NewPath-Consulting / Wild-Apricot-Press

The core Wild Apricot Press (WAP) plugin.
https://newpathconsulting.com/wap
GNU General Public License v3.0
3 stars 1 forks source link

Run security plugin-check and fix ERRORS #179

Open asirota opened 3 weeks ago

asirota commented 3 weeks ago

I have checked the following:

WildApricot Press version:

1.1

Describe the bug

Run /wp-admin/admin.php?page=plugin-check on PLayground and look at Security errors. These need to be fixed

Debug log file

FILE: src/admin-settings.php Line Column Type Code Message Edit Link 1868 23 ERROR WordPress.Security.EscapeOutput.OutputNotEscaped All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$file_contents'. View in code editor (opens in a new tab) 1868 54 ERROR WordPress.Security.EscapeOutput.OutputNotEscaped All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$file_contents'. View in code editor (opens in a new tab) 1888 41 ERROR WordPress.Security.EscapeOutput.OutputNotEscaped All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'Addon'. View in code editor (opens in a new tab)

FILE: src/class-data-encryption.php Line Column Type Code Message Edit Link 40 44 ERROR WordPress.Security.EscapeOutput.ExceptionNotEscaped All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'Encryption_Exception'. View in code editor (opens in a new tab) 51 44 ERROR WordPress.Security.EscapeOutput.ExceptionNotEscaped All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'Encryption_Exception'. View in code editor (opens in a new tab) 71 44 ERROR WordPress.Security.EscapeOutput.ExceptionNotEscaped All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'Encryption_Exception'. View in code editor (opens in a new tab) 89 44 ERROR WordPress.Security.EscapeOutput.ExceptionNotEscaped All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'Decryption_Exception'. View in code editor (opens in a new tab)

FILE: src/class-wa-api.php Line Column Type Code Message Edit Link 57 37 ERROR WordPress.Security.EscapeOutput.ExceptionNotEscaped All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'API_Exception'. View in code editor (opens in a new tab) 72 37 ERROR WordPress.Security.EscapeOutput.ExceptionNotEscaped All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'API_Exception'. View in code editor (opens in a new tab)

Screenshots/Live demo link

image