fix: enforce chart-level authorization on AJAX handlers (#594) #1211
lucadobrescupr-checklist.yml
on: pull_request
Label PR based on checklist
6s
Annotations
1 error and 1 warning
|
Label PR based on checklist
The following items are not marked as completed: Run PHPUnit in CI for \ ests/test-ajax.php\ and \ ests/test-export.php\, Verify a contributor cannot delete, clone, export, or edit another user's chart, Verify \�isualizer-get-charts\ requires nonce + \edit_posts\ and only returns editable charts, Verify JSON schedule/data/filter handlers reject foreign chart IDs
|
|
Label PR based on checklist
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: Codeinwp/gha-pr-check-helper@master. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|