Chore/update elfinder #14
Merged
Annotations
4 errors and 10 warnings
|
WordPress Plugin Check
Process completed with exit code 1.
|
|
WordPress Plugin Check:
backend/app/Providers/PhpSyntaxChecker.php#L30
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
|
|
WordPress Plugin Check:
backend/app/Providers/AccessControlProvider.php#L221
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wp_strip_all_tags'.
|
|
WordPress Plugin Check:
backend/app/Providers/FileEditValidator.php#L44
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wp_strip_all_tags'.
|
|
WordPress Plugin Check:
backend/app/Http/Controllers/FileManagerController.php#L28
Detected usage of a possibly undefined superglobal array index: $_REQUEST['cmd']. Check that the array index exists before using it.
|
|
WordPress Plugin Check:
backend/app/Http/Controllers/FileManagerController.php#L28
Processing form data without nonce verification.
|
|
WordPress Plugin Check:
composer.json#L0
The "/vendor" directory using composer exists, but "composer.json" file is missing.
|
|
WordPress Plugin Check:
backend/app/Providers/PhpSyntaxChecker.php#L100
The use of function set_time_limit() is discouraged
|
|
WordPress Plugin Check:
backend/app/Providers/PhpSyntaxChecker.php#L94
Detected usage of a non-sanitized input variable: $_SERVER['PHP_AUTH_PW']
|
|
WordPress Plugin Check:
backend/app/Providers/PhpSyntaxChecker.php#L94
Detected usage of a non-sanitized input variable: $_SERVER['PHP_AUTH_USER']
|
|
WordPress Plugin Check:
backend/app/Providers/AccessControlProvider.php#L217
Detected usage of a non-sanitized input variable: $_REQUEST['content']
|
|
WordPress Plugin Check:
backend/app/Providers/AccessControlProvider.php#L217
$_REQUEST['content'] not unslashed before sanitization. Use wp_unslash() or similar
|
|
WordPress Plugin Check:
backend/app/Providers/AccessControlProvider.php#L217
Processing form data without nonce verification.
|
|
WordPress Plugin Check:
backend/app/Providers/AccessControlProvider.php#L216
Processing form data without nonce verification.
|
Loading