Skip to content

Bump squizlabs/php_codesniffer from 3.10.2 to 3.10.3 #26

Bump squizlabs/php_codesniffer from 3.10.2 to 3.10.3

Bump squizlabs/php_codesniffer from 3.10.2 to 3.10.3 #26

Triggered via pull request September 23, 2024 12:38
Status Failure
Total duration 2m 2s
Artifacts

build-tests.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

10 errors and 10 warnings
WordPress.Security.ValidatedSanitizedInput.MissingUnslash: includes/formscrm-library/class-gravityforms.php#L256
$_POST['_gform_setting_fc_crm_module'] not unslashed before sanitization. Use wp_unslash() or similar
WordPress.WP.I18n.MissingTranslatorsComment: includes/formscrm-library/class-gravityforms.php#L286
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WordPress.Security.ValidatedSanitizedInput.MissingUnslash: includes/formscrm-library/class-gravityforms.php#L382
$_POST['_gform_setting_fc_crm_custom_' . $variable] not unslashed before sanitization. Use wp_unslash() or similar
WordPress.Security.ValidatedSanitizedInput.MissingUnslash: includes/formscrm-library/class-gravityforms.php#L402
$_POST['_gform_setting_' . $value] not unslashed before sanitization. Use wp_unslash() or similar
WordPress.Security.ValidatedSanitizedInput.MissingUnslash: includes/formscrm-library/class-gravityforms.php#L419
$_POST['_gform_setting_fc_crm_custom_type'] not unslashed before sanitization. Use wp_unslash() or similar
WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents: includes/formscrm-library/class-gravityforms.php#L437
file_get_contents() is discouraged. Use wp_remote_get() for remote URLs instead.
WordPress.WP.I18n.MissingTranslatorsComment: includes/formscrm-library/class-gravityforms-widget.php#L62
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WordPress.WP.I18n.MissingTranslatorsComment: includes/formscrm-library/class-gravityforms-widget.php#L79
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WordPress.Security.EscapeOutput.OutputNotEscaped: includes/formscrm-library/class-gravityforms-widget.php#L93
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$html'.
plugin_updater_detected: includes/admin/class-admin-updater.php#L1
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins
WordPress.Security.NonceVerification.Missing: includes/formscrm-library/class-gravityforms.php#L256
Processing form data without nonce verification.
WordPress.Security.NonceVerification.Missing: includes/formscrm-library/class-gravityforms.php#L256
Processing form data without nonce verification.
WordPress.Security.NonceVerification.Missing: includes/formscrm-library/class-gravityforms.php#L381
Processing form data without nonce verification.
WordPress.Security.NonceVerification.Missing: includes/formscrm-library/class-gravityforms.php#L382
Processing form data without nonce verification.
WordPress.Security.NonceVerification.Missing: includes/formscrm-library/class-gravityforms.php#L401
Processing form data without nonce verification.
WordPress.Security.NonceVerification.Missing: includes/formscrm-library/class-gravityforms.php#L402
Processing form data without nonce verification.
WordPress.Security.NonceVerification.Missing: includes/formscrm-library/class-gravityforms.php#L418
Processing form data without nonce verification.
WordPress.Security.NonceVerification.Missing: includes/formscrm-library/class-gravityforms.php#L419
Processing form data without nonce verification.
update_modification_detected: includes/admin/class-admin-updater.php#L1
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: auto_update_plugin
update_modification_detected: includes/admin/class-admin-updater.php#L1
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: pre_set_site_transient_update_plugins