3.19.0
·
496 commits
to master
since this release
New Feature
- [SONARPHP-1179] - Rule S6339: Secret keys and salt values should be robust
- [SONARPHP-1206] - Rule S6341: WordPress theme and plugin editors are security-sensitive
- [SONARPHP-1207] - Rule S6342: Allowing themes and plugins to be managed in WordPress admin area is security-sensitive
- [SONARPHP-1208] - Rule S6343: Disabling automatic updates is security-sensitive
- [SONARPHP-1210] - Rule S6344: Constants should not be redefined
- [SONARPHP-1211] - Rule S6345: Allowing all external requests from a WordPress server is security-sensitive
- [SONARPHP-1212] - Rule S6346: Allowing unauthenticated database repair in WordPress is security-sensitive
- [SONARPHP-1213] - Rule S6347: WordPress options should not be defined at the end of "wp-config.php"
- [SONARPHP-1214] - Rule S6348: Allowing unfiltered HTML content in WordPress is security-sensitive
- [SONARPHP-1215] - Rule S6349: WordPress option names should not be misspelled
Improvement
- [SONARPHP-1176] - WordPress: S4507 should consider WP_DEBUG option
- [SONARPHP-1177] - WordPress: S5332 should consider FORCE_SSL_ADMIN and FORCE_SSL_LOGIN options