData/DataObject.php Fixed Show fixed Hide fixed
@kingjia90 kingjia90 marked this pull request as draft March 6, 2024 12:51
composer.json Outdated Show resolved Hide resolved
@kingjia90 kingjia90 marked this pull request as ready for review March 6, 2024 13:53
Copy link

sonarcloud bot commented Mar 6, 2024

Quality Gate Passed Quality Gate passed

Issues
39 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@wisconaut wisconaut modified the milestones: 1.4.0, 1.5.0 Mar 11, 2024
@kingjia90 kingjia90 changed the title [Improvement]: Move grid data related functions from pimcore/pimcore v11.2 [Improvement]: Move grid data related functions from pimcore/pimcore v11.3 Mar 11, 2024
@markus-moser markus-moser self-assigned this Apr 26, 2024

if (method_exists($object, $getter)) {
/** @var Classificationstore $classificationStoreData */
$classificationStoreData = $object->$getter();

Check warning

Code scanning / SonarCloud

Reflection should not be vulnerable to injection attacks Medium

Change this code to not construct class or method names directly from user-controlled data. See more on SonarCloud
$value = $object->$getter();
if (!empty($value) && !empty($brickType)) {
$getBrickType = 'get' . ucfirst($brickType);
$value = $value->$getBrickType();

Check warning

Code scanning / SonarCloud

Reflection should not be vulnerable to injection attacks Medium

Change this code to not construct class or method names directly from user-controlled data. See more on SonarCloud
$value = $localizedFields->getLocalizedValue($brickDescriptor['brickfield']);
} else {
$brickFieldGetter = 'get' . ucfirst($brickKey);
$value = $value->$brickFieldGetter();

Check warning

Code scanning / SonarCloud

Reflection should not be vulnerable to injection attacks Medium

Change this code to not construct class or method names directly from user-controlled data. See more on SonarCloud
Copy link

sonarcloud bot commented May 16, 2024

Please retry analysis of this Pull-Request directly on SonarCloud

Copy link
Contributor

@markus-moser markus-moser left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please check if we can make the commented classes @internal. The rest LGTM - so we can merge it after checking 👍

src/Service/GridData/Element.php Show resolved Hide resolved
src/Service/GridData/Document.php Show resolved Hide resolved
src/Service/GridData/DataObject.php Show resolved Hide resolved
src/Service/GridData/Asset.php Show resolved Hide resolved
@markus-moser
Copy link
Contributor

Can be merged right before creating the release to avoid problems with the testing pipelines.

Copy link

sonarcloud bot commented Jun 18, 2024

Quality Gate Passed Quality Gate passed

Issues
39 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@kingjia90 kingjia90 merged commit 776fc43 into 1.x Jun 18, 2024
4 of 10 checks passed
@kingjia90 kingjia90 deleted the move-previewthumbfromcore branch June 18, 2024 09:08
@github-actions github-actions bot locked and limited conversation to collaborators Jun 18, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Move function to admin-ui-classic-bundle
4 participants