Getting nonce verification needed for every instance of a $_GET or $_REQUEST var

[davidperezgar]

I am getting a “nonce verification needed” warning for every instance of a $_GET or $_REQUEST variable in a conditional when there is no form submission, ajax query or other type of transmission happening. These are not hard to ignore, though a bit annoying. This is also troublesome because I am editing a plugin that was flagged as not secure by the repository review team and I need to clear all errors and warnings using this plugin. If I am wrong on thinking that nonces are not required just because a $_GET or $_REQUEST is used in the code, please let me know. I could be wrong on that point.

https://wordpress.org/support/topic/getting-nonce-verification-needed-for-every-instance-of-a-_get-or-_request-var/#post-17911660

[swissspidy]

That's how the PHPCS sniff works 🤷

See https://github.com/WordPress/WordPress-Coding-Standards/wiki/Fixing-errors-for-input-data#nonces and https://github.com/WordPress/WordPress-Coding-Standards/wiki/Sanitizing-array-input-data

If they think there are false positives, they can be reported to WPCS.

[davidperezgar]

Let's check and report if they are false positives.