Tweak: Removed text domain loading method in favor of WordPress stand… #38
KingYesAnnotations
11 warnings
|
Lint PHP files
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809, actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Lint PHP files:
hooks/class-aal-hook-widgets.php#L28
Processing form data without nonce verification.
|
|
Lint PHP files:
hooks/class-aal-hook-widgets.php#L27
Processing form data without nonce verification.
|
|
Lint PHP files:
hooks/class-aal-hook-widgets.php#L27
Detected usage of a non-sanitized input variable: $_SERVER['REQUEST_METHOD']
|
|
Lint PHP files:
hooks/class-aal-hook-widgets.php#L27
$_SERVER['REQUEST_METHOD'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
Lint PHP files:
hooks/class-aal-hook-widgets.php#L27
Detected usage of a possibly undefined superglobal array index: $_SERVER['REQUEST_METHOD']. Check that the array index exists before using it.
|
|
Lint PHP files:
hooks/class-aal-hook-widgets.php#L15
Processing form data without nonce verification.
|
|
Lint PHP files:
aryo-activity-log.php#L136
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'get_class'.
|
|
Lint PHP files:
aryo-activity-log.php#L135
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
|
Lint PHP files:
aryo-activity-log.php#L118
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'get_class'.
|
|
Lint PHP files:
aryo-activity-log.php#L117
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|