Add cpcs
checks workflow (#108)
#3
Annotations
10 errors and 10 warnings
CPCS:
lib/admin-page.php#L212
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
|
CPCS:
lib/admin-page.php#L215
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
|
CPCS:
lib/admin-page.php#L222
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
CPCS:
lib/admin-page.php#L231
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
|
CPCS:
lib/admin-page.php#L277
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
|
CPCS:
lib/admin-page.php#L278
The $text arg must be a single string literal, not ""<h2>You're almost done switching to ClassicPress v".preg_replace('#[+-].*$#', '', $cp_version)."!</h2>"".
|
CPCS:
lib/admin-page.php#L281
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
|
CPCS:
lib/admin-page.php#L282
The $text arg must be a single string literal, not ""<strong class='cp-emphasis'>You must visit the <a href='".$reinstall_url."'>Updates Page</a> and Press the Re-Install Now button to complete the migration process!</strong>"".
|
CPCS:
lib/admin-page.php#L286
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
|
CPCS:
lib/admin-page.php#L287
The $text arg must be a single string literal, not ""<h2>Good job, you're running ClassicPress v".preg_replace('#[+-].*$#', '', $cp_version)."!</h2>"".
|
CPCS:
lib/admin-page.php#L294
Strings should not be wrapped in HTML
|
CPCS:
lib/admin-page.php#L365
json_encode() is discouraged. Use wp_json_encode() instead.
|
CPCS:
lib/admin-page.php#L441
Strings should not be wrapped in HTML
|
CPCS:
lib/admin-page.php#L627
Strings should not be wrapped in HTML
|
CPCS:
lib/admin-page.php#L1044
Strings should not be wrapped in HTML
|
CPCS:
lib/update.php#L76
Please spell "WordPress" correctly. Found 1 misspelling(s): wordpress
|
CPCS:
lib/update.php#L93
Processing form data without nonce verification.
|
CPCS:
lib/update.php#L145
json_encode() is discouraged. Use wp_json_encode() instead.
|
CPCS:
lib/update.php#L176
Please spell "WordPress" correctly. Found 1 misspelling(s): wordpress
|
CPCS:
lib/update.php#L202
Processing form data without nonce verification.
|