Added CI workflow "WordPress Plugin Check" #3
Annotations
10 errors and 9 warnings
WordPress.Security.EscapeOutput.OutputNotEscaped:
includes/wp-login/class-login.php#L70
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'apply_filters'.
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
includes/wp-login/class-login.php#L71
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'apply_filters'.
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
includes/wp-login/class-login.php#L72
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'apply_filters'.
|
PluginCheck.CodeAnalysis.ImageFunctions.NonEnqueuedImage:
includes/wp-login/class-login.php#L73
Images should be added using wp_get_attachment_image() or similar functions
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
includes/wp-login/class-login.php#L73
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'apply_filters'.
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
includes/wp-login/class-login.php#L93
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'apply_filters'.
|
WordPress.Security.EscapeOutput.OutputNotEscaped:
includes/wp-login/class-login.php#L94
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'apply_filters'.
|
stable_tag_mismatch:
readme.txt#L1
Mismatched Stable Tag: 1.4 != Indev. The Stable Tag in your readme file does not match the version in your main plugin file. Your Stable Tag is meant to be the stable version of your plugin, not of WordPress. For your plugin to be properly downloaded from WordPress.org, those values need to be the same. If they're out of sync, your users won't get the right version of your code.
|
PluginCheck.CodeAnalysis.ImageFunctions.NonEnqueuedImage:
includes/admin/class-admin.php#L337
Images should be added using wp_get_attachment_image() or similar functions
|
test
Process completed with exit code 1.
|
mismatched_plugin_name:
readme.txt#L1
Plugin name "Unofficial Mobile BankID Integration" is different from the name declared in plugin header "Mobile BankID Integration".
|
WordPress.DB.DirectDatabaseQuery.DirectQuery:
includes/class-activation.php#L55
Use of a direct database call is discouraged.
|
WordPress.DB.DirectDatabaseQuery.NoCaching:
includes/class-activation.php#L55
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
|
WordPress.DB.PreparedSQL.InterpolatedNotPrepared:
includes/class-activation.php#L55
Use placeholders and $wpdb->prepare(); found interpolated variable {$table_name} at "DROP TABLE IF EXISTS `{$table_name}`"
|
WordPress.DB.DirectDatabaseQuery.SchemaChange:
includes/class-activation.php#L55
Attempting a database schema change is discouraged.
|
WordPress.DB.SlowDBQuery.slow_db_query_meta_key:
includes/settings/class-usersettings.php#L65
Detected usage of meta_key, possible slow query.
|
WordPress.DB.SlowDBQuery.slow_db_query_meta_value:
includes/settings/class-usersettings.php#L66
Detected usage of meta_value, possible slow query.
|
WordPress.DB.SlowDBQuery.slow_db_query_meta_key:
includes/class-core.php#L186
Detected usage of meta_key, possible slow query.
|
WordPress.DB.SlowDBQuery.slow_db_query_meta_value:
includes/class-core.php#L187
Detected usage of meta_value, possible slow query.
|