Orchard Core is an open-source modular and multi-tenant application framework built with ASP.NET Core, and a content management system (CMS) built on top of that framework.
This report summarizes scanner evidence for OrchardCMS/OrchardCore, a C# project with 8,221 GitHub stars. SynthScan examined 1,176,047 lines of code across 9175 source files, recording 1702 pattern matches distributed across 19 syntactic categories. The legacy adjusted pattern signal is 2.3 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 1511 finding(s).
Are imports declared and package/API names verified? 173 finding(s).
Are wrappers, guards, and repeated structures necessary? 192 finding(s).
Which changes need focused human review? 1702 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1702 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tsconfig.json | 1 | { | COMMENT |
| LOW | tsconfig.json | 21 | // "jsxImportSource": "", /* Specify module specifier used to import the JSX factory func | COMMENT |
| LOW | tsconfig.json | 41 | // "customConditions": [], /* Conditions to set in addition to the resolver-specific defau | COMMENT |
| LOW | tsconfig.json | 61 | // "importHelpers": true, /* Allow importing helper functions from tslib once per project | COMMENT |
| LOW | tsconfig.json | 81 | // "preserveSymlinks": true, /* Disable resolving symlinks to their realpath. This correlate | COMMENT |
| LOW | .coderabbit.yaml | 1 | # yaml-language-server: $schema=https://coderabbit.ai/integrations/coderabbit-overrides.v2.json | COMMENT |
| LOW | …Core.Tests.Functional/Tests/Cms/BulkSelectListTests.cs | 1 | using Microsoft.Playwright; | COMMENT |
| LOW | …s.Functional/Tests/Cms/DeploymentPlanStepOrderTests.cs | 41 | await Assertions.Expect(stepItems).ToHaveCountAsync(2); | COMMENT |
| LOW | …dCore.Tests.Functional/Tests/Cms/FeaturesIndexTests.cs | 1 | using Microsoft.Playwright; | COMMENT |
| LOW | …Core.Tests.Functional/Tests/Cms/ShortcodeModalTests.cs | 1 | using Microsoft.Playwright; | COMMENT |
| LOW | …ests.Functional/Tests/Cms/OpenIdClientSettingsTests.cs | 1 | using Microsoft.Playwright; | COMMENT |
| LOW | …re.Tests.Functional/Tests/Cms/DataLocalizationTests.cs | 1 | using Microsoft.Playwright; | COMMENT |
| LOW | …re.Tests.Functional/Tests/Cms/DataLocalizationTests.cs | 101 | // waiting for that is the real signal the save round-trip completed, not just a | COMMENT |
| LOW | …rdCore.Tests.Functional/Tests/Cms/SitemapCacheTests.cs | 1 | using Microsoft.Playwright; | COMMENT |
| LOW | …e.Tests.Functional/Tests/Cms/UrlRewritingRulesTests.cs | 1 | using Microsoft.Playwright; | COMMENT |
| LOW | ….Functional/Tests/Cms/MonacoLiquidIntelliSenseTests.cs | 1 | using Microsoft.Playwright; | COMMENT |
| LOW | …dCore.Tests.Functional/Tests/Cms/AdminMenuTreeTests.cs | 41 | // Waiting on "#menu" cannot see that: SortableJS has already moved the node | COMMENT |
| LOW | …s.Functional/Tests/Cms/NotificationPreferencesTests.cs | 1 | using Microsoft.Playwright; | COMMENT |
| LOW | …e.Tests.Functional/Tests/Cms/TaxonomyHierarchyTests.cs | 41 | // sibling) to the current flat depth-tagged list: with the old model, moving | COMMENT |
| LOW | …ests.Functional/Tests/Cms/PredefinedListEditorTests.cs | 1 | using Microsoft.Playwright; | COMMENT |
| LOW | …ests.Functional/Tests/Cms/PredefinedListEditorTests.cs | 281 | // no save needed since these edits were never submitted. | COMMENT |
| LOW | …ore.Tests.Functional/Tests/Cms/AliasPartEditorTests.cs | 1 | using Microsoft.Playwright; | COMMENT |
| LOW | …re.Tests.Functional/Tests/Cms/FormsFieldEditorTests.cs | 1 | using Microsoft.Playwright; | COMMENT |
| LOW | …Core.Tests.Functional/Tests/Cms/EsModuleEditorTests.cs | 1 | using Microsoft.Playwright; | COMMENT |
| LOW | …Core.Tests.Functional/Tests/Cms/EsModuleEditorTests.cs | 21 | // Also covers TextField-Color.Edit.cshtml, the first view extracted from an inline | COMMENT |
| LOW | …Core.Tests.Functional/Tests/Cms/EsModuleEditorTests.cs | 41 | private static ILocator TrumbowygBoxesOf(ILocator widget) | COMMENT |
| LOW | test/OrchardCore.Tests.Functional/Helpers/AuthHelper.cs | 21 | COMMENT | |
| LOW | …ardCore.Tests.Functional/Helpers/OrchardTestFixture.cs | 81 | COMMENT | |
| LOW | …ardCore.Tests.Functional/Helpers/OrchardTestFixture.cs | 121 | // was the actual root cause behind TaxonomyHierarchyTests/MenuHierarchyTests | COMMENT |
| LOW | …ardCore.Tests.Functional/Helpers/SortableMenuHelper.cs | 41 | await page.Mouse.UpAsync(); | COMMENT |
| LOW | …ardCore.Tests.Functional/Helpers/SortableMenuHelper.cs | 101 | await page.WaitForTimeoutAsync(250); | COMMENT |
| LOW | …ests.Modules/Errors.OrchardCoreModules.TwoPlus/Root.cs | 1 | // This project intentional left out of the build configuration, it SHOULD error, that is expected | COMMENT |
| LOW | …ractions.Tests/Modules/Manifest/ThemeAttributeTests.cs | 21 | /// Classifier supporting | COMMENT |
| LOW | …ractions.Tests/Modules/Manifest/ThemeAttributeTests.cs | 41 | #pragma warning disable xUnit1008 // Fulfulling base class Theory method test data | COMMENT |
| LOW | …ractions.Tests/Modules/Manifest/ThemeAttributeTests.cs | 61 | COMMENT | |
| LOW | …ts/Modules/Manifest/FeatureAttributeTests.Attribute.cs | 21 | // TODO: TBD: in effect the constructors are 'sugar' after a sort that provide some shorthand | COMMENT |
| LOW | …ts/Modules/Manifest/FeatureAttributeTests.Attribute.cs | 41 | /// Creates a <typeparamref name="TAttribute"/> from its <paramref name="args"/>, with | COMMENT |
| LOW | …ts/Modules/Manifest/FeatureAttributeTests.Attribute.cs | 81 | /// <summary> | COMMENT |
| LOW | …ts/Modules/Manifest/FeatureAttributeTests.Attribute.cs | 101 | /// <param name="index"></param> | COMMENT |
| LOW | …ts/Modules/Manifest/FeatureAttributeTests.Attribute.cs | 141 | /// Creates a new <typeparamref name="TAttribute"/> Instance given the | COMMENT |
| LOW | …ts/Modules/Manifest/FeatureAttributeTests.Attribute.cs | 181 | /// Provides a Pair that may be rendered to <see cref="string"/>. | COMMENT |
| LOW | …ts/Modules/Manifest/FeatureAttributeTests.Attribute.cs | 321 | /// <param name="rootType"></param> | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 1 | //// TODO: MWP: will circle around on this one... | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 21 | // /// <summary> | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 41 | COMMENT | |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 61 | // /// <see cref="ModuleMarkerAttribute(string, string, string, string, string, string, string, string, bool, boo | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 81 | // /// <param name="index">The parameter index.</param> | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 101 | // index switch | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 121 | // var semVer = DefaultVersionZero; | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 141 | // Assert.Equal(type, marker.Type); | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 161 | COMMENT | |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 181 | // var semVer = DefaultVersionZero; | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 201 | // Assert.Equal(name, marker.Name); | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 221 | // Assert.Equal(alwaysEnabled, marker.IsAlwaysEnabled); | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 241 | // var deps = LoremWords(5).Split(' '); | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 261 | // ); | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 281 | // Assert.Equal(author, marker.Author); | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 301 | // var name = LoremWords(1); | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 321 | // new RenderKeyValuePair(nameof(description), description), | COMMENT |
| LOW | …s.Tests/Modules/Manifest/ModuleMarkerAttributeTests.cs | 341 | // Assert.Equal(description, marker.Description); | COMMENT |
| 1137 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL⚡ | …odules/OrchardCore.Secrets/DatabaseSecretStoreTests.cs | 405 | new System.Text.Json.Serialization.Metadata.JsonDerivedType(typeof(TextSecret), nameof(TextSecret)), | CODE |
| CRITICAL⚡ | …odules/OrchardCore.Secrets/DatabaseSecretStoreTests.cs | 406 | new System.Text.Json.Serialization.Metadata.JsonDerivedType(typeof(RsaKeySecret), nameof(RsaKeySecre | CODE |
| CRITICAL⚡ | …odules/OrchardCore.Secrets/DatabaseSecretStoreTests.cs | 407 | new System.Text.Json.Serialization.Metadata.JsonDerivedType(typeof(X509Secret), nameof(X509Secret)), | CODE |
| CRITICAL | …urces/wwwroot/Scripts/jquery.mjs.nestedSortable.min.js | 1 | !function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","jquery-ui/sortable"],e):e(window.jQuer | CODE |
| CRITICAL | …chardCore.Resources/wwwroot/Scripts/jquery.slim.min.js | 10 | */function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0) | COMMENT |
| CRITICAL | …s/OrchardCore.Resources/wwwroot/Scripts/jquery.slim.js | 10 | */function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0) | COMMENT |
| CRITICAL | …esources/wwwroot/Scripts/fontawesome-iconpicker.min.js | 11 | !function(e){"function"==typeof define&&define.amd?define(["jquery"],e):e(jQuery)}(function(j){j.ui=j.ui||{};j.ui.versio | CODE |
| CRITICAL | …Resources/wwwroot/Scripts/jquery.mjs.nestedSortable.js | 1 | !function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","jquery-ui/sortable"],e):e(window.jQuer | CODE |
| CRITICAL | …es/OrchardCore.Resources/wwwroot/Scripts/jquery.min.js | 10 | */function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0) | COMMENT |
| CRITICAL⚡ | …re.Resources/wwwroot/Scripts/fontawesome-iconpicker.js | 322 | j.ui.pos.flip.left.apply(this, arguments); | CODE |
| CRITICAL⚡ | …re.Resources/wwwroot/Scripts/fontawesome-iconpicker.js | 323 | j.ui.pos.fit.left.apply(this, arguments); | CODE |
| CRITICAL⚡ | …re.Resources/wwwroot/Scripts/fontawesome-iconpicker.js | 326 | j.ui.pos.flip.top.apply(this, arguments); | CODE |
| CRITICAL⚡ | …re.Resources/wwwroot/Scripts/fontawesome-iconpicker.js | 327 | j.ui.pos.fit.top.apply(this, arguments); | CODE |
| CRITICAL | …odules/OrchardCore.Resources/wwwroot/Scripts/jquery.js | 10 | */function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0) | COMMENT |
| CRITICAL | …ore.Resources/wwwroot/Scripts/codemirror/codemirror.js | 1 | !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define | CODE |
| CRITICAL | …Resources/wwwroot/Scripts/codemirror/codemirror.min.js | 1 | !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define | CODE |
| CRITICAL | …ces/wwwroot/Scripts/trumbowyg/trumbowyg-plugins.min.js | 1 | !function(e){"use strict";var t={allowedTags:[],removableTags:["a","abbr","address","b","bdi","bdo","blockquote","br","c | CODE |
| CRITICAL | …sources/wwwroot/Scripts/trumbowyg/trumbowyg-plugins.js | 659 | if (trumbowyg.o.plugins.colors.colorList.indexOf(backColor) >= 0) { | CODE |
| CRITICAL | …sources/wwwroot/Scripts/trumbowyg/trumbowyg-plugins.js | 674 | if (trumbowyg.o.plugins.colors.colorList.indexOf(foreColor) >= 0) { | CODE |
| CRITICAL | …sources/wwwroot/Scripts/trumbowyg/trumbowyg-plugins.js | 3145 | t.o.plugins.history._stack.push(newState); | CODE |
| CRITICAL | …sources/wwwroot/Scripts/trumbowyg/trumbowyg-plugins.js | 6471 | if (t.o.plugins.table.colorList.indexOf(borderColor) >= 0) { | CODE |
| CRITICAL | …sources/wwwroot/Scripts/trumbowyg/trumbowyg-plugins.js | 6491 | if (t.o.plugins.table.colorList.indexOf(backgroundColor) >= 0) { | CODE |
| CRITICAL | …sources/wwwroot/Scripts/trumbowyg/trumbowyg-plugins.js | 6808 | trumbowyg.o.plugins.upload.data.map(function (cur) { | CODE |
| CRITICAL | …sources/wwwroot/Scripts/trumbowyg/trumbowyg-plugins.js | 6850 | if (!!getDeep(data, trumbowyg.o.plugins.upload.statusPropertyName.split( | CODE |
| CRITICAL | …sources/wwwroot/Scripts/trumbowyg/trumbowyg-plugins.js | 6851 | var url = getDeep(data, trumbowyg.o.plugins.upload.urlPropertyName.s | CODE |
| CRITICAL | …sources/wwwroot/Vendor/jquery-3.6.0/jquery.slim.min.js | 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f | CODE |
| CRITICAL | …e.Resources/wwwroot/Vendor/jquery-3.6.0/jquery.slim.js | 7298 | jQuery.each( jQuery.expr.match.bool.source.match( /\w+/g ), function( _i, name ) { | CODE |
| CRITICAL | …re.Resources/wwwroot/Vendor/jquery-3.6.0/jquery.min.js | 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f | CODE |
| CRITICAL | …rdCore.Resources/wwwroot/Vendor/jquery-3.6.0/jquery.js | 8092 | jQuery.each( jQuery.expr.match.bool.source.match( /\w+/g ), function( _i, name ) { | CODE |
| CRITICAL | …sources/wwwroot/Vendor/jquery-3.5.1/jquery.slim.min.js | 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f | CODE |
| CRITICAL | …e.Resources/wwwroot/Vendor/jquery-3.5.1/jquery.slim.js | 7293 | jQuery.each( jQuery.expr.match.bool.source.match( /\w+/g ), function( _i, name ) { | CODE |
| CRITICAL | …re.Resources/wwwroot/Vendor/jquery-3.5.1/jquery.min.js | 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f | CODE |
| CRITICAL | …rdCore.Resources/wwwroot/Vendor/jquery-3.5.1/jquery.js | 8086 | jQuery.each( jQuery.expr.match.bool.source.match( /\w+/g ), function( _i, name ) { | CODE |
| CRITICAL | …sources/wwwroot/Vendor/jquery-3.4.1/jquery.slim.min.js | 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f | CODE |
| CRITICAL | …e.Resources/wwwroot/Vendor/jquery-3.4.1/jquery.slim.js | 7051 | jQuery.each( jQuery.expr.match.bool.source.match( /\w+/g ), function( i, name ) { | CODE |
| CRITICAL | …re.Resources/wwwroot/Vendor/jquery-3.4.1/jquery.min.js | 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f | CODE |
| CRITICAL | …rdCore.Resources/wwwroot/Vendor/jquery-3.4.1/jquery.js | 7844 | jQuery.each( jQuery.expr.match.bool.source.match( /\w+/g ), function( i, name ) { | CODE |
| CRITICAL | …r/nestedSortable-2.1a/jquery.mjs.nestedSortable.min.js | 1 | !function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","jquery-ui/ui/sortable"],e):e(window.jQ | CODE |
| CRITICAL | …endor/nestedSortable-2.1a/jquery.mjs.nestedSortable.js | 1 | !function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","jquery-ui/ui/sortable"],e):e(window.jQ | CODE |
| CRITICAL | …urces/wwwroot/Vendor/jquery-ui-1.14.2/jquery-ui.min.js | 6 | !function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(t){"use strict" | CODE |
| CRITICAL | …/Vendor/CrestApps/bootstrap-select/bootstrap-select.js | 3623 | this.selectpicker.view.titleOption.parentNode.removeChild(this.selectpicker.view.titleOption); | CODE |
| CRITICAL | …dor/CrestApps/bootstrap-select/bootstrap-select.min.js | 9 | !function(e){if("function"==typeof define&&define.amd)define(["bootstrap"],e);else if("object"==typeof module&&module.ex | CODE |
| CRITICAL | …/Assets/trumbowyg/plugins/table/trumbowyg.table.min.js | 11 | !function(e){"use strict";var t={rows:8,columns:8,allowHorizontalResize:!0,colorList:["ffffff","000000","eeece1","1f497d | CODE |
| CRITICAL | …rces/Assets/trumbowyg/plugins/table/trumbowyg.table.js | 1651 | if (t.o.plugins.table.colorList.indexOf(borderColor) >= 0) { | CODE |
| CRITICAL | …rces/Assets/trumbowyg/plugins/table/trumbowyg.table.js | 1671 | if (t.o.plugins.table.colorList.indexOf(backgroundColor) >= 0) { | CODE |
| CRITICAL | …es/Assets/trumbowyg/plugins/colors/trumbowyg.colors.js | 159 | if (trumbowyg.o.plugins.colors.colorList.indexOf(backColor) >= 0) { | CODE |
| CRITICAL | …es/Assets/trumbowyg/plugins/colors/trumbowyg.colors.js | 174 | if (trumbowyg.o.plugins.colors.colorList.indexOf(foreColor) >= 0) { | CODE |
| CRITICAL | …ssets/trumbowyg/plugins/colors/trumbowyg.colors.min.js | 10 | !function(o){"use strict";function r(o){return("0"+parseInt(o).toString(16)).slice(-2)}function e(o){return-1===o.search | CODE |
| CRITICAL | …/Assets/trumbowyg/plugins/history/trumbowyg.history.js | 104 | t.o.plugins.history._stack.push(newState); | CODE |
| CRITICAL | …ets/trumbowyg/plugins/history/trumbowyg.history.min.js | 8 | !function(i){"use strict";i.extend(!0,i.trumbowyg,{plugins:{history:{destroy:function(i){i.$c.off("tbwinit.history tbwch | CODE |
| CRITICAL | …ssets/trumbowyg/plugins/upload/trumbowyg.upload.min.js | 13 | !function(r){"use strict";var a={serverPath:"",fileFieldName:"fileToUpload",data:[],headers:{},xhrFields:{},urlPropertyN | CODE |
| CRITICAL | …es/Assets/trumbowyg/plugins/upload/trumbowyg.upload.js | 205 | trumbowyg.o.plugins.upload.data.map(function (cur) { | CODE |
| CRITICAL | …es/Assets/trumbowyg/plugins/upload/trumbowyg.upload.js | 247 | if (!!getDeep(data, trumbowyg.o.plugins.upload.statusPropertyName.split( | CODE |
| CRITICAL | …es/Assets/trumbowyg/plugins/upload/trumbowyg.upload.js | 248 | var url = getDeep(data, trumbowyg.o.plugins.upload.urlPropertyName.s | CODE |
| CRITICAL | …ources/Assets/Vendor/jquery-ui-1.14.2/jquery-ui.min.js | 6 | !function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(t){"use strict" | CODE |
| CRITICAL | ….Modules/OrchardCore.OpenApi/Services/OpenApiClient.cs | 95 | content_.Headers.ContentType = System.Net.Http.Headers.MediaTypeHeaderValue.Parse("application/json" | CODE |
| CRITICAL | ….Modules/OrchardCore.OpenApi/Services/OpenApiClient.cs | 946 | content_.Headers.ContentType = System.Net.Http.Headers.MediaTypeHeaderValue.Parse("application/json" | CODE |
| CRITICAL | ….Modules/OrchardCore.OpenApi/Services/OpenApiClient.cs | 1108 | content_.Headers.ContentType = System.Net.Http.Headers.MediaTypeHeaderValue.Parse("application/json" | CODE |
| CRITICAL | ….Modules/OrchardCore.OpenApi/Services/OpenApiClient.cs | 1447 | content_.Headers.ContentType = System.Net.Http.Headers.MediaTypeHeaderValue.Parse("application/json" | CODE |
| CRITICAL | ….Modules/OrchardCore.OpenApi/Services/OpenApiClient.cs | 1609 | content_.Headers.ContentType = System.Net.Http.Headers.MediaTypeHeaderValue.Parse("application/json" | CODE |
| 22 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .scripts/bloom/ambient.d.ts | 22 | declare function initializeCodeMirrorShortcodeWrapper(editor: CodeMirrorEditor): void; | CODE |
| LOW | .scripts/bloom/ambient.d.ts | 69 | declare function initializeMdeShortcodeWrapper(mde: EasyMdeInstance): void; | CODE |
| LOW | .scripts/bloom/ambient.d.ts | 72 | declare function ConfigureLiquidIntellisense(monacoInstance: typeof import("monaco-editor"), registerHtml?: boolean): vo | CODE |
| LOW | .scripts/bloom/ambient.d.ts | 86 | declare function initAdminMenuPermissionsPicker(element: Element | null): void; | CODE |
| LOW | .scripts/bloom/ambient.d.ts | 90 | declare function initMenuPermissionsPicker(element: Element | null): void; | CODE |
| LOW | .scripts/bloom/ambient.d.ts | 108 | declare function initializeParametersEditor( | CODE |
| LOW | .scripts/bloom/services/auth/silent-oidc.ts | 55 | export function buildSilentUserManagerSettings(settings: SilentAuthSettings): UserManagerSettings { | CODE |
| LOW | .scripts/bloom/services/notifications/notifier.ts | 112 | function getNotificationMessageFromObject(message: unknown, severityLevel?: SeverityLevel): NotificationMessage | undefi | CODE |
| LOW | .scripts/bloom/services/notifications/notifier.ts | 156 | function isValidationProblemDetailsLike(message: unknown): message is ValidationProblemDetailsLike { | CODE |
| LOW | …OrchardCore.OpenId/Assets/ts/openid-server-settings.ts | 35 | function refreshEncryptionCertificates() { | CODE |
| LOW | …OrchardCore.OpenId/Assets/ts/openid-server-settings.ts | 72 | function refreshSigningCertificates() { | CODE |
| LOW | …OrchardCore.OpenId/Assets/ts/openid-server-settings.ts | 109 | function refreshDisableAccessTokenEncryption() { | CODE |
| LOW | …OrchardCore.OpenId/Assets/ts/openid-server-settings.ts | 122 | function refreshEnableTokenEndpoint() { | CODE |
| LOW | …OrchardCore.OpenId/Assets/ts/openid-server-settings.ts | 137 | function refreshEnableAuthorizationEndpoint() { | CODE |
| LOW | …OrchardCore.OpenId/Assets/ts/openid-server-settings.ts | 149 | function refreshAllowAuthorizationCodeFlowVisibility() { | CODE |
| LOW | …OrchardCore.OpenId/Assets/ts/openid-server-settings.ts | 162 | function refreshAllowHybridFlowVisibility() { | CODE |
| LOW | …OrchardCore.OpenId/Assets/ts/openid-server-settings.ts | 175 | function refreshAllowRefreshTokenFlowVisibility() { | CODE |
| LOW | …ore.Spatial/wwwroot/Scripts/leaflet/leaflet-src.esm.js | 394 | function checkDeprecatedMixinEvents(includes) { | CODE |
| LOW | …ardCore.Spatial/wwwroot/Scripts/leaflet/leaflet-src.js | 400 | function checkDeprecatedMixinEvents(includes) { | CODE |
| LOW⚡ | …t/Scripts/Workflows/designer/workflows-designer.min.js | 9 | **/var activeEffectScope,EffectScope=class{constructor(e=!1){this.detached=e,this._active=!0,this._on=0,this.effects=[], | CODE |
| LOW⚡ | …t/Scripts/Workflows/designer/workflows-designer.min.js | 13 | **/function callWithErrorHandling(e,n,a,s){try{return s?e(...s):e()}catch(r){handleError(r,n,a)}}function callWithAsyncE | CODE |
| LOW⚡ | …t/Scripts/Workflows/designer/workflows-designer.min.js | 17 | **/var policy=void 0,tt=typeof window<"u"&&window.trustedTypes;if(tt)try{policy=tt.createPolicy("vue",{createHTML:e=>e}) | CODE |
| LOW⚡ | …t/Scripts/Workflows/designer/workflows-designer.min.js | 19 | `)}getSetCookie(){const e=this.get("set-cookie");return utils_default.isArray(e)?e:e==null||e===!1?[]:[e]}get[Symbol.toS | CODE |
| LOW⚡ | …t/Scripts/Workflows/designer/workflows-designer.min.js | 21 | `):" "+renderReason(o[0]):"as no adapter specified"),AxiosError.ERR_NOT_SUPPORT)}return r}var adapters_default={getAdapt | CODE |
| LOW⚡ | …wroot/Scripts/Workflows/designer/workflows-designer.js | 9 | **/var activeEffectScope,EffectScope=class{constructor(e=!1){this.detached=e,this._active=!0,this._on=0,this.effects=[], | CODE |
| LOW⚡ | …wroot/Scripts/Workflows/designer/workflows-designer.js | 13 | **/function callWithErrorHandling(e,n,a,s){try{return s?e(...s):e()}catch(r){handleError(r,n,a)}}function callWithAsyncE | CODE |
| LOW⚡ | …wroot/Scripts/Workflows/designer/workflows-designer.js | 17 | **/var policy=void 0,tt=typeof window<"u"&&window.trustedTypes;if(tt)try{policy=tt.createPolicy("vue",{createHTML:e=>e}) | CODE |
| LOW⚡ | …wroot/Scripts/Workflows/designer/workflows-designer.js | 19 | `)}getSetCookie(){const e=this.get("set-cookie");return utils_default.isArray(e)?e:e==null||e===!1?[]:[e]}get[Symbol.toS | CODE |
| LOW⚡ | …wroot/Scripts/Workflows/designer/workflows-designer.js | 21 | `):" "+renderReason(o[0]):"as no adapter specified"),AxiosError.ERR_NOT_SUPPORT)}return r}var adapters_default={getAdapt | CODE |
| LOW⚡ | …/DataPipelines/designer/data-pipelines-designer.min.js | 9 | **/var activeEffectScope,EffectScope=class{constructor(e=!1){this.detached=e,this._active=!0,this._on=0,this.effects=[], | CODE |
| LOW⚡ | …/DataPipelines/designer/data-pipelines-designer.min.js | 13 | **/function callWithErrorHandling(e,s,n,r){try{return r?e(...r):e()}catch(a){handleError(a,s,n)}}function callWithAsyncE | CODE |
| LOW⚡ | …/DataPipelines/designer/data-pipelines-designer.min.js | 17 | **/var policy=void 0,tt=typeof window<"u"&&window.trustedTypes;if(tt)try{policy=tt.createPolicy("vue",{createHTML:e=>e}) | CODE |
| LOW⚡ | …/DataPipelines/designer/data-pipelines-designer.min.js | 19 | `)}getSetCookie(){const e=this.get("set-cookie");return utils_default.isArray(e)?e:e==null||e===!1?[]:[e]}get[Symbol.toS | CODE |
| LOW⚡ | …/DataPipelines/designer/data-pipelines-designer.min.js | 21 | `):" "+renderReason(i[0]):"as no adapter specified"),AxiosError.ERR_NOT_SUPPORT)}return a}var adapters_default={getAdapt | CODE |
| LOW⚡ | …ipts/DataPipelines/designer/data-pipelines-designer.js | 9 | **/var activeEffectScope,EffectScope=class{constructor(e=!1){this.detached=e,this._active=!0,this._on=0,this.effects=[], | CODE |
| LOW⚡ | …ipts/DataPipelines/designer/data-pipelines-designer.js | 13 | **/function callWithErrorHandling(e,s,n,r){try{return r?e(...r):e()}catch(a){handleError(a,s,n)}}function callWithAsyncE | CODE |
| LOW⚡ | …ipts/DataPipelines/designer/data-pipelines-designer.js | 17 | **/var policy=void 0,tt=typeof window<"u"&&window.trustedTypes;if(tt)try{policy=tt.createPolicy("vue",{createHTML:e=>e}) | CODE |
| LOW⚡ | …ipts/DataPipelines/designer/data-pipelines-designer.js | 19 | `)}getSetCookie(){const e=this.get("set-cookie");return utils_default.isArray(e)?e:e==null||e===!1?[]:[e]}get[Symbol.toS | CODE |
| LOW⚡ | …ipts/DataPipelines/designer/data-pipelines-designer.js | 21 | `):" "+renderReason(i[0]):"as no adapter specified"),AxiosError.ERR_NOT_SUPPORT)}return a}var adapters_default={getAdapt | CODE |
| LOW | …ules/OrchardCore.Resources/wwwroot/Scripts/Sortable.js | 255 | function getWindowScrollingElement() { | CODE |
| LOW | …ules/OrchardCore.Resources/wwwroot/Scripts/Sortable.js | 462 | function getParentAutoScrollElement(el, includeSelf) { | CODE |
| LOW | …ules/OrchardCore.Resources/wwwroot/Scripts/Sortable.js | 544 | function getChildContainingRectFromElement(container, options, ghostEl) { | CODE |
| LOW | …ules/OrchardCore.Resources/wwwroot/Scripts/Sortable.js | 1049 | var nearestEmptyInsertDetectEvent = function nearestEmptyInsertDetectEvent(evt) { | CODE |
| LOW | …ules/OrchardCore.Resources/wwwroot/Scripts/Sortable.js | 2536 | function clearPointerElemChangedInterval() { | CODE |
| LOW | …ules/OrchardCore.Resources/wwwroot/Scripts/Sortable.js | 3048 | dragOverAnimationComplete: function dragOverAnimationComplete() { | CODE |
| LOW | …hardCore.Resources/wwwroot/Scripts/bootstrap.bundle.js | 353 | function bootstrapDelegationHandler(element, selector, fn) { | CODE |
| LOW | …hardCore.Resources/wwwroot/Scripts/bootstrap.bundle.js | 2386 | function getOppositeVariationPlacement(placement) { | CODE |
| LOW | …hardCore.Resources/wwwroot/Scripts/bootstrap.bundle.js | 2521 | function getInnerBoundingClientRect(element, strategy) { | CODE |
| LOW | …hardCore.Resources/wwwroot/Scripts/bootstrap.bundle.js | 2534 | function getClientRectFromMixedType(element, clippingParent, strategy) { | CODE |
| LOW | …hardCore.Resources/wwwroot/Scripts/bootstrap.bundle.js | 2737 | function getExpandedFallbackPlacements(placement) { | CODE |
| LOW | …hardCore.Resources/wwwroot/Scripts/vuedraggable.umd.js | 1 | (function webpackUniversalModuleDefinition(root, factory) { | CODE |
| LOW | …hardCore.Resources/wwwroot/Scripts/vuedraggable.umd.js | 3614 | getOwnPropertyDescriptors: function getOwnPropertyDescriptors(object) { | CODE |
| LOW | …hardCore.Resources/wwwroot/Scripts/vuedraggable.umd.js | 4646 | function computeComponentStructure(_ref2) { | CODE |
| LOW | …hardCore.Resources/wwwroot/Scripts/vuedraggable.umd.js | 4871 | getUnderlyingPotencialDraggableComponent: function getUnderlyingPotencialDraggableComponent(htmElement) { | CODE |
| LOW | …hardCore.Resources/wwwroot/Scripts/vuedraggable.umd.js | 4909 | getRelatedContextFromMoveEvent: function getRelatedContextFromMoveEvent(_ref3) { | CODE |
| LOW | …e.Resources/wwwroot/Scripts/vue.runtime.esm-browser.js | 1521 | function createInstrumentationGetter(isReadonly2, shallow) { | CODE |
| LOW | …e.Resources/wwwroot/Scripts/vue.runtime.esm-browser.js | 2339 | function callWithAsyncErrorHandling(fn, instance, type, args) { | CODE |
| LOW | …e.Resources/wwwroot/Scripts/vue.runtime.esm-browser.js | 2768 | function createDevtoolsComponentHook(hook) { | CODE |
| LOW | …e.Resources/wwwroot/Scripts/vue.runtime.esm-browser.js | 2781 | function createDevtoolsPerformanceHook(hook) { | CODE |
| LOW | …e.Resources/wwwroot/Scripts/vue.runtime.esm-browser.js | 2798 | function setCurrentRenderingInstance(instance) { | CODE |
| 114 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/orchardcore-breadcrumbs/SKILL.md | 34 | ### Step 1: Import the tag helpers | COMMENT |
| LOW | .agents/skills/orchardcore-breadcrumbs/SKILL.md | 44 | ### Step 2: Declare the explicit title and ancestor children | COMMENT |
| LOW | .agents/skills/orchardcore-breadcrumbs/SKILL.md | 85 | ### Step 3: Remove duplicate title output | COMMENT |
| LOW | .agents/skills/orchardcore-data-migration/SKILL.md | 34 | ### Step 1: Create the Migrations class | COMMENT |
| LOW | .agents/skills/orchardcore-data-migration/SKILL.md | 65 | ### Step 2: Register the migration | COMMENT |
| LOW | .agents/skills/orchardcore-data-migration/SKILL.md | 75 | ### Step 3: Write the initial `CreateAsync` | COMMENT |
| LOW | .agents/skills/orchardcore-data-migration/SKILL.md | 91 | ### Step 4: Add `UpdateFromX` for each shipped change | COMMENT |
| LOW | .agents/skills/orchardcore-data-migration/SKILL.md | 106 | ### Step 5: Test the migration | COMMENT |
| LOW⚡ | .agents/skills/orchardcore-theme-creator/SKILL.md | 18 | ### Step 1: Create Theme Directory | COMMENT |
| LOW⚡ | .agents/skills/orchardcore-theme-creator/SKILL.md | 25 | ### Step 2: Create Required Files | COMMENT |
| LOW⚡ | .agents/skills/orchardcore-theme-creator/SKILL.md | 34 | ### Step 3: Create Manifest.cs | COMMENT |
| LOW | .agents/skills/orchardcore-theme-creator/SKILL.md | 58 | ### Step 4: Create Project File | COMMENT |
| LOW | .agents/skills/orchardcore-theme-creator/SKILL.md | 78 | ### Step 5: Create Layout | COMMENT |
| LOW | .agents/skills/orchardcore-theme-creator/SKILL.md | 103 | ### Step 6: Add Assets (Optional) | COMMENT |
| LOW | .agents/skills/orchardcore-theme-creator/SKILL.md | 116 | ### Step 7: Build and Activate | COMMENT |
| LOW | .agents/skills/orchardcore-query-indexing/SKILL.md | 29 | ### Step 1: Pick a source | COMMENT |
| LOW | .agents/skills/orchardcore-query-indexing/SKILL.md | 33 | ### Step 2: Create via recipe or manager | COMMENT |
| LOW | .agents/skills/orchardcore-query-indexing/SKILL.md | 58 | ### Step 3: Execute | COMMENT |
| LOW | .agents/skills/orchardcore-query-indexing/SKILL.md | 73 | ### Step 1: Create an index profile | COMMENT |
| LOW | .agents/skills/orchardcore-query-indexing/SKILL.md | 101 | ### Step 2: Index custom part/field data | COMMENT |
| LOW | .agents/skills/orchardcore-query-indexing/SKILL.md | 129 | ### Step 3: Register the handler | COMMENT |
| LOW | .agents/skills/orchardcore-query-indexing/SKILL.md | 137 | ### Step 4: Reset / rebuild | COMMENT |
| LOW | .agents/skills/orchardcore-docs-writer/SKILL.md | 28 | ### Step 1: Write the Markdown | COMMENT |
| LOW | .agents/skills/orchardcore-docs-writer/SKILL.md | 41 | ### Step 2: Add it to the nav | COMMENT |
| LOW | .agents/skills/orchardcore-docs-writer/SKILL.md | 54 | ### Step 3: Build / preview | COMMENT |
| LOW | .agents/skills/orchardcore-workflow-activity/SKILL.md | 27 | ### Step 1: Create the activity class | COMMENT |
| LOW | .agents/skills/orchardcore-workflow-activity/SKILL.md | 98 | ### Step 2: Create the display driver | COMMENT |
| LOW⚡ | .agents/skills/orchardcore-workflow-activity/SKILL.md | 113 | ### Step 3: Create the shape templates | COMMENT |
| LOW⚡ | .agents/skills/orchardcore-workflow-activity/SKILL.md | 123 | ### Step 4: Register | COMMENT |
| LOW⚡ | .agents/skills/orchardcore-workflow-activity/SKILL.md | 131 | ### Step 5: Test | COMMENT |
| LOW | .agents/skills/orchardcore-tester/SKILL.md | 67 | ## Step 1: Build | COMMENT |
| LOW | .agents/skills/orchardcore-tester/SKILL.md | 73 | ## Step 2: Run Application (Background) | COMMENT |
| LOW | .agents/skills/orchardcore-tester/SKILL.md | 144 | ## Step 3: Setup Test Site | COMMENT |
| LOW | .agents/skills/orchardcore-tester/SKILL.md | 199 | ## Step 4: Test Features | COMMENT |
| LOW | .agents/skills/orchardcore-tester/SKILL.md | 255 | ## Step 5: Verify Results | COMMENT |
| LOW | .agents/skills/orchardcore-display-management/SKILL.md | 38 | ### Step 1: Find the shape type and differentiator | COMMENT |
| LOW | .agents/skills/orchardcore-display-management/SKILL.md | 44 | ### Step 2: Add a rule to `placement.json` | COMMENT |
| LOW⚡ | .agents/skills/orchardcore-display-management/SKILL.md | 58 | ### Step 3: Verify | COMMENT |
| LOW⚡ | .agents/skills/orchardcore-display-management/SKILL.md | 64 | ### Step 1: Inherit the right base | COMMENT |
| LOW⚡ | .agents/skills/orchardcore-display-management/SKILL.md | 73 | ### Step 2: Implement Display / Edit / Update | COMMENT |
| LOW | .agents/skills/orchardcore-display-management/SKILL.md | 108 | ### Step 3: Register the driver | COMMENT |
| LOW | .agents/skills/orchardcore-module-creator/SKILL.md | 17 | ### Step 1: Determine Module Type | COMMENT |
| LOW⚡ | .agents/skills/orchardcore-module-creator/SKILL.md | 30 | ### Step 2: Create Module Directory | COMMENT |
| LOW⚡ | .agents/skills/orchardcore-module-creator/SKILL.md | 38 | ### Step 3: Create Required Files | COMMENT |
| LOW⚡ | .agents/skills/orchardcore-module-creator/SKILL.md | 48 | ### Step 4: Add Components Based on Type | COMMENT |
| LOW | .agents/skills/orchardcore-module-creator/SKILL.md | 75 | ### Step 5: Register in Startup.cs | COMMENT |
| LOW | .agents/skills/orchardcore-module-creator/SKILL.md | 98 | ### Step 6: Build and Test | COMMENT |
| LOW | .agents/skills/orchardcore-unit-test/SKILL.md | 31 | ### Step 1: Add a test class | COMMENT |
| LOW | .agents/skills/orchardcore-unit-test/SKILL.md | 52 | ### Step 2: Mock dependencies with Moq | COMMENT |
| LOW | .agents/skills/orchardcore-localization/SKILL.md | 30 | ### Step 1: Inject the right localizer | COMMENT |
| LOW | .agents/skills/orchardcore-localization/SKILL.md | 50 | ### Step 2: Pluralize when counting | COMMENT |
| LOW | .agents/skills/orchardcore-localization/SKILL.md | 72 | ### Step 3: Reuse shared sources for strings declared without a localizer | COMMENT |
| LOW | .agents/skills/orchardcore-localization/SKILL.md | 92 | ### Step 4: Provide PO translations | COMMENT |
| LOW | .agents/skills/orchardcore-localization/SKILL.md | 114 | ### Step 5: Update and commit the source templates | COMMENT |
| LOW | .agents/skills/orchardcore-localization/SKILL.md | 120 | ### Step 1: Enable the feature, attach the part | COMMENT |
| LOW | .agents/skills/orchardcore-localization/SKILL.md | 134 | ### Step 2: Translate | COMMENT |
| LOW | .agents/skills/orchardcore-localization/SKILL.md | 142 | ### Step 3: Surface translations / culture picker | COMMENT |
| LOW | .agents/skills/orchardcore-localization/SKILL.md | 172 | ### Step 1: Use the existing build integration | COMMENT |
| LOW | .agents/skills/orchardcore-localization/SKILL.md | 178 | ### Step 2: Regenerate from source | COMMENT |
| LOW | .agents/skills/orchardcore-localization/SKILL.md | 197 | ### Step 3: Review the result and diagnostics | COMMENT |
| 36 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/OpenApiClientGenerator/Program.cs | 59 | ["OrchardCore:OrchardCore_AutoSetup:Tenants:0:AdminEmail"] = "admin@example.com", | CODE |
| LOW | …/OrchardCore.Tests.Functional/Tests/Cms/AgencyTests.cs | 15 | await Assertions.Expect(page.Locator("#services")).ToContainTextAsync("Lorem ipsum dolor sit amet consectetur"); | CODE |
| LOW | …/OrchardCore.Tests.Functional/Tests/Cms/AgencyTests.cs | 15 | await Assertions.Expect(page.Locator("#services")).ToContainTextAsync("Lorem ipsum dolor sit amet consectetur"); | CODE |
| LOW | …ts/Modules/Manifest/FeatureAttributeTests.Attribute.cs | 29 | /// Returns a <paramref name="count"/> of Lorem Ipsum Words. | COMMENT |
| LOW | …sts/Modules/Manifest/ModuleAttributeTests.Attribute.cs | 17 | /// Returns a Lorem Ipsum based Url. Completely fictional, folks, for test purposes only. | COMMENT |
| LOW | …t/OrchardCore.Tests/Serializers/JsonSerializerTests.cs | 66 | Email = "test@test.com", | CODE |
| LOW | …chardCore.Email.Azure/AzureEmailOptionsMonitorTests.cs | 62 | azureEmailSettings.DefaultSender = "admin@example.com"; | CODE |
| LOW | …chardCore.Email.Azure/AzureEmailOptionsMonitorTests.cs | 85 | Assert.Equal("admin@example.com", azureOptions.DefaultSender); | CODE |
| LOW | …ules/OrchardCore.Email.Smtp/SmtpOptionsMonitorTests.cs | 56 | DefaultSender = "admin@example.com", | CODE |
| LOW | …ules/OrchardCore.Email.Smtp/SmtpOptionsMonitorTests.cs | 82 | Assert.Equal("admin@example.com", smtpOptions.DefaultSender); | CODE |
| LOW | …chardCore.Tests/Email/SmtpOptionsConfigurationTests.cs | 171 | DefaultSender = "admin@example.com", | CODE |
| LOW | …chardCore.Tests/Email/SmtpOptionsConfigurationTests.cs | 201 | DefaultSender = "admin@example.com", | CODE |
| LOW | …chardCore.Tests/Email/SmtpOptionsConfigurationTests.cs | 231 | DefaultSender = "admin@example.com", | CODE |
| LOW | …chardCore.Tests/Email/SmtpOptionsConfigurationTests.cs | 254 | DefaultSender = "admin@example.com", | CODE |
| LOW | …dCore.Tests/Localization/LocalizedViewEncodingTests.cs | 67 | Assert.Equal(translation, input.GetAttribute("placeholder")); | CODE |
| LOW | …kills/orchardcore-tester/references/common-features.md | 113 | playwright-cli fill [email-ref] "test@test.com" | CODE |
| LOW | .scripts/bloom/components/tags-editor.ts | 149 | :placeholder="placeholder" | CODE |
| LOW | .scripts/bloom/components/multiselect-picker.ts | 205 | label="displayText" :placeholder="placeholder" | CODE |
| LOW | …s/vue-multiselect-fields/vue-multiselect-fields.min.js | 1 | !function(e,t,s,n){var a="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof win | CODE |
| LOW | …ripts/vue-multiselect-fields/vue-multiselect-fields.js | 1 | !function(e,t,s,n){var a="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof win | CODE |
| LOW⚡ | …t/Scripts/Workflows/designer/workflows-designer.min.js | 27 | `)),v=computed(()=>a.node.retries??0),y=computed(()=>{const A=[a.node.title,a.node.displayText];return a.node.isStart&&A | CODE |
| LOW⚡ | …t/Scripts/Workflows/designer/workflows-designer.min.js | 28 | `))).size===1,lastResultOf=(e,n,a,s)=>{const r={key:"LastResult",name:s.lastResult,source:"LastResult",typeName:"any",de | CODE |
| LOW⚡ | …wroot/Scripts/Workflows/designer/workflows-designer.js | 27 | `)),v=computed(()=>a.node.retries??0),y=computed(()=>{const A=[a.node.title,a.node.displayText];return a.node.isStart&&A | CODE |
| LOW⚡ | …wroot/Scripts/Workflows/designer/workflows-designer.js | 28 | `))).size===1,lastResultOf=(e,n,a,s)=>{const r={key:"LastResult",name:s.lastResult,source:"LastResult",typeName:"any",de | CODE |
| LOW⚡ | …/DataPipelines/designer/data-pipelines-designer.min.js | 28 | ${c.input.name}`,label:c.node.inputs.length>1?`${c.node.displayText}: ${c.input.displayName}`:c.node.displayText}))),l=r | CODE |
| LOW⚡ | …ipts/DataPipelines/designer/data-pipelines-designer.js | 28 | ${c.input.name}`,label:c.node.inputs.length>1?`${c.node.displayText}: ${c.input.displayName}`:c.node.displayText}))),l=r | CODE |
| LOW | …e.Resources/wwwroot/Scripts/vue-multiselect.umd.min.js | 1 | (function(e,t){"object"===typeof exports&&"object"===typeof module?module.exports=t(require("vue")):"function"===typeof | CODE |
| LOW | …re.Resources/wwwroot/Scripts/vue-multiselect.common.js | 4707 | var _hoisted_8 = ["name", "id", "spellcheck", "placeholder", "required", "value", "disabled", "tabindex", "aria-label", | CODE |
| LOW | …re.Resources/wwwroot/Scripts/vue-multiselect.common.js | 4866 | }, [(0,external_commonjs_vue_commonjs2_vue_root_Vue_namespaceObject.renderSlot)(_ctx.$slots, "placeholder", {}, functi | CODE |
| LOW | …dCore.Resources/wwwroot/Scripts/vue-multiselect.umd.js | 4724 | var _hoisted_8 = ["name", "id", "spellcheck", "placeholder", "required", "value", "disabled", "tabindex", "aria-label", | CODE |
| LOW | …dCore.Resources/wwwroot/Scripts/vue-multiselect.umd.js | 4883 | }, [(0,external_commonjs_vue_commonjs2_vue_root_Vue_.renderSlot)(_ctx.$slots, "placeholder", {}, function () { | CODE |
| LOW | …dCore.Resources/wwwroot/Scripts/vue-multiselect.esm.js | 1171 | const _hoisted_8 = ["name", "id", "spellcheck", "placeholder", "required", "value", "disabled", "tabindex", "aria-label" | CODE |
| LOW | …dCore.Resources/wwwroot/Scripts/vue-multiselect.esm.js | 1305 | renderSlot(_ctx.$slots, "placeholder", {}, () => [ | CODE |
| LOW | …dCore.Resources/wwwroot/Scripts/vue-multiselect.ssr.js | 1175 | const _hoisted_8 = ["name", "id", "spellcheck", "placeholder", "required", "value", "disabled", "tabindex", "aria-label" | CODE |
| LOW | …dCore.Resources/wwwroot/Scripts/vue-multiselect.ssr.js | 1309 | vue.renderSlot(_ctx.$slots, "placeholder", {}, () => [ | CODE |
| LOW | …chardCore.Resources/wwwroot/Scripts/vue-multiselect.js | 1172 | const _hoisted_8 = ["name", "id", "spellcheck", "placeholder", "required", "value", "disabled", "tabindex", "aria-labe | CODE |
| LOW | …chardCore.Resources/wwwroot/Scripts/vue-multiselect.js | 1306 | vue.renderSlot(_ctx.$slots, "placeholder", {}, () => [ | CODE |
| LOW | …e.Resources/wwwroot/Scripts/trumbowyg/trumbowyg.min.js | 10 | */jQuery.trumbowyg={langs:{en:{viewHTML:"View HTML",undo:"Undo",redo:"Redo",formatting:"Formatting",p:"Paragraph",block | COMMENT |
| LOW | …dCore.Resources/wwwroot/Scripts/trumbowyg/trumbowyg.js | 10 | */jQuery.trumbowyg={langs:{en:{viewHTML:"View HTML",undo:"Undo",redo:"Redo",formatting:"Formatting",p:"Paragraph",block | COMMENT |
| LOW⚡ | …ripts/monaco-esm/workers/html/html-worker-entry.min.js | 8 | var i=e("../../editor/editor.worker.js"),s=e("671d34cfdbb50b94");function o(...e){const t=e[0];let n,r,i;if("string"==ty | CODE |
| LOW⚡ | …t/Scripts/monaco-esm/workers/html/html-worker-entry.js | 8 | var i=e("../../editor/editor.worker.js"),s=e("671d34cfdbb50b94");function o(...e){const t=e[0];let n,r,i;if("string"==ty | CODE |
| LOW | …t/Scripts/monaco-esm/workers/json/json-worker-entry.js | 8 | var i,s,o=e("../../editor/editor.worker.js"),a=e("5a95275f0f3c3ee");function l(e,t=!1){const r=e.length;let n=0,i="",s=0 | CODE |
| LOW | …ripts/monaco-esm/workers/json/json-worker-entry.min.js | 8 | var i,s,o=e("../../editor/editor.worker.js"),a=e("5a95275f0f3c3ee");function l(e,t=!1){const r=e.length;let n=0,i="",s=0 | CODE |
| LOW | …ripts/monaco-esm/workers/editor/editor-worker-entry.js | 1 | !function(e,t,r,n){var i="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof win | CODE |
| LOW | …s/monaco-esm/workers/editor/editor-worker-entry.min.js | 1 | !function(e,t,r,n){var i="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof win | CODE |
| LOW | …urces/wwwroot/Vendor/jquery-ui-1.14.2/jquery-ui.min.js | 6 | !function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(t){"use strict" | CODE |
| LOW | …Resources/wwwroot/Vendor/jquery-ui-1.14.2/jquery-ui.js | 2530 | element.data( dataSpace + "placeholder", placeholder ); | CODE |
| LOW | …Resources/wwwroot/Vendor/jquery-ui-1.14.2/jquery-ui.js | 2543 | var dataKey = dataSpace + "placeholder", | CODE |
| LOW | …/Vendor/CrestApps/bootstrap-select/bootstrap-select.js | 193 | var ParseableAttributes = ['placeholder']; // attributes to use as settings, can add others in the future | CODE |
| LOW | …dor/CrestApps/bootstrap-select/bootstrap-select.min.js | 9 | !function(e){if("function"==typeof define&&define.amd)define(["bootstrap"],e);else if("object"==typeof module&&module.ex | CODE |
| LOW | …ources/Assets/Vendor/jquery-ui-1.14.2/jquery-ui.min.js | 6 | !function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(t){"use strict" | CODE |
| LOW | ….Resources/Assets/Vendor/jquery-ui-1.14.2/jquery-ui.js | 2530 | element.data( dataSpace + "placeholder", placeholder ); | CODE |
| LOW | ….Resources/Assets/Vendor/jquery-ui-1.14.2/jquery-ui.js | 2543 | var dataKey = dataSpace + "placeholder", | CODE |
| LOW | …Scripts/taxonomy-field-tags/taxonomy-field-tags.min.js | 1 | !function(e,t,n,r){var o="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof win | CODE |
| LOW | …oot/Scripts/taxonomy-field-tags/taxonomy-field-tags.js | 1 | !function(e,t,n,r){var o="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof win | CODE |
| LOW | …es/OrchardCore.Markdown/wwwroot/Scripts/easymde.min.js | 7 | !function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof defin | CODE |
| LOW | …chardCore.Themes/TheBlogTheme/Recipes/blog.recipe.json | 1072 | "Html": "<p>Lorem ipsum dolor sit amet, consectetur adipisicing elit. Saepe nostrum ullam eveniet pariatur v | CODE |
| LOW | …chardCore.Themes/TheBlogTheme/Recipes/blog.recipe.json | 1072 | "Html": "<p>Lorem ipsum dolor sit amet, consectetur adipisicing elit. Saepe nostrum ullam eveniet pariatur v | CODE |
| LOW | …dCore.Themes/TheAgencyTheme/Recipes/agency.recipe.json | 1085 | "Html": "Lorem ipsum dolor sit amet, consectetur adipisicing elit. Minima maxime quam architecto quo i | CODE |
| LOW | …dCore.Themes/TheAgencyTheme/Recipes/agency.recipe.json | 1085 | "Html": "Lorem ipsum dolor sit amet, consectetur adipisicing elit. Minima maxime quam architecto quo i | CODE |
| 28 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ore.Spatial/wwwroot/Scripts/leaflet/leaflet-src.esm.js | 12086 | // If `true` and user is on a retina display, it will request four tiles of half the specified size and a bigger zoom | COMMENT |
| MEDIUM | …ardCore.Spatial/wwwroot/Scripts/leaflet/leaflet-src.js | 12092 | // If `true` and user is on a retina display, it will request four tiles of half the specified size and a bigger zoo | COMMENT |
| LOW | …hardCore.Resources/wwwroot/Scripts/vuedraggable.umd.js | 3438 | // #match works fine because it just return the exec results, even if it has | COMMENT |
| MEDIUM⚡ | …ripts/monaco-esm/workers/html/html-worker-entry.min.js | 8 | var i=e("../../editor/editor.worker.js"),s=e("671d34cfdbb50b94");function o(...e){const t=e[0];let n,r,i;if("string"==ty | CODE |
| MEDIUM⚡ | …ripts/monaco-esm/workers/html/html-worker-entry.min.js | 8 | var i=e("../../editor/editor.worker.js"),s=e("671d34cfdbb50b94");function o(...e){const t=e[0];let n,r,i;if("string"==ty | CODE |
| MEDIUM⚡ | …ripts/monaco-esm/workers/html/html-worker-entry.min.js | 8 | var i=e("../../editor/editor.worker.js"),s=e("671d34cfdbb50b94");function o(...e){const t=e[0];let n,r,i;if("string"==ty | CODE |
| MEDIUM⚡ | …t/Scripts/monaco-esm/workers/html/html-worker-entry.js | 8 | var i=e("../../editor/editor.worker.js"),s=e("671d34cfdbb50b94");function o(...e){const t=e[0];let n,r,i;if("string"==ty | CODE |
| MEDIUM⚡ | …t/Scripts/monaco-esm/workers/html/html-worker-entry.js | 8 | var i=e("../../editor/editor.worker.js"),s=e("671d34cfdbb50b94");function o(...e){const t=e[0];let n,r,i;if("string"==ty | CODE |
| MEDIUM⚡ | …t/Scripts/monaco-esm/workers/html/html-worker-entry.js | 8 | var i=e("../../editor/editor.worker.js"),s=e("671d34cfdbb50b94");function o(...e){const t=e[0];let n,r,i;if("string"==ty | CODE |
| MEDIUM | …e.Resources/wwwroot/Vendor/jquery-3.6.0/jquery.slim.js | 8731 | // understands anonymous AMD modules. A named AMD is safest and most robust | COMMENT |
| MEDIUM | …rdCore.Resources/wwwroot/Vendor/jquery-3.6.0/jquery.js | 10830 | // understands anonymous AMD modules. A named AMD is safest and most robust | COMMENT |
| MEDIUM | …e.Resources/wwwroot/Vendor/jquery-3.5.1/jquery.slim.js | 8726 | // understands anonymous AMD modules. A named AMD is safest and most robust | COMMENT |
| MEDIUM | …rdCore.Resources/wwwroot/Vendor/jquery-3.5.1/jquery.js | 10821 | // understands anonymous AMD modules. A named AMD is safest and most robust | COMMENT |
| MEDIUM | …e.Resources/wwwroot/Vendor/jquery-3.4.1/jquery.slim.js | 8444 | // understands anonymous AMD modules. A named AMD is safest and most robust | COMMENT |
| MEDIUM | …rdCore.Resources/wwwroot/Vendor/jquery-3.4.1/jquery.js | 10547 | // understands anonymous AMD modules. A named AMD is safest and most robust | COMMENT |
| MEDIUM | …s/OrchardCore.AuditTrail/wwwroot/Scripts/diffviewer.js | 1 | (()=>{var e={223:(e,t,n)=>{"use strict";n.d(t,{A:()=>a});var r=n(601),i=n.n(r),l=n(314),o=n.n(l)()(i());o.push([e.id,"@i | CODE |
| MEDIUM | …s/OrchardCore.AuditTrail/wwwroot/Scripts/diffviewer.js | 1 | (()=>{var e={223:(e,t,n)=>{"use strict";n.d(t,{A:()=>a});var r=n(601),i=n.n(r),l=n(314),o=n.n(l)()(i());o.push([e.id,"@i | CODE |
| MEDIUM | …Assets/media-gallery/src/components/PagerComponent.vue | 167 | // this computed is only to have a central place where we detect changes and leverage Vue JS reactivity to raise our eve | COMMENT |
| MEDIUM | …rdCore.Contents.Core/ContentsAdminListFilterOptions.cs | 13 | /// should indicate the default term names per content type to utilize during text searches. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …s.Integration/Azure/AzureBlobResizedImageCacheTests.cs | 77 | // ── Get miss ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s.Integration/Azure/AzureBlobResizedImageCacheTests.cs | 86 | // ── Set / Get round-trip ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s.Integration/Azure/AzureBlobResizedImageCacheTests.cs | 142 | // ── Clear ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s.Integration/Azure/AzureBlobResizedImageCacheTests.cs | 183 | // ── ClearStale ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts.Integration/AmazonS3/AWSS3ResizedImageCacheTests.cs | 88 | // ── Get miss ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts.Integration/AmazonS3/AWSS3ResizedImageCacheTests.cs | 97 | // ── Set / Get round-trip ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts.Integration/AmazonS3/AWSS3ResizedImageCacheTests.cs | 153 | // ── Clear ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts.Integration/AmazonS3/AWSS3ResizedImageCacheTests.cs | 194 | // ── ClearStale ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …e.Media/Assets/media-picker/src/__tests__/main.spec.ts | 3 | // ── Mocks (must be declared before any import that triggers main.ts) ──────── | COMMENT |
| MEDIUM | …e.Media/Assets/media-picker/src/__tests__/main.spec.ts | 83 | // ── Helpers ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …e.Media/Assets/media-picker/src/__tests__/main.spec.ts | 113 | // ── Tests ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …e.Media/Assets/media-picker/src/__tests__/main.spec.ts | 162 | // ── mountMediaField ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …e.Media/Assets/media-picker/src/__tests__/main.spec.ts | 238 | // ── mountAttachedMediaField ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …e.Media/Assets/media-picker/src/__tests__/main.spec.ts | 259 | // ── mountGalleryMediaField ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …e.Media/Assets/media-picker/src/__tests__/main.spec.ts | 270 | // ── readConfig (tested indirectly via mount functions) ────────────────── | COMMENT |
| MEDIUM | …e.Media/Assets/media-picker/src/__tests__/main.spec.ts | 334 | // ── readTranslations (tested indirectly via mount) ────────────────────── | COMMENT |
| MEDIUM | …e.Media/Assets/media-picker/src/__tests__/main.spec.ts | 385 | // ── autoMount ─────────────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …Resources/wwwroot/Vendor/jquery-ui-1.14.2/jquery-ui.js | 8518 | // Format a name, short or long as requested | COMMENT |
| HIGH | ….Resources/Assets/Vendor/jquery-ui-1.14.2/jquery-ui.js | 8518 | // Format a name, short or long as requested | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ests.Modules/Errors.OrchardCoreModules.TwoPlus/Root.cs | 10 | // TODO: MWP: but this would also require a bit of xUnit scaffold to support | COMMENT |
| MEDIUM | …ractions.Tests/Modules/Manifest/ThemeAttributeTests.cs | 589 | // TODO: TBD: ditto ModuleAttributeTests re: in process Build scaffold | COMMENT |
| MEDIUM | ….Tests.Themes/Errors.OrchardCoreThemes.TwoPlus/Root.cs | 9 | // TODO: MWP: but this would also require a bit of xUnit scaffold to support | COMMENT |
| MEDIUM | …Themes/Errors.OrchardCoreThemes.ThemeAndModule/Root.cs | 9 | // TODO: MWP: but this would also require a bit of xUnit scaffold to support | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ore.Spatial/wwwroot/Scripts/leaflet/leaflet-src.esm.js | 7779 | * In addition to [shared layer methods](#Layer) like `addTo()` and `remove()` and [popup methods](#Popup) like bindPop | COMMENT |
| MEDIUM | …ardCore.Spatial/wwwroot/Scripts/leaflet/leaflet-src.js | 7785 | * In addition to [shared layer methods](#Layer) like `addTo()` and `remove()` and [popup methods](#Popup) like bindP | COMMENT |
| MEDIUM⚡ | …ripts/monaco-esm/workers/html/html-worker-entry.min.js | 8 | var i=e("../../editor/editor.worker.js"),s=e("671d34cfdbb50b94");function o(...e){const t=e[0];let n,r,i;if("string"==ty | CODE |
| MEDIUM⚡ | …t/Scripts/monaco-esm/workers/html/html-worker-entry.js | 8 | var i=e("../../editor/editor.worker.js"),s=e("671d34cfdbb50b94");function o(...e){const t=e[0];let n,r,i;if("string"==ty | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/OrchardCore.Tests/Localization/PoParserTests.cs | 33 | // # This file is distributed under the same license as the kdeedu package. | COMMENT |
| MEDIUM | test/OrchardCore.Tests/Localization/PoParserTests.cs | 229 | // # This file is distributed under the same license as the kdeedu package. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …e.Resources/wwwroot/Vendor/jquery-3.6.0/jquery.slim.js | 4405 | function getData( data ) { | CODE |
| LOW | …rdCore.Resources/wwwroot/Vendor/jquery-3.6.0/jquery.js | 4405 | function getData( data ) { | CODE |
| LOW | …e.Resources/wwwroot/Vendor/jquery-3.5.1/jquery.slim.js | 4401 | function getData( data ) { | CODE |
| LOW | …rdCore.Resources/wwwroot/Vendor/jquery-3.5.1/jquery.js | 4401 | function getData( data ) { | CODE |
| LOW | …e.Resources/wwwroot/Vendor/jquery-3.4.1/jquery.slim.js | 4196 | function getData( data ) { | CODE |
| LOW | …rdCore.Resources/wwwroot/Vendor/jquery-3.4.1/jquery.js | 4196 | function getData( data ) { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …dcore-video-producer/examples/secrets-module/slides.py | 154 | settings.ApiKey = null; | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/docs/reference/modules/X/README.md | 53 | "ConsumerKey": "your-api-key", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …Modules/OrchardCore.SignalR/wwwroot/Scripts/signalr.js | 2584 | // ErrorEvent is a browser only type we need to check if the type exists before using it | COMMENT |
| LOW | …Modules/OrchardCore.SignalR/wwwroot/Scripts/signalr.js | 2613 | // ErrorEvent is a browser only type we need to check if the type exists before using it | COMMENT |
| LOW | …dCore.DisplayManagement/Razor/RazorViewActionFilter.cs | 101 | // Step 3: Theme | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/skills/orchardcore-video-producer/scripts/assemble.py | 139 | CODE | |
| LOW | …s/skills/orchardcore-video-producer/scripts/narrate.py | 52 | CODE | |
| LOW | …nts/skills/orchardcore-video-producer/scripts/brand.py | 65 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/OrchardCore.Tests.Functional/run-db-tests.sh | 8 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …dcore-video-producer/examples/secrets-module/slides.py | 8 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/skills/orchardcore-video-producer/scripts/narrate.py | 46 | except Exception: | CODE |