Add cpcs checks workflow #2
Annotations
10 errors and 10 warnings
CPCS:
lib/admin-page.php#L207
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
|
CPCS:
lib/admin-page.php#L210
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
|
CPCS:
lib/admin-page.php#L217
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
CPCS:
lib/admin-page.php#L226
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
CPCS:
lib/admin-page.php#L272
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
|
CPCS:
lib/admin-page.php#L273
The $text arg must be a single string literal, not ""<h3>You're almost done switching to ClassicPress v".preg_replace('#[+-].*$#', '', $cp_version)."!</h3>"".
|
CPCS:
lib/admin-page.php#L276
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
|
CPCS:
lib/admin-page.php#L277
The $text arg must be a single string literal, not ""<strong class='cp-emphasis'>You must visit the <a href='".$reinstall_url."'>Updates Page</a> and Press the Re-Install Now button to complete the migration process!</strong>"".
|
CPCS:
lib/admin-page.php#L281
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
|
CPCS:
lib/admin-page.php#L282
The $text arg must be a single string literal, not ""<h3>Good job, you're running ClassicPress v".preg_replace('#[+-].*$#', '', $cp_version)."!</h3>"".
|
CPCS:
lib/admin-page.php#L289
Strings should not be wrapped in HTML
|
CPCS:
lib/admin-page.php#L360
json_encode() is discouraged. Use wp_json_encode() instead.
|
CPCS:
lib/admin-page.php#L436
Strings should not be wrapped in HTML
|
CPCS:
lib/admin-page.php#L622
Strings should not be wrapped in HTML
|
CPCS:
lib/admin-page.php#L1039
Strings should not be wrapped in HTML
|
CPCS:
lib/update.php#L76
Please spell "WordPress" correctly. Found 1 misspelling(s): wordpress
|
CPCS:
lib/update.php#L93
Processing form data without nonce verification.
|
CPCS:
lib/update.php#L145
json_encode() is discouraged. Use wp_json_encode() instead.
|
CPCS:
lib/update.php#L176
Please spell "WordPress" correctly. Found 1 misspelling(s): wordpress
|
CPCS:
lib/update.php#L202
Processing form data without nonce verification.
|