Dolibarr ERP CRM is a modern software package to manage your company or foundation's activity (contacts, suppliers, invoices, orders, stocks, agenda, accounting, ...). it's an open source Web application (written in PHP) designed for businesses of any sizes, foundations and freelancers.
This report summarizes scanner evidence for Dolibarr/dolibarr, a PHP project with 7,812 GitHub stars. SynthScan examined 2,280,514 lines of code across 6815 source files, recording 2239 pattern matches distributed across 17 syntactic categories. The legacy adjusted pattern signal is 1.2 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 2075 finding(s).
Are imports declared and package/API names verified? 113 finding(s).
Are wrappers, guards, and repeated structures necessary? 1448 finding(s).
Which changes need focused human review? 2239 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 2239 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/phpunit/FunctionsNumToWordTest.php | 90 | public function providerFrenchIntegersTraditional() | CODE |
| LOW | test/phpunit/FunctionsNumToWordTest.php | 136 | public function testDolConvertIntToFrenchWordsTraditional() | CODE |
| LOW | test/phpunit/FunctionsNumToWordTest.php | 148 | public function testDolConvertIntToFrenchWordsReform() | CODE |
| LOW | test/phpunit/FunctionsNumToWordTest.php | 170 | public function testDolConvertToWordFrenchAmounts() | CODE |
| LOW | test/phpunit/FunctionsNumToWordTest.php | 195 | public function testDolConvertToWordFrenchCurrencyAndNegative() | CODE |
| LOW | test/phpunit/FunctionsNumToWordTest.php | 216 | public function testDolConvertToWordFrenchReformConstant() | CODE |
| LOW | test/phpunit/FunctionsNumToWordTest.php | 234 | public function testDolConvertToWordCentsExtractionEnglish() | CODE |
| LOW | test/phpunit/RestAPISupplierOrderTest.php | 118 | public function testRestSupplierOrderRefuse() | CODE |
| LOW | test/phpunit/RestAPISupplierOrderTest.php | 146 | public function testRestSupplierOrderRefuseAgain($order_id) | CODE |
| LOW | test/phpunit/RestAPISupplierOrderTest.php | 158 | public function testRestSupplierOrderRefuseNotFound() | CODE |
| LOW | test/phpunit/RestAPISupplierOrderTest.php | 170 | public function testRestSupplierOrderCancel() | CODE |
| LOW | test/phpunit/RestAPISupplierOrderTest.php | 202 | public function testRestSupplierOrderCancelAgain($order_id) | CODE |
| LOW | test/phpunit/RestAPISupplierOrderTest.php | 214 | public function testRestSupplierOrderCancelNotFound() | CODE |
| LOW | test/phpunit/RestAPISupplierOrderTest.php | 226 | public function testRestSupplierOrderSetToDraftValidated() | CODE |
| LOW | test/phpunit/RestAPISupplierOrderTest.php | 249 | public function testRestSupplierOrderSetToDraftApproved() | CODE |
| LOW | test/phpunit/RestAPISupplierOrderTest.php | 276 | public function testRestSupplierOrderSetToDraftNotFound() | CODE |
| LOW | test/phpunit/FormMailTest.php | 69 | public function testGetHtmlForToOldHasNoFreetagScript() | CODE |
| LOW | test/phpunit/FormMailTest.php | 141 | public function testGetFormDispatchesToFreetagRenderersWhenConstantIsOn() | CODE |
| LOW | test/phpunit/FormMailTest.php | 192 | public function testGetEMailTemplateFindsTemplatesForNotificationObjectTypes() | CODE |
| LOW | test/phpunit/BuildDocTest.php | 232 | public function testFactureFournisseurBuild() | CODE |
| LOW | test/phpunit/BuildDocTest.php | 287 | public function testCommandeFournisseurBuild() | CODE |
| LOW | test/phpunit/XCalLibTest.php | 116 | public function testQuotedPrintEncodeDecode() | CODE |
| LOW | test/phpunit/LinkTest.php | 141 | public function testLinkFetchWithoutParameters() | CODE |
| LOW | test/phpunit/EmailCollectorTest.php | 127 | public function testEmailCollectorCollect($localobject) | CODE |
| LOW | test/phpunit/AiMcpApiBridgeTest.php | 85 | public function testDescriptionWithoutTagIsUnchanged() | CODE |
| LOW | test/phpunit/AiMcpApiBridgeTest.php | 99 | public function testPatternBecomesAConstraintAndLeavesTheText() | CODE |
| LOW | test/phpunit/AiMcpApiBridgeTest.php | 118 | public function testPatternWithASemanticFlagIsDropped() | CODE |
| LOW | test/phpunit/AiMcpApiBridgeTest.php | 132 | public function testMinAndMaxBecomeNumbers() | CODE |
| LOW | test/phpunit/AiMcpApiBridgeTest.php | 148 | public function testChoiceFollowsTheParameterType() | CODE |
| LOW | test/phpunit/AiMcpApiBridgeTest.php | 166 | public function testUntranslatableTagsAreStrippedWithoutConstraint() | CODE |
| LOW | test/phpunit/CodingPhpTest.php | 973 | public function testVerifyNoActiveVardump() | CODE |
| LOW | test/phpunit/CodingPhpTest.php | 1112 | public function commentRemovalTestProvider() | CODE |
| LOW | test/phpunit/RemiseChequeTest.php | 78 | public function testRemiseChequePrepareCheckPayment() | CODE |
| LOW | test/phpunit/MoTest.php | 275 | public function testMoDeleteRemovesCategoryLinks() | CODE |
| LOW | test/phpunit/CompanyBankAccountTest.php | 58 | public function testCompanyBankAccountCreate() | CODE |
| LOW | test/phpunit/CompanyBankAccountTest.php | 90 | public function testCompanyBankAccountFetch($id) | CODE |
| LOW | test/phpunit/CompanyBankAccountTest.php | 113 | public function testSepaMandateForcedOutputDirectory($localobject) | CODE |
| LOW | test/phpunit/CompanyBankAccountTest.php | 158 | public function testCompanyBankAccountSetAsDefault($localobject) | CODE |
| LOW | test/phpunit/CompanyBankAccountTest.php | 181 | public function testCompanyBankAccountUpdate($localobject) | CODE |
| LOW | test/phpunit/CompanyBankAccountTest.php | 206 | public function testCompanyBankAccountOther($localobject) | CODE |
| LOW | test/phpunit/OpensurveysondageTest.php | 86 | public function testOpensurveysondageCreate() | CODE |
| LOW | test/phpunit/OpensurveysondageTest.php | 121 | public function testOpensurveysondageFetch($localobject) | CODE |
| LOW | test/phpunit/OpensurveysondageTest.php | 153 | public function testOpensurveysondageUpdate($localobject) | CODE |
| LOW | test/phpunit/OpensurveysondageTest.php | 184 | public function testOpensurveysondageDelete($localobject) | CODE |
| LOW | test/phpunit/BonPrelevementTest.php | 349 | public function testGenerateRejectsInvalidSepaSequenceType() | CODE |
| LOW | test/phpunit/BonPrelevementTest.php | 365 | public function testCreateRejectsInvalidSepaSequenceType() | CODE |
| LOW | test/phpunit/BonPrelevementTest.php | 394 | public function testTwoCompaniesSimpleRib() | CODE |
| LOW | test/phpunit/BonPrelevementTest.php | 450 | public function testTwoCompaniesDefaultRib() | CODE |
| LOW | test/phpunit/BonPrelevementTest.php | 509 | public function testTwoCompaniesDefaultRibFilteredToFirst() | CODE |
| LOW | test/phpunit/BonPrelevementTest.php | 620 | public function testOneCompanyTwoRibsSpecificOnly() | CODE |
| LOW | test/phpunit/BonPrelevementTest.php | 677 | public function testMixedOrderFourInvoices() | CODE |
| LOW | test/phpunit/ApiSupplierOrderHeaderUpdateTest.php | 63 | public function testExecutionRestoresAutoloadersAfterSuccessAndFailure() | CODE |
| LOW | test/phpunit/ApiSupplierOrderHeaderUpdateTest.php | 81 | public function testFlatObjectAndJsonInputsProduceTheSamePartialBody() | CODE |
| LOW | test/phpunit/ApiSupplierOrderHeaderUpdateTest.php | 95 | public function testExtrafieldsOnlyBodyIsNotUnwrapped() | CODE |
| LOW | test/phpunit/ApiSupplierOrderHeaderUpdateTest.php | 110 | public function testZeroAndNullArePreservedAndConfirmationStateIsNotPartOfTheBody() | CODE |
| LOW | test/phpunit/ApiSupplierOrderHeaderUpdateTest.php | 124 | public function testCreationDefaultsAndRenamesCannotAlterAnUpdateBody() | CODE |
| LOW | test/phpunit/ApiSupplierOrderHeaderUpdateTest.php | 139 | public function testInvalidBodiesAndFieldsAreRejectedBeforeExecution() | CODE |
| LOW | test/phpunit/ApiSupplierOrderHeaderUpdateTest.php | 162 | public function testExactlyOneExistingIdentifierIsRequired() | CODE |
| LOW | test/phpunit/ApiSupplierOrderHeaderUpdateTest.php | 173 | public function testReadWriteAndResourcePermissionsAreRequired() | CODE |
| LOW⚡ | test/phpunit/ApiSupplierOrderHeaderUpdateTest.php | 191 | public function testPreviewNamesTheOrderSupplierAndOldAndNewValues() | CODE |
| 1337 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .pre-commit-config.yaml | 1 | --- | COMMENT |
| LOW | .pre-commit-config.yaml | 81 | # - id: beautysh | COMMENT |
| LOW | .pre-commit-config.yaml | 301 | # # virtualmin excuded - reason https://github.com/Dolibarr/dolibarr/pull/36370#issuecomment-3565101823 | COMMENT |
| LOW | pyproject.toml | 21 | # For future reference: it is not currently possible to specify | COMMENT |
| LOW | pyproject.toml | 41 | # section_whitelines = 0 | COMMENT |
| LOW | test/phpunit/WebservicesInvoicesTest.php | 101 | // | COMMENT |
| LOW | htdocs/main.inc.php | 1621 | //header("X-XSS-Protection: 1"); // XSS filtering protection of some browsers (note: use of Content-Security-Pol | COMMENT |
| LOW | htdocs/main.inc.php | 1661 | } | COMMENT |
| LOW | htdocs/workstation/lib/workstation_workstation.lib.php | 81 | // Show more tabs from modules | COMMENT |
| LOW | htdocs/expedition/js/lib_dispatch.js.php | 1 | <?php | COMMENT |
| LOW | htdocs/expedition/class/expedition.class.php | 601 | if (isset($kits_list[$line->fk_elementdet]) && !getDolGlobalInt('PRODUIT_SOUSPRODUITS_ALSO_ENABLE_PARENT_STOCK_MOV | COMMENT |
| LOW | htdocs/webhook/triggerhistory_card.php | 281 | // Create an array for form | COMMENT |
| LOW | htdocs/webhook/triggerhistory_list.php | 101 | $search[$key] = GETPOST('search_'.$key, 'alpha'); | COMMENT |
| LOW | htdocs/webhook/modulebuilder.txt | 1 | # DO NOT DELETE THIS FILE MANUALLY | COMMENT |
| LOW | htdocs/webhook/class/target.class.php | 181 | // * @var string Field with ID of parent key if this object has a parent | COMMENT |
| LOW | htdocs/webhook/class/triggerhistory.class.php | 181 | COMMENT | |
| LOW | htdocs/webhook/class/triggerhistory.class.php | 201 | // * @var array List of child tables. To test if we can delete object. | COMMENT |
| LOW | htdocs/modulebuilder/index.php | 5541 | // $head3[$h][1] = $diclabel; | COMMENT |
| LOW | htdocs/modulebuilder/template/mymoduleindex.php | 81 | $max = getDolUserInt('MAIN_SIZE_SHORTLIST_LIMIT', getDolGlobalInt('MAIN_SIZE_SHORTLIST_LIMIT', 5)); | COMMENT |
| LOW | htdocs/modulebuilder/template/myobject_agenda.php | 21 | /** | COMMENT |
| LOW | htdocs/modulebuilder/template/myobject_card.php | 21 | /** | COMMENT |
| LOW | htdocs/modulebuilder/template/myobject_card.php | 261 | } | COMMENT |
| LOW | htdocs/modulebuilder/template/myobject_card.php | 381 | } | COMMENT |
| LOW | htdocs/modulebuilder/template/myobject_note.php | 21 | * \file htdocs/modulebuilder/template/myobject_note.php | COMMENT |
| LOW | htdocs/modulebuilder/template/myobject_document.php | 21 | * \file htdocs/modulebuilder/template/myobject_document.php | COMMENT |
| LOW | htdocs/modulebuilder/template/myobject_list.php | 21 | * \file htdocs/modulebuilder/template/myobject_list.php | COMMENT |
| LOW | htdocs/modulebuilder/template/myobject_list.php | 161 | $search[$key.'_dtend'] = dol_mktime(23, 59, 59, GETPOSTINT('search_'.$key.'_dtendmonth'), GETPOSTINT('search_'.$key.'_ | COMMENT |
| LOW | htdocs/modulebuilder/template/myobject_list.php | 501 | // Direct jump if only one record found | COMMENT |
| LOW | htdocs/modulebuilder/template/modulebuilder.txt | 1 | # DO NOT DELETE THIS FILE MANUALLY | COMMENT |
| LOW | …rs/interface_50_modMyModule_MyModuleTriggers.class.php | 101 | //case 'ACTION_DELETE': | COMMENT |
| LOW | …rs/interface_50_modMyModule_MyModuleTriggers.class.php | 121 | //case 'PRODUCT_MODIFY': | COMMENT |
| LOW | …rs/interface_50_modMyModule_MyModuleTriggers.class.php | 141 | //case 'ORDER_SENTBYMAIL': | COMMENT |
| LOW | …rs/interface_50_modMyModule_MyModuleTriggers.class.php | 161 | //case 'ORDER_SUPPLIER_RECEIVE': | COMMENT |
| LOW | …rs/interface_50_modMyModule_MyModuleTriggers.class.php | 181 | // SupplierProposal | COMMENT |
| LOW | …rs/interface_50_modMyModule_MyModuleTriggers.class.php | 201 | //case 'LINECONTRACT_MODIFY': | COMMENT |
| LOW | …rs/interface_50_modMyModule_MyModuleTriggers.class.php | 221 | //case 'LINEBILLREC_MODIFY': | COMMENT |
| LOW | …rs/interface_50_modMyModule_MyModuleTriggers.class.php | 241 | COMMENT | |
| LOW | …rs/interface_50_modMyModule_MyModuleTriggers.class.php | 261 | //case 'LINEFICHINTER_DELETE': | COMMENT |
| LOW | …rs/interface_50_modMyModule_MyModuleTriggers.class.php | 281 | //case 'PROJECT_DELETE': | COMMENT |
| LOW | …ulebuilder/template/core/modules/modMyModule.class.php | 81 | $this->editor_squarred_logo = ''; // Must be image filename into the module/img directory followed with @modulenam | COMMENT |
| LOW | …ulebuilder/template/core/modules/modMyModule.class.php | 101 | // 'entity' => '0' | COMMENT |
| LOW | …ulebuilder/template/core/modules/modMyModule.class.php | 201 | } | COMMENT |
| LOW | …ulebuilder/template/core/modules/modMyModule.class.php | 221 | // 'group' to add a tab in group view | COMMENT |
| LOW | …ulebuilder/template/core/modules/modMyModule.class.php | 281 | COMMENT | |
| LOW | …modules/mymodule/doc/pdf_standard_myobject.modules.php | 561 | COMMENT | |
| LOW | …modules/mymodule/doc/pdf_standard_myobject.modules.php | 1281 | ); | COMMENT |
| LOW | htdocs/modulebuilder/template/scripts/mymodule.php | 21 | /** | COMMENT |
| LOW | htdocs/ftp/index.php | 481 | $buff = array(); | COMMENT |
| LOW | htdocs/intracommreport/list.php | 61 | // if ((string) $type == '1') { | COMMENT |
| LOW | htdocs/contact/consumption.php | 281 | $tables_from .= ' LEFT JOIN '.MAIN_DB_PREFIX.'product p ON d.fk_product=p.rowid'; | COMMENT |
| LOW | htdocs/accountancy/class/accountancyexport.class.php | 2161 | // if (!empty($line->subledger_account)) { | COMMENT |
| LOW | htdocs/accountancy/class/accountancyexport.class.php | 2441 | // } elseif ($line->doc_type == 'customer_invoice') { | COMMENT |
| LOW | htdocs/install/medias/README.txt | 1 | # File(s) into root medias directory are provide by Pixabay with Licence "CC0 Creative Commons" | COMMENT |
| LOW | …-association_exp/medias/js/websitekey/jquery.sticky.js | 1 | // Sticky Plugin v1.0.4 for jQuery | COMMENT |
| LOW | htdocs/bom/modulebuilder.txt | 1 | # DO NOT DELETE THIS FILE MANUALLY | COMMENT |
| LOW | htdocs/core/website.inc.php | 141 | COMMENT | |
| LOW | …iggers/interface_95_modZapier_ZapierTriggers.class.php | 121 | //setEventMessages($obj['url'], null); | COMMENT |
| LOW | …iggers/interface_95_modZapier_ZapierTriggers.class.php | 221 | case 'ORDER_DELETE': | COMMENT |
| LOW | …iggers/interface_95_modZapier_ZapierTriggers.class.php | 241 | // case 'LINEORDER_SUPPLIER_CREATE': | COMMENT |
| LOW | …iggers/interface_95_modZapier_ZapierTriggers.class.php | 261 | // case 'SUPPLIER_PROPOSAL_VALIDATE': | COMMENT |
| 494 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …sociation_exp/medias/js/websitekey/jquery-3.3.1.min.js | 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f | CODE |
| CRITICAL | …re/filemanagerdol/browser/default/frmresourceslist.php | 158 | //window.top.opener.CKEDITOR.tools.callFunction(funcNum, encodeURI( fileUrl ).replace( '#', '%23' )); | COMMENT |
| CRITICAL | …re/filemanagerdol/browser/default/frmresourceslist.php | 159 | window.top.opener.CKEDITOR.tools.callFunction(funcNum, fileUrl.replace( '#', '%23' )); | CODE |
| CRITICAL | htdocs/includes/jquery/js/jquery-ui.min.js | 6 | !function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(V){"use strict" | CODE |
| CRITICAL | htdocs/includes/jquery/js/jquery.min.js | 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f | CODE |
| CRITICAL | htdocs/includes/jquery/js/jquery.js | 8177 | jQuery.each( jQuery.expr.match.bool.source.match( /\w+/g ), function( _i, name ) { | CODE |
| CRITICAL | …/framework/Luracast/Restler/explorer/swagger-ui.min.js | 13 | this.statusText=this.req.xhr.statusText,this._setStatusProperties(this.xhr.status),this.header=this.headers=s(this.xhr.g | CODE |
| CRITICAL | htdocs/includes/leaflet/leaflet-geoman.min.js | 1 | (()=>{var t={9705:(t,e,i)=>{"use strict";var n=i(1540);function r(t){var e=[Infinity,Infinity,-Infinity,-Infinity];retur | CODE |
| CRITICAL | …ic/includes/tinymce/tinymce/themes/silver/theme.min.js | 386 | o.removeAllHooks=function(){E={}},o}();const Jv=e=>Kv().sanitize(e);var Qv=tinymce.util.Tools.resolve("tinymce.util.I18n | CODE |
| CRITICAL | htdocs/public/includes/jquery/js/jquery-ui.min.js | 6 | !function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(V){"use strict" | CODE |
| CRITICAL | htdocs/public/includes/jquery/js/jquery.min.js | 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f | CODE |
| CRITICAL | htdocs/public/includes/jquery/js/jquery.js | 8177 | jQuery.each( jQuery.expr.match.bool.source.match( /\w+/g ), function( _i, name ) { | CODE |
| CRITICAL | htdocs/public/includes/ckeditor/ckeditor/ckeditor.js | 55 | -1===CKEDITOR.tools.indexOf(CKEDITOR.tools.style.parse._borderStyle,a)?!b.width&&CKEDITOR.tools.style.parse._widthRegExp | CODE |
| CRITICAL | htdocs/public/includes/ckeditor/ckeditor/ckeditor.js | 390 | this.getWindow().focus())},on:function(a,b){var c=Array.prototype.slice.call(arguments,0);CKEDITOR.env.ie&&/^focus|blur$ | CODE |
| CRITICAL | htdocs/public/includes/ckeditor/ckeditor/ckeditor.js | 416 | c.collapse(1),c.optimize(),""===c.startContainer.getHtml()&&c.startContainer.appendBogus(),c.select(),b=!0):b=!1;if(!b)r | CODE |
| CRITICAL | htdocs/public/includes/ckeditor/ckeditor/ckeditor.js | 589 | (a.controlStyle?' style\x3d"'+a.controlStyle+'"':"")+"\x3e"+e.call(this,b,a)+"\x3c/span\x3e"}]},CKEDITOR.dialog._.uiElem | CODE |
| CRITICAL | htdocs/public/includes/ckeditor/ckeditor/ckeditor.js | 608 | setValue:function(b){if(this.bidi){var a=b&&b.charAt(0);(a=""==a?"ltr":""==a?"rtl":null)&&(b=b.slice(1));this.setDirec | CODE |
| CRITICAL | htdocs/public/includes/ckeditor/ckeditor/ckeditor.js | 651 | I(this),a.data.preventDefault())},this);l=[];h=CKEDITOR.dialog._.uiElementBuilders.hbox.build(this,{type:"hbox",classNam | CODE |
| CRITICAL | htdocs/public/includes/ckeditor/ckeditor/ckeditor.js | 662 | '"':"",e=CKEDITOR.dialog._.uiElementBuilders.vbox.build(this,{type:"vbox",className:"cke_dialog_page_contents",children: | CODE |
| CRITICAL | htdocs/public/includes/ckeditor/ckeditor/ckeditor.js | 1205 | a.config.scayt_uiTabs[2]||delete c.scaytDict;b&&!CKEDITOR.plugins.scayt.isNewUdSupported(b)&&(delete c.scaytDict,a.confi | CODE |
| CRITICAL | htdocs/public/includes/ckeditor/ckeditor/ckeditor.js | 1402 | l.push(CKEDITOR.document.once("mouseup",b,this))}}function la(a){var b=null;a.on("data",function(){var a=this.data.class | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | test/phpunit/NamingContractTest.php | 88 | // ── NamingContract — map ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | test/phpunit/NamingContractTest.php | 218 | // ── NamingContract — module-only contract ──────────────────────────── | COMMENT |
| MEDIUM⚡ | test/phpunit/NamingContractTest.php | 231 | // ── NamingContract — guard ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | test/phpunit/NamingContractTest.php | 251 | // ── StrictNamingContractValidator — validateContent ────────────────── | COMMENT |
| MEDIUM⚡ | test/phpunit/NamingContractTest.php | 306 | // ── StrictNamingContractValidator — other methods ──────────────────── | COMMENT |
| MEDIUM | test/phpunit/NamingContractTest.php | 42 | // ── NamingContract — properties ─────────────────────────────────────── | COMMENT |
| MEDIUM | test/phpunit/NamingContractTest.php | 127 | // ── NamingContract — applyTo ────────────────────────────────────────── | COMMENT |
| MEDIUM | test/phpunit/NamingContractTest.php | 196 | // ── NamingContract — applyToFilename ───────────────────────────────── | COMMENT |
| MEDIUM | scripts/clicktodial/linphone.sh | 2 | #--------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/clicktodial/linphone.sh | 9 | #--------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/clicktodial/ekiga.sh | 2 | #--------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/clicktodial/ekiga.sh | 7 | #--------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | dev/tools/fixperms.sh | 2 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/tools/fixperms.sh | 6 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/tools/fixperms.sh | 8 | #------------------------------------------------------ | COMMENT |
| MEDIUM | dev/tools/dolibarr-mysql2pgsql.pl | 2 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | dev/tools/dolibarr-mysql2pgsql.pl | 13 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | dev/tools/dolibarr-mysql2pgsql.pl | 35 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | dev/tools/dolibarr-mysql2pgsql.pl | 37 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | dev/tools/dolibarr-mysql2pgsql.pl | 58 | #--------------------------------------- | COMMENT |
| MEDIUM | dev/tools/dolibarr-mysql2pgsql.pl | 153 | #---------------------------------- | COMMENT |
| MEDIUM⚡ | dev/tools/fixdosfiles.sh | 2 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/tools/fixdosfiles.sh | 6 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/tools/fixdosfiles.sh | 8 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/tools/fixnotabfiles.sh | 2 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/tools/fixnotabfiles.sh | 6 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/tools/fixnotabfiles.sh | 8 | #------------------------------------------------------ | COMMENT |
| MEDIUM | dev/tools/fixutf8bomfiles.sh | 8 | #------------------------------------------------------ | COMMENT |
| MEDIUM | dev/tools/fixutf8bomfiles.sh | 10 | #------------------------------------------------------ | COMMENT |
| MEDIUM | dev/tools/resize_window.sh | 2 | #---------------------------------------------------- | COMMENT |
| MEDIUM | dev/tools/resize_window.sh | 6 | #---------------------------------------------------- | COMMENT |
| MEDIUM⚡ | dev/translation/txpull.sh | 2 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/translation/txpull.sh | 6 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/translation/txpull.sh | 8 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/translation/txpush.sh | 2 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/translation/txpush.sh | 6 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/translation/txpush.sh | 8 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/initdemo/initdemopassword.sh | 2 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/initdemo/initdemopassword.sh | 7 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/initdemo/initdemopassword.sh | 10 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/initdemo/savedemo.sh | 4 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/initdemo/savedemo.sh | 10 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/initdemo/savedemo.sh | 13 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/initdemo/initdemo.sh | 5 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/initdemo/initdemo.sh | 14 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/initdemo/initdemo.sh | 18 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/initdemo/removeconfdemo.sh | 2 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/initdemo/removeconfdemo.sh | 8 | #------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | dev/initdemo/removeconfdemo.sh | 11 | #------------------------------------------------------ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/phpunit/CommonClassTest.class.php | 56 | // robust against subclasses that override setUpBeforeClass() without calling the parent. | COMMENT |
| MEDIUM | htdocs/core/class/html.form.class.php | 10461 | // If the parent table is llx_societe and user is not an external user (a more robust test done later for external u | COMMENT |
| MEDIUM | htdocs/includes/jquery/js/jquery.js | 10914 | // understands anonymous AMD modules. A named AMD is safest and most robust | COMMENT |
| MEDIUM | htdocs/includes/php-iban/php-iban.php | 83 | # the date added to their account, in order to better facilitate | COMMENT |
| MEDIUM | htdocs/includes/php-iban/php-iban.php | 438 | # - utilize format knowledge with regards to alphanumeric applicability in that offset in that national BBAN format | COMMENT |
| MEDIUM | htdocs/includes/leaflet/leaflet-src.esm.js | 12086 | // If `true` and user is on a retina display, it will request four tiles of half the specified size and a bigger zoom | COMMENT |
| MEDIUM | htdocs/includes/leaflet/leaflet-src.js | 12092 | // If `true` and user is on a retina display, it will request four tiles of half the specified size and a bigger zoo | COMMENT |
| LOW | htdocs/includes/ace/src/worker-css.js | 1 | "no use strict";!function(e){function t(e,t){var n=e,r="";while(n){var i=t[n];if(typeof i=="string")return i+r;if(i)retu | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-html.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-html.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-slim.js | 1 | define("ace/mode/slim_highlight_rules",["require","exports","module","ace/config","ace/lib/oop","ace/mode/text_highlight | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-slim.js | 1 | define("ace/mode/slim_highlight_rules",["require","exports","module","ace/config","ace/lib/oop","ace/mode/text_highlight | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-coldfusion.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-coldfusion.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-rhtml.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-rhtml.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-ejs.js | 1 | define("ace/mode/css_highlight_rules",["require","exports","module","ace/lib/oop","ace/lib/lang","ace/mode/text_highligh | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-ejs.js | 1 | define("ace/mode/css_highlight_rules",["require","exports","module","ace/lib/oop","ace/lib/lang","ace/mode/text_highligh | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-php_laravel_blade.js | 1 | define("ace/mode/doc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rules | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-php_laravel_blade.js | 1 | define("ace/mode/doc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rules | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-handlebars.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-handlebars.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-curly.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-curly.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-vue.js | 1 | define("ace/mode/folding/mixed",["require","exports","module","ace/lib/oop","ace/mode/folding/fold_mode"],function(e,t,n | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-nunjucks.js | 1 | define("ace/mode/folding/mixed",["require","exports","module","ace/lib/oop","ace/mode/folding/fold_mode"],function(e,t,n | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-nunjucks.js | 1 | define("ace/mode/folding/mixed",["require","exports","module","ace/lib/oop","ace/mode/folding/fold_mode"],function(e,t,n | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-django.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-django.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-velocity.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-velocity.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-visualforce.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-visualforce.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-astro.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-astro.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-erlang.js | 1 | define("ace/mode/erlang_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rules"],fu | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-php.js | 1 | define("ace/mode/doc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rules | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-php.js | 1 | define("ace/mode/doc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rules | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-luapage.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-luapage.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-liquid.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-liquid.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-latte.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-latte.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-twig.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-twig.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-razor.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-razor.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-soy_template.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-soy_template.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-html_ruby.js | 1 | define("ace/mode/css_highlight_rules",["require","exports","module","ace/lib/oop","ace/lib/lang","ace/mode/text_highligh | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-html_ruby.js | 1 | define("ace/mode/css_highlight_rules",["require","exports","module","ace/lib/oop","ace/lib/lang","ace/mode/text_highligh | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-markdown.js | 1 | define("ace/mode/css_highlight_rules",["require","exports","module","ace/lib/oop","ace/lib/lang","ace/mode/text_highligh | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-markdown.js | 1 | define("ace/mode/css_highlight_rules",["require","exports","module","ace/lib/oop","ace/lib/lang","ace/mode/text_highligh | CODE |
| MEDIUM⚡ | htdocs/includes/ace/src/mode-html_elixir.js | 1 | define("ace/mode/css_highlight_rules",["require","exports","module","ace/lib/oop","ace/lib/lang","ace/mode/text_highligh | CODE |
| MEDIUM⚡ | htdocs/includes/ace/src/mode-html_elixir.js | 1 | define("ace/mode/css_highlight_rules",["require","exports","module","ace/lib/oop","ace/lib/lang","ace/mode/text_highligh | CODE |
| MEDIUM⚡ | htdocs/includes/ace/src/mode-html_elixir.js | 1 | define("ace/mode/css_highlight_rules",["require","exports","module","ace/lib/oop","ace/lib/lang","ace/mode/text_highligh | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-smarty.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM | htdocs/includes/ace/src/mode-smarty.js | 1 | define("ace/mode/jsdoc_comment_highlight_rules",["require","exports","module","ace/lib/oop","ace/mode/text_highlight_rul | CODE |
| MEDIUM⚡ | htdocs/public/includes/tinymce/tinymce/tinymce.min.js | 4 | !function(){"use strict";var e=function(e){if(null===e)return"null";if(void 0===e)return"undefined";var t=typeof e;retur | CODE |
| 5 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/phpunit/CMailFileTest.php | 65 | $localobject = new CMailFile('Test', 'test@test.com', 'from@from.com', 'Message txt', array(), array(), array(), '', ' | CODE |
| LOW | test/phpunit/CMailFileTest.php | 107 | $this->assertEquals($result, '"John Doe" <john@doe.com>'); | CODE |
| LOW | test/phpunit/CMailFileTest.php | 117 | $this->assertEquals($result, 'John Doe'); | CODE |
| LOW | test/phpunit/CMailFileTest.php | 159 | $localobject = new CMailFile('Test', 'test@test.com', 'from@from.com', $msg, array(), array(), array(), '', '', 0, -1, | CODE |
| LOW | htdocs/webhook/class/triggerhistory.class.php | 96 | * 'placeholder' to set the placeholder of a varchar field. | COMMENT |
| LOW | htdocs/modulebuilder/template/admin/setup.php | 111 | $item->fieldAttr['placeholder'] = (empty($_SERVER['HTTPS']) ? 'http://' : 'https://') . $_SERVER['HTTP_HOST']; | CODE |
| LOW | htdocs/modulebuilder/template/admin/setup.php | 117 | $item->fieldAttr['placeholder'] = 'A placeholder here'; | CODE |
| LOW | htdocs/modulebuilder/template/class/myobject.class.php | 116 | * 'placeholder' to set the placeholder of a varchar field. | COMMENT |
| LOW | htdocs/adherents/class/adherent.class.php | 346 | * 'placeholder' to set the placeholder of a varchar field. | COMMENT |
| LOW | …tes/website_template-homesubmenu_dev/website_pages.sql | 4 | INSERT INTO llx_website_page(rowid, fk_page, fk_website, pageurl, aliasalt, title, description, lang, image, keywords, s | CODE |
| LOW | …tes/website_template-homesubmenu_dev/website_pages.sql | 4 | INSERT INTO llx_website_page(rowid, fk_page, fk_website, pageurl, aliasalt, title, description, lang, image, keywords, s | CODE |
| LOW⚡ | …es/websites/website_template-stellar/website_pages.sql | 7 | INSERT INTO llx_website_page(rowid, fk_page, fk_website, pageurl, aliasalt, title, description, lang, image, keywords, s | CODE |
| LOW⚡ | …es/websites/website_template-stellar/website_pages.sql | 7 | INSERT INTO llx_website_page(rowid, fk_page, fk_website, pageurl, aliasalt, title, description, lang, image, keywords, s | CODE |
| LOW⚡ | …es/websites/website_template-stellar/website_pages.sql | 10 | INSERT INTO llx_website_page(rowid, fk_page, fk_website, pageurl, aliasalt, title, description, lang, image, keywords, s | CODE |
| LOW⚡ | …es/websites/website_template-stellar/website_pages.sql | 13 | INSERT INTO llx_website_page(rowid, fk_page, fk_website, pageurl, aliasalt, title, description, lang, image, keywords, s | CODE |
| LOW⚡ | …es/websites/website_template-stellar/website_pages.sql | 13 | INSERT INTO llx_website_page(rowid, fk_page, fk_website, pageurl, aliasalt, title, description, lang, image, keywords, s | CODE |
| LOW⚡ | htdocs/core/tpl/objectline_create.tpl.php | 1090 | jQuery("#select_type").removeClass("placeholder"); | CODE |
| LOW⚡ | htdocs/core/tpl/objectline_create.tpl.php | 1094 | jQuery("#select_type").addClass("placeholder"); | CODE |
| LOW⚡ | htdocs/core/tpl/objectline_create.tpl.php | 1104 | jQuery("#select_type").addClass("placeholder"); | CODE |
| LOW⚡ | htdocs/core/tpl/objectline_create.tpl.php | 1114 | jQuery("#select_type").addClass("placeholder"); | CODE |
| LOW | htdocs/core/tpl/objectline_create.tpl.php | 1701 | jQuery("#select_type").addClass("placeholder"); | CODE |
| LOW | htdocs/core/class/html.form.class.php | 14172 | 'placeholder' => $langs->trans('Search'), | CODE |
| LOW | htdocs/core/class/fieldsmanager.class.php | 512 | $fieldInfos->inputPlaceholder = $attributes['placeholder'] ?? ''; | CODE |
| LOW | htdocs/core/class/commonobject.class.php | 234 | * 'placeholder' to set the placeholder of a varchar field. | COMMENT |
| LOW | htdocs/core/class/commonobject.class.php | 8517 | $placeholder = (!empty($this->fields[$key]['placeholder']) ? $this->fields[$key]['placeholder'] : 0); | CODE |
| LOW | htdocs/core/class/CMailFile.class.php | 721 | // $this->message->setFrom(array('john@doe.com' => 'John Doe')); | COMMENT |
| LOW | htdocs/core/class/CMailFile.class.php | 2388 | * If format 3: '<john@doe.com>' or '"John Doe" <john@doe.com>' or '"=?UTF-8?B?Sm9obiBEb2U=?=" <john@doe. | COMMENT |
| LOW | htdocs/core/class/CMailFile.class.php | 2389 | * If format 4: 'John Doe' or 'john@doe.com' if no label exists | COMMENT |
| LOW | htdocs/core/lib/ajax.lib.php | 584 | if (selection.id == \''.(dol_escape_js($idforemptyvalue)).'\') return \'<span class="placeholder">\'+selection.text+ | CODE |
| LOW | htdocs/compta/facture/card.php | 4578 | jQuery("#valuedeposit").attr("placeholder", "'.$langs->getCurrencySymbol($conf->currency).'"); | CODE |
| LOW | htdocs/compta/facture/card.php | 4581 | jQuery("#valuedeposit").attr("placeholder", "50%"); | CODE |
| LOW | htdocs/bookcal/admin/setup.php | 79 | $item->fieldAttr['placeholder'] = 'MyBigCompany public interface for Bookcal'; | CODE |
| LOW | …cs/includes/sabre/sabre/dav/lib/DAV/Sharing/Plugin.php | 258 | <label>Share with (uri):</label> <input type="text" name="href" placeholder="mailto:user@example.org"/><br / | CODE |
| LOW | …jquery/plugins/jquerytreeview/jquery.treeview.async.js | 27 | classes: "placeholder", | CODE |
| LOW | …jquery/plugins/jquerytreeview/jquery.treeview.async.js | 64 | classes: "placeholder", | CODE |
| LOW | htdocs/includes/jquery/js/jquery-ui.min.js | 6 | !function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(V){"use strict" | CODE |
| LOW | htdocs/includes/jquery/js/jquery-ui.js | 2591 | element.data( dataSpace + "placeholder", placeholder ); | CODE |
| LOW | htdocs/includes/jquery/js/jquery-ui.js | 2604 | var dataKey = dataSpace + "placeholder", | CODE |
| LOW | …/framework/Luracast/Restler/explorer/swagger-ui.min.js | 14 | if(a=jQuery.inArray(this.model.method,this.model.supportedSubmitMethods())>=0,a||(this.model.isReadOnly=!0),this.model.d | CODE |
| LOW | …mework/Luracast/Restler/explorer/lib/jsoneditor.min.js | 2 | var s=this.input_type;("cpp"===s||"c++"===s||"c"===s)&&(s="c_cpp"),this.ace_container=document.createElement("div"),this | CODE |
| LOW | htdocs/includes/ace/src/ext-prompt.js | 1 | define("ace/autocomplete/popup",["require","exports","module","ace/virtual_renderer","ace/editor","ace/range","ace/lib/e | CODE |
| LOW | htdocs/includes/nusoap/lib/nusoap.php | 7123 | $this->multirefs[$id][$pos] = 'placeholder'; | CODE |
| LOW | htdocs/admin/emailcollector_card.php | 696 | jQuery("#rulevalue").attr("placeholder", ""); | CODE |
| LOW | htdocs/admin/emailcollector_card.php | 704 | jQuery("#rulevalue").attr("placeholder", (jQuery("#filtertype option:selected").attr("data-placeholder"))); | CODE |
| LOW | htdocs/admin/tools/ui/dolibarr-context/index.php | 535 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce nec elit venenatis, bibendum dui in, tristique dolor | CODE |
| LOW | htdocs/admin/tools/ui/dolibarr-context/index.php | 535 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce nec elit venenatis, bibendum dui in, tristique dolor | CODE |
| LOW | htdocs/admin/tools/ui/dolibarr-context/index.php | 562 | '<div id="idfortooltiponclick_doc-event-dialog-test" class="classfortooltiponclicktext" title="The title" >Lorem ips | CODE |
| LOW⚡ | htdocs/admin/tools/ui/class/documentation.class.php | 577 | * Generate lorem ipsum | COMMENT |
| LOW⚡ | htdocs/admin/tools/ui/class/documentation.class.php | 586 | $baseText = "Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore et dolo | CODE |
| LOW⚡ | htdocs/admin/tools/ui/class/documentation.class.php | 586 | $baseText = "Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore et dolo | CODE |
| LOW | htdocs/comm/mailing/class/api_mailings.class.php | 245 | * @param string $sqlfilters Other criteria to filter answers separated by a comma. Syntax example "(t.lastn | COMMENT |
| LOW | htdocs/quickmemo/js/QuickMemo.js | 627 | const ph = textarea.getAttribute('placeholder') || ''; | CODE |
| LOW | htdocs/quickmemo/js/QuickMemo.js | 657 | const ph = textarea.getAttribute('placeholder') || ''; | CODE |
| LOW | htdocs/quickmemo/admin/setup.php | 133 | <div id="previewMinText" class="example-of-memo-text-size">Lorem ipsum dolor sit amet</div> | CODE |
| LOW | htdocs/quickmemo/admin/setup.php | 133 | <div id="previewMinText" class="example-of-memo-text-size">Lorem ipsum dolor sit amet</div> | CODE |
| LOW | htdocs/quickmemo/admin/setup.php | 157 | <div id="previewMaxText" class="example-of-memo-text-size">Lorem ipsum dolor sit amet</div> | CODE |
| LOW | htdocs/quickmemo/admin/setup.php | 157 | <div id="previewMaxText" class="example-of-memo-text-size">Lorem ipsum dolor sit amet</div> | CODE |
| LOW | htdocs/quickmemo/class/memo.class.php | 116 | * 'placeholder' to set the placeholder of a varchar field. | COMMENT |
| LOW⚡ | htdocs/public/includes/tinymce/tinymce/tinymce.min.js | 4 | !function(){"use strict";var e=function(e){if(null===e)return"null";if(void 0===e)return"undefined";var t=typeof e;retur | CODE |
| LOW | htdocs/public/includes/tinymce/tinymce/tinymce.min.js | 52 | */function jy(e,t){for(;null!==e;){const n=vy(e,t);if(n){if(n.get)return Iy(n.get);if("function"==typeof n.value)re | COMMENT |
| 30 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | htdocs/includes/tecnickcom/tcpdf/tcpdf.php | 17839 | // the last line must be shifted to be aligned as requested | COMMENT |
| HIGH | htdocs/includes/tecnickcom/tcpdf/tcpdf.php | 18790 | // the last line must be shifted to be aligned as requested | COMMENT |
| HIGH | htdocs/includes/jquery/js/jquery-ui.js | 8706 | // Format a name, short or long as requested | COMMENT |
| HIGH | htdocs/includes/php-iban/php-iban.php | 954 | # drop characters from the front and end of the BBAN as requested | COMMENT |
| HIGH | htdocs/public/includes/jquery/js/jquery-ui.js | 8706 | // Format a name, short or long as requested | COMMENT |
| HIGH | …ic/includes/dolibarr-js-context/dolibarr-tool.langs.js | 257 | // flag domaine as requested for future load when local change | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | htdocs/accountancy/class/lettering.class.php | 765 | // Step 1: collect all (lettering_code, numero_compte, fiscal year) from selected ids | COMMENT |
| LOW | htdocs/accountancy/class/lettering.class.php | 798 | // Step 2: for each group, delete all lines sharing the same code+account+fiscal year | COMMENT |
| LOW | htdocs/core/class/commoninvoice.class.php | 1523 | // Step 1: Get pending requests with no transfer receipt yet (traite = 0) | COMMENT |
| LOW | htdocs/core/class/commoninvoice.class.php | 1543 | // Step 2: Get pending requests in transfer receipt but not yet credited | COMMENT |
| LOW | htdocs/core/login/functions_openid_connect.php | 91 | // Step 2: turn the authorization code into an access token, using client_secret | COMMENT |
| LOW | htdocs/core/login/functions_openid_connect.php | 126 | // Step 3: retrieve user info (login, email, ...) from OIDC server using token | COMMENT |
| LOW⚡ | htdocs/fourn/facture/list.php | 478 | // Step 1: Move field fk_... of llx_prelevement into llx_prelevement_lignes | COMMENT |
| LOW⚡ | htdocs/fourn/facture/list.php | 479 | // Step 2: Move field fk_... + status into prelevement_demande. | COMMENT |
| LOW⚡ | htdocs/compta/facture/list.php | 693 | // Step 1: Move field fk_... of llx_prelevement into llx_prelevement_lignes | COMMENT |
| LOW⚡ | htdocs/compta/facture/list.php | 694 | // Step 2: Move field fk_... + status into prelevement_demande. | COMMENT |
| LOW⚡ | htdocs/compta/facture/prelevement.php | 728 | // Step 1: Move field fk_... of llx_prelevement into llx_prelevement_lignes | COMMENT |
| LOW⚡ | htdocs/compta/facture/prelevement.php | 729 | // Step 2: Move field fk_... + status into prelevement_demande. | COMMENT |
| LOW | htdocs/includes/jquery/js/jquery-ui.js | 17250 | // IE sets focus asynchronously, so we need to check if focus | COMMENT |
| LOW | htdocs/public/includes/jquery/js/jquery-ui.js | 17250 | // IE sets focus asynchronously, so we need to check if focus | COMMENT |
| LOW | dev/tools/phan/plugins/SqlInjectionPlugin.php | 1414 | // or followed by a quote (for left position), we need to check if it's at the top level | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | htdocs/accountancy/class/lettering.class.php | 765 | // Step 1: collect all (lettering_code, numero_compte, fiscal year) from selected ids | COMMENT |
| LOW | htdocs/accountancy/class/lettering.class.php | 798 | // Step 2: for each group, delete all lines sharing the same code+account+fiscal year | COMMENT |
| LOW | htdocs/core/class/commoninvoice.class.php | 1523 | // Step 1: Get pending requests with no transfer receipt yet (traite = 0) | COMMENT |
| LOW | htdocs/core/class/commoninvoice.class.php | 1543 | // Step 2: Get pending requests in transfer receipt but not yet credited | COMMENT |
| LOW | htdocs/core/login/functions_openid_connect.php | 91 | // Step 2: turn the authorization code into an access token, using client_secret | COMMENT |
| LOW | htdocs/core/login/functions_openid_connect.php | 126 | // Step 3: retrieve user info (login, email, ...) from OIDC server using token | COMMENT |
| LOW⚡ | htdocs/fourn/facture/list.php | 478 | // Step 1: Move field fk_... of llx_prelevement into llx_prelevement_lignes | COMMENT |
| LOW⚡ | htdocs/fourn/facture/list.php | 479 | // Step 2: Move field fk_... + status into prelevement_demande. | COMMENT |
| LOW⚡ | htdocs/compta/facture/list.php | 693 | // Step 1: Move field fk_... of llx_prelevement into llx_prelevement_lignes | COMMENT |
| LOW⚡ | htdocs/compta/facture/list.php | 694 | // Step 2: Move field fk_... + status into prelevement_demande. | COMMENT |
| LOW⚡ | htdocs/compta/facture/prelevement.php | 728 | // Step 1: Move field fk_... of llx_prelevement into llx_prelevement_lignes | COMMENT |
| LOW⚡ | htdocs/compta/facture/prelevement.php | 729 | // Step 2: Move field fk_... + status into prelevement_demande. | COMMENT |
| LOW⚡ | dev/initdemo/initdemo.sh | 9 | # WARNING: This script erase all the data in the database | COMMENT |
| LOW⚡ | dev/initdemo/removeconfdemo.sh | 9 | # WARNING: This script erase setup of instance, | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/phpunit/phpunittest.xml | 14 | <!-- Also don't forget to change suhosin.memory_limit=4G --> | CODE |
| LOW | …ulebuilder/template/core/modules/modMyModule.class.php | 205 | // Don't forget to deactivate/reactivate your module to test your changes | COMMENT |
| LOW | htdocs/core/class/doleditor.class.php | 108 | * Warning: If you use 'ace', don't forget to also include ace.js i | COMMENT |
| LOW | htdocs/core/class/cgenericdic.class.php | 70 | // Don't forget to set this->element and this->table_element after the construction | COMMENT |
| LOW | htdocs/core/lib/html.lib.php | 5030 | * Start a table with headers and a optional clickable number (don't forget to use "finishSimpleTable()" after the last | COMMENT |
| LOW | htdocs/core/modules/modQuickMemo.class.php | 202 | // Don't forget to deactivate/reactivate your module to test your changes | COMMENT |
| MEDIUM | htdocs/includes/leaflet/leaflet-src.esm.js | 7779 | * In addition to [shared layer methods](#Layer) like `addTo()` and `remove()` and [popup methods](#Popup) like bindPop | COMMENT |
| MEDIUM | htdocs/includes/leaflet/leaflet-src.js | 7785 | * In addition to [shared layer methods](#Layer) like `addTo()` and `remove()` and [popup methods](#Popup) like bindP | COMMENT |
| LOW | …/mobiledetectlib/namespaced/Detection/MobileDetect.php | 13 | * Don't forget to use MobileDetect (instead of Mobile_Detect) as class in code when autoloading. | COMMENT |
| LOW | htdocs/includes/ace/src/worker-css.js | 1 | "no use strict";!function(e){function t(e,t){var n=e,r="";while(n){var i=t[n];if(typeof i=="string")return i+r;if(i)retu | CODE |
| MEDIUM | htdocs/admin/tools/ui/dolibarr-context/knows-hooks.php | 90 | In the meantime, here is how you can use the event listener. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/hurl/run.sh | 43 | $0 --cookiefile=/path/to/cookie.jar --host=localhost --port=8080 --suburl=/dolibarr --user=foobar --pass=topsecret --a | CODE |
| HIGH | test/hurl/README.md | 114 | ./run.sh --cookiefile=/path/to/cookie.jar --port=8080 --host=http://example.net --user=foobar --pass=topsecret --apikey= | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/hurl/run.sh | 333 | # Check if credentials are available | COMMENT |
| LOW | test/hurl/run.sh | 361 | # Check if API key is valid | COMMENT |
| LOW | .github/scripts/get_changed_php.sh | 85 | # Check if we have reached the last page (less than per_page results) | COMMENT |
| LOW | dev/tools/phan/run-phan.sh | 43 | # Check if we should use the extended configuration | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | htdocs/includes/ace/src/snippets/java.js | 1 | define("ace/snippets/java.snippets",["require","exports","module"],function(e,t,n){n.exports='## Access Modifiers\nsnipp | CODE |
| MEDIUM | htdocs/includes/ace/src/snippets/wollok.js | 1 | define("ace/snippets/wollok.snippets",["require","exports","module"],function(e,t,n){n.exports='##\n## Basic Java packag | CODE |
| MEDIUM | htdocs/includes/ace/src/snippets/edifact.js | 1 | define("ace/snippets/edifact.snippets",["require","exports","module"],function(e,t,n){n.exports='## Access Modifiers\nsn | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | dev/tools/make_sprite.sh | 11 | # Usage: | COMMENT |
| LOW | dev/tools/php-cs-fixer/run-php-cs-fixer.sh | 4 | # Usage: | COMMENT |
| LOW | dev/tools/phan/run-phan.sh | 6 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/other/test_smtp_oauth2.py | 32 | except Exception as e: | CODE |
| MEDIUM | test/other/test_smtp_oauth2.py | 33 | print (f"Error : {e}") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | htdocs/includes/jquery/js/jquery.js | 4441 | function getData( data ) { | CODE |
| LOW | htdocs/public/includes/jquery/js/jquery.js | 4441 | function getData( data ) { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | htdocs/ai/lib/ai.lib.php | 150 | 'docparsing' => array('default' => 'glm-5'), // Top-tier agentic document processing | CODE |