PrestaShop is the universal open-source software platform to build your e-commerce solution.
This report summarizes scanner evidence for PrestaShop/PrestaShop, a PHP project with 9,239 GitHub stars. SynthScan examined 2,703,566 lines of code across 12134 source files, recording 6650 pattern matches distributed across 15 syntactic categories. The legacy adjusted pattern signal is 2.8 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 5524 finding(s).
Are imports declared and package/API names verified? 983 finding(s).
Are wrappers, guards, and repeated structures necessary? 5537 finding(s).
Which changes need focused human review? 6650 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 6650 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | install-dev/classes/datas.php | 209 | public function getAndCheckArgs($argv) | CODE |
| LOW | install-dev/theme/js/configure.js | 251 | function getPasswordStrengthFeedback( | CODE |
| LOW | install-dev/controllers/http/process.php | 129 | public function processGenerateSettingsFile() | CODE |
| LOW | install-dev/controllers/http/process.php | 167 | public function processInstallDefaultData() | CODE |
| LOW | install-dev/controllers/console/process.php | 209 | private function checkExistingSettingsFile(): bool | CODE |
| LOW | install-dev/controllers/console/process.php | 226 | public function processGenerateSettingsFile() | CODE |
| LOW | install-dev/controllers/console/process.php | 251 | public function processInstallDefaultData() | CODE |
| LOW | install-dev/controllers/console/process.php | 417 | private function rebootWithoutTranslationsCache() | CODE |
| LOW | tools/profiling/Tools.php | 48 | public static function getDefaultControllerClass() | CODE |
| LOW | app/AppKernel.php | 133 | public function registerContainerConfiguration(LoaderInterface $loader) | CODE |
| LOW | app/AppKernel.php | 289 | private function enableComposerAutoloaderOnModules($modules) | CODE |
| LOW | classes/ImageManager.php | 285 | public static function getImageSizeWithOrientation(string $sourceFile): array|false | CODE |
| LOW | classes/ImageManager.php | 321 | public static function computeThumbnailDimensions(int $sourceWidth, int $sourceHeight, int $destinationWidth, int $d | CODE |
| LOW | classes/Category.php | 866 | public static function getSimpleCategoriesWithParentInfos($idLang) | CODE |
| LOW | classes/Category.php | 1251 | public static function getChildrenWithNbSelectedSubCat($idParent, $selectedCategory, $idLang, ?Shop $shop = null, $u | CODE |
| LOW | classes/Category.php | 1296 | public static function duplicateProductCategories($idOld, $idNew) | CODE |
| LOW | classes/Category.php | 1496 | public static function searchByNameAndParentCategoryId($idLang, $categoryName, $idParentCategory) | CODE |
| LOW | classes/Category.php | 2165 | public function isParentCategoryAvailable() | CODE |
| LOW | classes/Category.php | 2234 | public static function getCategoriesWithoutParent() | CODE |
| LOW | classes/Access.php | 223 | public static function getAuthorizationFromLegacy($legacyAuth) | CODE |
| LOW | classes/PhpEncryptionEngine.php | 73 | public static function saveBytesToChecksummedAsciiSafeString($header, $bytes) | CODE |
| LOW | classes/ProductAssembler.php | 67 | private function addMissingProductFieldsForMultipleProducts(array $rawProducts): array | CODE |
| LOW | classes/Group.php | 171 | public static function getDefaultPriceDisplayMethod() | CODE |
| LOW | classes/Group.php | 302 | public static function truncateModulesRestrictions($id_group) | CODE |
| LOW | classes/Group.php | 316 | public static function truncateRestrictionsByModule($id_module) | CODE |
| LOW | classes/Group.php | 470 | public function truncateSpecificPriceRules(): bool | CODE |
| LOW⚡ | classes/Cart.php | 5066 | protected function mergeGiftsProductsQuantity() | CODE |
| LOW⚡ | classes/Cart.php | 5076 | protected function excludeGiftsDiscountFromTotal() | CODE |
| LOW⚡ | classes/Cart.php | 5086 | protected function includeGiftsDiscountInTotal() | CODE |
| LOW | classes/Cart.php | 245 | public function resetProductRelatedStaticCache() | CODE |
| LOW | classes/Cart.php | 420 | public function getAverageProductsTaxRate(&$cartAmountTaxExcluded = null, &$cartAmountTaxIncluded = null) | CODE |
| LOW | classes/Cart.php | 1490 | protected function checkCartRuleCompatibility($cartRuleId) | CODE |
| LOW | classes/Cart.php | 1539 | protected function getDiscountApplicationService() | CODE |
| LOW | classes/Cart.php | 2177 | public static function getOrderTotalUsingTaxCalculationMethod($id_cart) | CODE |
| LOW | classes/Cart.php | 2414 | public function getDiscountSubtotalWithoutGifts($withTaxes = true) | CODE |
| LOW | classes/Cart.php | 2458 | protected function getTotalCalculationCartRules($type, $withShipping) | CODE |
| LOW | classes/Cart.php | 3306 | public function simulateCarrierSelectedOutput($use_cache = true) | CODE |
| LOW | classes/Cart.php | 3434 | protected function getIdCarrierFromDeliveryOption($delivery_option) | CODE |
| LOW | classes/Cart.php | 3660 | protected function getPackageShippingCostValue( | CODE |
| LOW | classes/Cart.php | 4056 | protected function getPackageShippingCostFromModule(Carrier $carrier, $shipping_cost, $products) | CODE |
| LOW | classes/Cart.php | 4524 | public function deleteCustomizationToProduct($id_product, $index) | CODE |
| LOW | classes/Cart.php | 4811 | public function setProductAddressDelivery($id_product, $id_product_attribute, $old_id_address_delivery, $new_id_addr | CODE |
| LOW | classes/Cart.php | 4827 | public function setProductCustomizedDatas(&$product, $customized_datas) | CODE |
| LOW | classes/Cart.php | 4963 | public function checkAllProductsAreStillAvailableInThisState() | CODE |
| LOW | classes/Cart.php | 5022 | public function checkAllProductsHaveMinimalQuantities() | CODE |
| LOW | classes/Cart.php | 5054 | protected function splitGiftsProductsQuantity() | CODE |
| LOW | classes/Cart.php | 5099 | public function getProductsWithSeparatedGifts() | CODE |
| LOW | classes/Cart.php | 5265 | public function getProductQuantityInAllVariants($idProduct) | CODE |
| LOW | classes/Link.php | 70 | public function getProductDeletePictureLink($product, $idPicture) | CODE |
| LOW | classes/Product.php | 1788 | public function generateMultipleCombinations($combinations, $attributes, $resetExistingCombination = true) | CODE |
| LOW | classes/Product.php | 1836 | public function sortCombinationByAttributePosition($combinations, $langId) | CODE |
| LOW | classes/Product.php | 2425 | public function deleteAttributeCombination($id_product_attribute) | CODE |
| LOW | classes/Product.php | 2616 | public function getAttributeCombinationsById($id_product_attribute, $id_lang, $groupByIdAttributeGroup = true) | CODE |
| LOW | classes/Product.php | 4019 | public function getIdProductAttributeMostExpensive() | CODE |
| LOW | classes/Product.php | 4036 | public function getDefaultIdProductAttribute() | CODE |
| LOW | classes/Product.php | 4112 | public static function displayWtPriceWithCurrency($params, &$smarty) | CODE |
| LOW | classes/Product.php | 4234 | public static function isAvailableWhenOutOfStock($out_of_stock) | CODE |
| LOW | classes/Product.php | 4452 | public function deleteCarrierRestrictions() | CODE |
| LOW | classes/Product.php | 4584 | public static function changeAccessoriesForProduct($accessories_id, $product_id) | CODE |
| LOW | classes/Product.php | 5251 | public static function duplicateCustomizationFields($old_product_id, $product_id) | CODE |
| 5334 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 21 | <p class="bottom-indent">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 21 | <p class="bottom-indent">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 23 | <p class="bottom-indent">Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad m | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 23 | <p class="bottom-indent">Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad m | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 25 | <p class="bottom-indent">Tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, qu | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 25 | <p class="bottom-indent">Tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, qu | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 36 | <p><strong class="dark">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod t | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 36 | <p><strong class="dark">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod t | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 37 | <p>Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 37 | <p>Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 56 | <div class="inner"><span class="before">“</span>Lorem ipsum dolor sit amet conse c | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 56 | <div class="inner"><span class="before">“</span>Lorem ipsum dolor sit amet conse c | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 58 | <p><strong class="dark">Lorem ipsum dolor sit</strong></p> | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 60 | <div class="inner"><span class="before">“</span>Excepteur sint occaecat cupidatat | CODE |
| LOW⚡ | install-dev/langs/sk/data/cms.xml | 60 | <div class="inner"><span class="before">“</span>Excepteur sint occaecat cupidatat | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 20 | <p class="bottom-indent">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 20 | <p class="bottom-indent">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 22 | <p class="bottom-indent">Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad m | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 22 | <p class="bottom-indent">Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad m | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 24 | <p class="bottom-indent">Tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, qu | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 24 | <p class="bottom-indent">Tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, qu | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 35 | <p><strong class="dark">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod t | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 35 | <p><strong class="dark">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod t | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 36 | <p>Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 36 | <p>Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 55 | <div class="inner"><span class="before">“</span>Lorem ipsum dolor sit amet conse c | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 55 | <div class="inner"><span class="before">“</span>Lorem ipsum dolor sit amet conse c | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 57 | <p><strong class="dark">Lorem ipsum dolor sit</strong></p> | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 59 | <div class="inner"><span class="before">“</span>Excepteur sint occaecat cupidatat | CODE |
| LOW⚡ | install-dev/langs/vn/data/cms.xml | 59 | <div class="inner"><span class="before">“</span>Excepteur sint occaecat cupidatat | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 20 | <p class="bottom-indent">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 20 | <p class="bottom-indent">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 22 | <p class="bottom-indent">Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad m | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 22 | <p class="bottom-indent">Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad m | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 24 | <p class="bottom-indent">Tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, qu | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 24 | <p class="bottom-indent">Tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, qu | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 35 | <p><strong class="dark">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod t | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 35 | <p><strong class="dark">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod t | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 36 | <p>Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 36 | <p>Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 55 | <div class="inner"><span class="before">“</span>Lorem ipsum dolor sit amet conse c | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 55 | <div class="inner"><span class="before">“</span>Lorem ipsum dolor sit amet conse c | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 57 | <p><strong class="dark">Lorem ipsum dolor sit</strong></p> | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 59 | <div class="inner"><span class="before">“</span>Excepteur sint occaecat cupidatat | CODE |
| LOW⚡ | install-dev/langs/sv/data/cms.xml | 59 | <div class="inner"><span class="before">“</span>Excepteur sint occaecat cupidatat | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 20 | <p class="bottom-indent">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 20 | <p class="bottom-indent">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 22 | <p class="bottom-indent">Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad m | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 22 | <p class="bottom-indent">Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad m | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 24 | <p class="bottom-indent">Tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, qu | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 24 | <p class="bottom-indent">Tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, qu | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 35 | <p><strong class="dark">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod t | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 35 | <p><strong class="dark">Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod t | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 36 | <p>Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 36 | <p>Lorem ipsum dolor sit amet conse ctetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 55 | <div class="inner"><span class="before">“</span>Lorem ipsum dolor sit amet conse c | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 55 | <div class="inner"><span class="before">“</span>Lorem ipsum dolor sit amet conse c | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 57 | <p><strong class="dark">Lorem ipsum dolor sit</strong></p> | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 59 | <div class="inner"><span class="before">“</span>Excepteur sint occaecat cupidatat | CODE |
| LOW⚡ | install-dev/langs/he/data/cms.xml | 59 | <div class="inner"><span class="before">“</span>Excepteur sint occaecat cupidatat | CODE |
| 909 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | app/config/admin-api/services.yml | 87 | # ─── Extra properties (Admin API bridge) ───────────────────────────────────── | COMMENT |
| MEDIUM | …Bundle/Translation/Loader/SqlTranslationLoaderTest.php | 91 | // ── scenario 1 ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …Bundle/Translation/Loader/SqlTranslationLoaderTest.php | 114 | // ── scenario 2 — primary cold-cache bug ─────────────────────────────────── | COMMENT |
| MEDIUM | …Bundle/Translation/Loader/SqlTranslationLoaderTest.php | 130 | // ── scenario 3 — Bug A (wrong column name) ──────────────────────────────── | COMMENT |
| MEDIUM | …Bundle/Translation/Loader/SqlTranslationLoaderTest.php | 145 | // ── scenario 4 & 5 — override precedence ───────────────────────────────── | COMMENT |
| MEDIUM | …Bundle/Translation/Loader/SqlTranslationLoaderTest.php | 171 | // ── scenario 6 — multishop ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …Bundle/Translation/Loader/SqlTranslationLoaderTest.php | 202 | // ── scenario 7 — inactive shop theme excluded ───────────────────────────── | COMMENT |
| MEDIUM | …Bundle/Translation/Loader/SqlTranslationLoaderTest.php | 215 | // ── helpers ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …aviour/Features/Context/Domain/StoreFeatureContext.php | 382 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …aviour/Features/Context/Domain/StoreFeatureContext.php | 384 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …aviour/Features/Context/Domain/StoreFeatureContext.php | 482 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …aviour/Features/Context/Domain/StoreFeatureContext.php | 484 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aviour/Features/Context/Domain/StoreFeatureContext.php | 38 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aviour/Features/Context/Domain/StoreFeatureContext.php | 40 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aviour/Features/Context/Domain/StoreFeatureContext.php | 60 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aviour/Features/Context/Domain/StoreFeatureContext.php | 62 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aviour/Features/Context/Domain/StoreFeatureContext.php | 95 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aviour/Features/Context/Domain/StoreFeatureContext.php | 97 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aviour/Features/Context/Domain/StoreFeatureContext.php | 148 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aviour/Features/Context/Domain/StoreFeatureContext.php | 150 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aviour/Features/Context/Domain/StoreFeatureContext.php | 211 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aviour/Features/Context/Domain/StoreFeatureContext.php | 213 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aviour/Features/Context/Domain/StoreFeatureContext.php | 288 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aviour/Features/Context/Domain/StoreFeatureContext.php | 290 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 47 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 50 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 97 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 99 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 145 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 147 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 209 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 212 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 295 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 298 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 355 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 357 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 405 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/release-healthcheck.yml | 407 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 33 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 35 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 65 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 67 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 158 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 160 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 248 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 250 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 318 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 320 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 392 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 394 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 467 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 469 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 496 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 500 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 570 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 572 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 610 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .ai/bin/generate-ai-index.sh | 612 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | admin-dev/filemanager/include/php_image_magician.php | 2851 | ## -------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | admin-dev/filemanager/include/php_image_magician.php | 2858 | ## -------------------------------------------------------- | COMMENT |
| 83 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | js/jquery/jquery-3.7.1.min.js | 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f | CODE |
| CRITICAL | js/jquery/ui/jquery-ui.min.js | 5 | !function(a,b){function e(b,c){var d,e,g,h=b.nodeName.toLowerCase();return"area"===h?(d=b.parentNode,e=d.name,!(!b.href| | CODE |
| CRITICAL | js/jquery/ui/jquery-ui.min.js | 10 | b._trigger("dragStart",c,d(e))},drag:function(a,c){b._trigger("drag",a,d(c))},stop:function(e,f){c.position=[f.position. | CODE |
| CRITICAL | js/jquery/ui/jquery.ui.position.min.js | 4 | (function(t,e){function i(t,e,i){return[parseFloat(t[0])*(p.test(t[0])?e/100:1),parseFloat(t[1])*(p.test(t[1])?i/100:1)] | CODE |
| CRITICAL | js/jquery/ui/jquery.ui.draggable.min.js | 4 | (function(e){e.widget("ui.draggable",e.ui.mouse,{version:"1.10.3",widgetEventPrefix:"drag",options:{addClasses:!0,append | CODE |
| CRITICAL | admin-dev/filemanager/js/jquery.ui.position.min.js | 1 | (function(e,t){function h(e,t,n){return[parseInt(e[0],10)*(l.test(e[0])?t/100:1),parseInt(e[1],10)*(l.test(e[1])?n/100:1 | CODE |
| CRITICAL | admin-dev/filemanager/jPlayer/jquery.jplayer.min.js | 87 | (this.internal.fullscreenchangeHandler=function(){a._fullscreenchange()}),document.addEventListener(c.event.fullscreench | CODE |
| CRITICAL | …v/themes/new-theme/js/components/modal/iframe-modal.ts | 270 | return this.modal.iframe.contentWindow.document.querySelector(this.autoSizeContainer); | CODE |
| CRITICAL | …themes/new-theme/js/components/modal/progress-modal.ts | 468 | this.modal.progressView.lastError.classList.remove('d-none'); | CODE |
| CRITICAL | …themes/new-theme/js/components/modal/progress-modal.ts | 471 | this.modal.progressView.switchToErrorButton.classList.remove('d-none'); | CODE |
| CRITICAL | …themes/new-theme/js/components/modal/progress-modal.ts | 528 | this.modal.progressView.abortProcessingButton.classList.add('d-none'); | CODE |
| CRITICAL | …themes/new-theme/js/components/modal/progress-modal.ts | 529 | this.modal.progressView.closeModalButton.classList.remove('d-none'); | CODE |
| CRITICAL | …in-dev/themes/default/js/jquery.fileupload-validate.js | 30 | $.blueimp.fileupload.prototype.options.processQueue.push( | CODE |
| CRITICAL | admin-dev/themes/default/js/jquery.fileupload-image.js | 36 | $.blueimp.fileupload.prototype.options.processQueue.unshift( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | install-dev/theme/js/zxcvbn-core.js | 1481 | // the optimal "minimum guesses" sequence is here defined to be the sequence that | COMMENT |
| LOW | tools/assets/build.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tools/assets/build.sh | 61 | sha256sum | cut -d' ' -f1 | COMMENT |
| LOW | classes/exception/PrestaShopException.php | 21 | } elseif (_PS_MODE_DEV_) { | COMMENT |
| LOW | js/jquery/plugins/jstree/themes/apple/style.css | 41 | COMMENT | |
| LOW | js/jquery/plugins/jstree/themes/classic/style.css | 41 | #vakata-dragged.jstree-classic ins { background:transparent !important; } | COMMENT |
| LOW | js/jquery/plugins/jstree/themes/default/style.css | 41 | #vakata-dragged.jstree-default .jstree-ok { background:url("d.png") -2px -53px no-repeat !important; } | COMMENT |
| LOW | js/jquery/plugins/jstree/themes/default-rtl/style.css | 41 | #vakata-dragged.jstree-default-rtl .jstree-ok { background:url("d.png") -2px -53px no-repeat !important; } | COMMENT |
| LOW | js/jquery/plugins/alerts/jquery.alerts.js | 1 | // jQuery Alert Dialogs Plugin | COMMENT |
| LOW | js/cropper/scriptaculous.js | 1 | // Copyright (c) 2005 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us) | COMMENT |
| LOW | tests/UI/campaigns/functional/API/02_checkEndpoints.ts | 421 | // @todo: add tests | COMMENT |
| LOW | tests/Resources/themes/classic/config/theme.yml | 21 | layout-left-column: | COMMENT |
| LOW | .github/release-bootstrap/transform-ga-tests-ui-pr.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-bootstrap/transform-translationtool.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-bootstrap/transform-kanbanbot.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-bootstrap/transform-docker.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-bootstrap/lib.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-bootstrap/transform-ps-apiresources.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-bootstrap/transform-core.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-bootstrap/transform-core.sh | 61 | - 'Nightly tests and report - ${NEW} (mariadb)' | COMMENT |
| LOW | .github/workflows/protect_localization_packs.yml | 1 | name: Protect localization packs | COMMENT |
| LOW | .github/workflows/version-branch-bootstrap.yml | 1 | # Version-branch bootstrap (issue #41818) | COMMENT |
| LOW | .github/workflows/release-healthcheck.yml | 1 | name: Release Healthcheck | COMMENT |
| LOW | .github/workflows/nightly_tests_follow_up.yml | 1 | # Follow-up of every attempt of a nightly test run (workflow_run: completed). Two | COMMENT |
| LOW | .github/workflows/sync_localization_files.yml | 1 | name: Sync localization files from LocalizationFiles | COMMENT |
| LOW | .github/workflows/sync-from-upstream.yml | 1 | # Sync from upstream | COMMENT |
| LOW | .github/release-healthcheck/dependencies.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-healthcheck/ci-status.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-healthcheck/run-tier.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-healthcheck/render.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-healthcheck/generated-files.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-healthcheck/lib.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-healthcheck/cross-repo-readiness.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/release-healthcheck/derive.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .ai/bin/generate-ai-index.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | controllers/admin/AdminStoresController.php | 541 | // 'PS_SHOP_COUNTRY_ID' => 'Country:name', | COMMENT |
| LOW | admin-dev/filemanager/config/config.php | 61 | // DON'T COPY THIS VARIABLES IN FOLDERS config.php FILES | COMMENT |
| LOW | admin-dev/filemanager/config/config.php | 101 | COMMENT | |
| LOW | admin-dev/filemanager/config/config.php | 181 | //Thumbnail for external use creation | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 1 | <?php | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 21 | # $magicianObj = new resize('images/car.jpg'); | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 41 | # - | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 61 | # * Minor bug fixes | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 81 | # * Added setFillColor() set method - set the | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 101 | # parameter. If disabled, if an images original size is smaller than the size | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 121 | # - Resize modes: | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 141 | # - f-stop | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 261 | } | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 281 | # | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 381 | # Purpose: Crops the image | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 461 | COMMENT | |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 561 | } | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 741 | # Param out: Array of optimal width and height (fig 2) | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 961 | public function greyScale() | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 1421 | /*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-**-*-*-*-*-*-*-*-*-*-*-*-*-*- | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 1561 | COMMENT | |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 2101 | COMMENT | |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 2241 | # r = right, | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 2281 | COMMENT | |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 2381 | COMMENT | |
| 24 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | classes/Cart.php | 4072 | * We need to check if the property exists because not all carrier modules have this property. | COMMENT |
| LOW | classes/Cookie.php | 362 | * We need to check if the new cookie will be compliant with RFC 2965, maximum of 4096 bytes | COMMENT |
| LOW | classes/CartRule.php | 978 | * Now, we need to check if the cart rule meets the minimum requirements to use it. | COMMENT |
| LOW | js/jquery/ui/jquery-ui.js | 13433 | // IE sets focus asynchronously, so we need to check if focus | COMMENT |
| LOW | js/jquery/plugins/jstree/jquery.jstree.js | 1415 | // this variable stores the path to the themes folder - if left as false - it will be autodetected | COMMENT |
| LOW | controllers/front/RegistrationController.php | 58 | // Before that, we need to check if 'back' is legit URL that is on OUR domain, with the right protocol | COMMENT |
| LOW | …apter/Order/QueryHandler/GetOrderForViewingHandler.php | 575 | // We need to check if this module is still installed and if it implements the method | COMMENT |
| LOW | src/Adapter/Discount/Validate/DiscountValidator.php | 277 | // So, we need to check if discountRepository property is set before use this function! | COMMENT |
| LOW⚡ | src/Adapter/Carrier/Repository/CarrierRepository.php | 413 | // Step 1: Get all active carriers once | COMMENT |
| LOW⚡ | src/Adapter/Carrier/Repository/CarrierRepository.php | 416 | // Step 2: Initialize mapping with all carriers for each product | COMMENT |
| LOW⚡ | src/Adapter/Carrier/Repository/CarrierRepository.php | 422 | // Step 3: Get restricted carriers for certain products | COMMENT |
| LOW⚡ | src/Adapter/Carrier/Repository/CarrierRepository.php | 426 | // Step 4: Override default mapping with restricted carriers where applicable | COMMENT |
| LOW | …dapter/Customer/CommandHandler/EditCustomerHandler.php | 58 | // If dealing with a registered customer, we need to check if the email does not exist. | COMMENT |
| LOW | …Adapter/Customer/CommandHandler/AddCustomerHandler.php | 70 | // If dealing with a registered customer, we need to check if the email does not exist. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | config/services/common.yml | 18 | # This file is loaded by the hand-built legacy containers only (front, webservice), which have no | COMMENT |
| MEDIUM | classes/Tools.php | 2890 | fwrite($write_fd, "# This file is to prevent the crawling and indexing of certain parts\n"); | CODE |
| MEDIUM | …module-self-config-files/moduleConfExampleConfStep.yml | 1 | # This file is an example of data configuration which can be applied to a module | COMMENT |
| MEDIUM | …sources/module-self-config-files/moduleConfExample.yml | 1 | # This file is an example of data configuration which can be applied to a module | COMMENT |
| MEDIUM | .github/workflows/phpunit/parameters.yml | 1 | # This file is used by GitHub Actions. | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 31 | # The following functions are taken from phpThumb() [available from | COMMENT |
| MEDIUM | admin-dev/filemanager/include/php_image_magician.php | 38 | # The following functions are from Marc Hibbins and are used with written | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | js/jquery/ui/jquery-ui.js | 8906 | // Format a name, short or long as requested | COMMENT |
| HIGH | admin-dev/filemanager/include/php_image_magician.php | 740 | # Param in: width and height as requested by user (fig 3) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | classes/Cart.php | 2751 | // Step 1 - We assign some basic information (load their carriers) to products and separate them by their stock | COMMENT |
| LOW | classes/Cart.php | 2797 | // Step 2 - We divide those two groups once more into groups by their carriers. | COMMENT |
| LOW | classes/Cart.php | 2868 | // Step 4 - Reduce depth of $package_list | COMMENT |
| LOW⚡ | src/Adapter/Carrier/Repository/CarrierRepository.php | 413 | // Step 1: Get all active carriers once | COMMENT |
| LOW⚡ | src/Adapter/Carrier/Repository/CarrierRepository.php | 416 | // Step 2: Initialize mapping with all carriers for each product | COMMENT |
| LOW⚡ | src/Adapter/Carrier/Repository/CarrierRepository.php | 422 | // Step 3: Get restricted carriers for certain products | COMMENT |
| LOW⚡ | src/Adapter/Carrier/Repository/CarrierRepository.php | 426 | // Step 4: Override default mapping with restricted carriers where applicable | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | install-dev/theme/js/zxcvbn-language-common.js | 7 | var passwords = "123456,password,12345678,qwerty,123456789,12345,1234,111111,1234567,dragon,123123,baseball,abc123,foot | CODE |
| MEDIUM | docs/CHANGELOG.txt | 2943 | - #32450: [BC Break] Use dependency injection inside controllers (by @FabienPapet) | CODE |
| MEDIUM | .github/workflows/release-healthcheck.yml | 15 | # All check logic lives in .github/release-healthcheck/*.sh; this workflow only orchestrates | COMMENT |
| MEDIUM | …opBundle/Resources/config/services/bundle/open_api.yml | 122 | # Schema adapter chains - orchestrates adapters in the correct order | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | js/jquery/plugins/autocomplete/jquery.autocomplete.js | 334 | // try to leverage ajaxQueue plugin to abort previous requests | COMMENT |
| MEDIUM⚡ | js/tiny_mce/tinymce.min.js | 2 | !function(V){"use strict";var o=function(){},H=function(n,r){return function(){for(var e=[],t=0;t<arguments.length;t++)e | CODE |
| MEDIUM⚡ | js/tiny_mce/tinymce.min.js | 2 | !function(V){"use strict";var o=function(){},H=function(n,r){return function(){for(var e=[],t=0;t<arguments.length;t++)e | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | config/defines.inc.php | 12 | * Don't forget to disable debug mode in production - produces a significant performance hit. | COMMENT |
| LOW | classes/webservice/WebserviceOutputBuilder.php | 107 | * If this method is overrided don't forget to check required specific params (for xml etc...) | COMMENT |
| LOW | js/tools.js | 120 | // if you modified this function, don't forget to modify the PHP function displayPrice (in the Tools.php class) | COMMENT |
| LOW | .github/workflows/notify_for_autoupgrade_pr_label.yml | 60 | Don't forget to add a comment in this current thread with the link to this PR once it has been created.<br/> | CODE |
| LOW | …-dev/themes/new-theme/js/pages/image-settings/index.ts | 57 | // Don't forget to show the "all" option | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/assets/build.sh | 210 | # Check if asset needs to be built | COMMENT |
| LOW | admin-dev/filemanager/include/php_image_magician.php | 3093 | # Check if a string starts with a specific pattern | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | js/jquery/plugins/jquery.dragtable.js | 44 | //TODO: implement this | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .ai/bin/generate-ai-index.sh | 7 | # Usage: | COMMENT |