Skip to content

v1.6165 — Plugin Check verified submission build

Latest
Latest

Choose a tag to compare

View all tags
@thisismyurl thisismyurl released this 14 Jun 13:58
Immutable release. Only release title and notes can be modified.
v1.6165.1
bfecf4c

Shadow by Christopher Ross 1.6165 — WordPress.org submission package.

Completes the WordPress.org Plugin Review Team remediation, a distinction pass, and a full Plugin Check run.

✅ Verified

  • WordPress.org Plugin Check: 0 errors. Run via the official plugin-check plugin (wp-cli) against a local WordPress 7.0 install. The 5 errors found on the first pass were all fixed; the ~51 remaining notices are advisory DirectQuery / NoCaching / SlowDBQuery warnings inherent to a database-diagnostics plugin (non-blocking for directory approval).
  • php -l clean on every file; structural readme checks pass (Stable tag == Version == 1.6165); languages/thisismyurl-shadow.pot generated (1,403 strings).

Highlights

  • Security & compliance: hardened input sanitization, output escaping, and prepared SQL; corrected file/directory handling; scoped PHP execution limits; removed the self-hosted GitHub updater; fixed two direct-file-access-guard placements Plugin Check flagged; sanitized two unguarded $_POST price fields; replaced is_writable() with wp_is_writable().
  • Backup/restore removed: the local backup ("Vault Lite") now lives in a separate plugin — which retired the unprepared restore SQL and whole-site path handling.
  • Accessibility pass (admin UI): visible keyboard focus, live regions, native buttons, contrast fixes, focus management — code-level fixes reviewed by an accessibility specialist (WCAG 2.2 AA).
  • Developer documentation: docs/HOOKS.md (~73 actions/filters + "Extending Shadow"), shipped in the package.
  • Cleanup: dead code removed, options-autoload footprint reduced, dev tooling excluded from the build, product name reconciled to "Shadow by Christopher Ross".

See readme.txt for the full changelog.

Distribution

The attached thisismyurl-shadow-1.6165.zip is the submission package: slug-rooted (thisismyurl-shadow/), .distignore applied, docs/HOOKS.md + languages/*.pot included, no .git/vendor/tests/scripts/dev tooling.

⚠️ Still recommended before submission

  • A live accessibility pass — NVDA + Firefox, VoiceOver + Safari, keyboard-only, Windows High Contrast, axe/Lighthouse on the four admin screens. Code-level fixes are done and specialist-reviewed; the live pass is tracked as PENDING in docs/ACCESSIBILITY.md. This is the one gate that genuinely needs a human at the assistive tech.
  • Optional: paste readme.txt into the WordPress.org readme validator as a final formatting check.
Assets 4
Loading