WordPress Develop, Git-ified. Synced from git://develop.git.wordpress.org/, including branches and tags! This repository is just a mirror of the WordPress subversion repository. Please include a link to a pre-existing ticket on https://core.trac.wordpress.org/ with every pull request.
This report summarizes scanner evidence for WordPress/wordpress-develop, a PHP project with 3,501 GitHub stars. SynthScan examined 1,623,145 lines of code across 4987 source files, recording 749 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 0.7 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 388 finding(s).
Are imports declared and package/API names verified? 339 finding(s).
Are wrappers, guards, and repeated structures necessary? 198 finding(s).
Which changes need focused human review? 749 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 749 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | wp-tests-config-sample.php | 65 | define( 'WP_TESTS_EMAIL', 'admin@example.org' ); | CODE |
| LOW | tests/gutenberg/.wp-env.sample.json | 10 | "WP_TESTS_EMAIL": "admin@example.org", | CODE |
| LOW | tests/phpunit/tests/functions.php | 942 | $blob = 'Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor | CODE |
| LOW | tests/phpunit/tests/functions.php | 942 | $blob = 'Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor | CODE |
| LOW | tests/phpunit/tests/functions.php | 956 | $blob = 'Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor | CODE |
| LOW | tests/phpunit/tests/functions.php | 956 | $blob = 'Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor | CODE |
| LOW | tests/phpunit/tests/auth.php | 1679 | $error = wp_authenticate_application_password( null, 'idonotexist@example.org', 'password' ); | CODE |
| LOW | tests/phpunit/tests/kses.php | 800 | 'comment_author_email' => 'admin@example.org', | CODE |
| LOW | tests/phpunit/tests/cache.php | 154 | $fake_key = 'my-fake-key'; | CODE |
| LOW⚡ | tests/phpunit/tests/cache.php | 165 | $this->assertFalse( wp_cache_replace( $fake_key, $val1 ) ); | CODE |
| LOW⚡ | tests/phpunit/tests/cache.php | 167 | // Make sure $fake_key is not stored. | COMMENT |
| LOW⚡ | tests/phpunit/tests/cache.php | 168 | $this->assertFalse( wp_cache_get( $fake_key ) ); | CODE |
| LOW | tests/phpunit/tests/user.php | 29 | 'display_name' => 'John Doe', | CODE |
| LOW | tests/phpunit/tests/user.php | 1514 | 'user_email' => 'user_empty_data@example.org', | CODE |
| LOW | tests/phpunit/tests/user.php | 2629 | 'user_email' => 'user@example.com', | CODE |
| LOW | tests/phpunit/tests/user.php | 2644 | 'user_email' => 'user@example.com', | CODE |
| LOW | tests/phpunit/tests/db.php | 702 | 'admin@example.org', | CODE |
| LOW | tests/phpunit/tests/db.php | 708 | 'admin@example.org', | CODE |
| LOW⚡ | tests/phpunit/tests/adminbar.php | 924 | 'display_name' => 'John Doe', | CODE |
| LOW⚡ | tests/phpunit/tests/adminbar.php | 934 | $this->assertSame( 'John Doe', wp_strip_all_tags( $node_my_account->title ) ); | CODE |
| LOW⚡ | tests/phpunit/tests/adminbar.php | 935 | $this->assertSame( 'John Doe', $node_my_account->meta['menu_title'] ); | CODE |
| LOW | tests/phpunit/tests/l10n.php | 16 | private $long_text = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labo | CODE |
| LOW | tests/phpunit/tests/l10n.php | 16 | private $long_text = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labo | CODE |
| LOW | tests/phpunit/tests/l10n.php | 175 | $expect = "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et d | CODE |
| LOW | tests/phpunit/tests/l10n.php | 175 | $expect = "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et d | CODE |
| LOW | tests/phpunit/tests/l10n.php | 201 | $expect = "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et d | CODE |
| LOW | tests/phpunit/tests/l10n.php | 201 | $expect = "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et d | CODE |
| LOW | tests/phpunit/tests/l10n.php | 253 | $expect = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolo | CODE |
| LOW | tests/phpunit/tests/l10n.php | 253 | $expect = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolo | CODE |
| LOW | tests/phpunit/tests/l10n.php | 279 | $expect = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolo | CODE |
| LOW | tests/phpunit/tests/l10n.php | 279 | $expect = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolo | CODE |
| LOW | tests/phpunit/tests/l10n.php | 319 | $expect = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do…'; | CODE |
| LOW | tests/phpunit/tests/l10n.php | 319 | $expect = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do…'; | CODE |
| LOW | tests/phpunit/tests/l10n.php | 358 | $expect = 'Lorem ipsum dolor sit amet, consectetur …'; | CODE |
| LOW | tests/phpunit/tests/l10n.php | 358 | $expect = 'Lorem ipsum dolor sit amet, consectetur …'; | CODE |
| LOW | tests/phpunit/tests/l10n.php | 417 | $expect = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labor | CODE |
| LOW | tests/phpunit/tests/l10n.php | 417 | $expect = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labor | CODE |
| LOW | tests/phpunit/tests/l10n.php | 437 | $expect = 'Lorem ipsum dolor sit amet, consectetur …'; | CODE |
| LOW | tests/phpunit/tests/l10n.php | 437 | $expect = 'Lorem ipsum dolor sit amet, consectetur …'; | CODE |
| LOW | tests/phpunit/tests/blocks/renderCommentTemplate.php | 73 | 'comment_author_email' => 'test@example.org', | CODE |
| LOW | tests/phpunit/tests/blocks/renderCommentTemplate.php | 243 | 'comment_author_email' => 'test@example.org', | CODE |
| LOW | tests/phpunit/tests/blocks/renderCommentTemplate.php | 303 | 'comment_author_email' => 'test@example.org', | CODE |
| LOW | tests/phpunit/tests/blocks/renderCommentTemplate.php | 315 | 'comment_author_email' => 'test@example.org', | CODE |
| LOW | tests/phpunit/tests/blocks/renderCommentTemplate.php | 446 | 'comment_author_email' => 'unapproved@example.org', | CODE |
| LOW | tests/phpunit/tests/blocks/renderCommentTemplate.php | 458 | 'include_unapproved' => array( 'unapproved@example.org' ), | CODE |
| LOW | tests/phpunit/tests/blocks/renderCommentTemplate.php | 483 | 'comment_author_email' => 'unapproved@example.org', | CODE |
| LOW | tests/phpunit/tests/blocks/renderCommentTemplate.php | 499 | 'comment_author_email' => 'unapproved@example.org', | CODE |
| LOW | tests/phpunit/tests/oembed/getOembedResponseData.php | 76 | 'display_name' => 'John Doe', | CODE |
| LOW | tests/phpunit/tests/oembed/getOembedResponseData.php | 94 | 'author_name' => 'John Doe', | CODE |
| LOW | tests/phpunit/tests/oembed/template.php | 37 | 'display_name' => 'John Doe', | CODE |
| LOW | …ts/phpunit/tests/comment/getCommentAuthorEmailLink.php | 29 | 'comment_author_email' => 'foo@example.org', | CODE |
| LOW | …ts/phpunit/tests/comment/getCommentAuthorEmailLink.php | 35 | $expected = '<a href="mailto:foo@example.org">foo@example.org</a>'; | CODE |
| LOW | …ts/phpunit/tests/comment/getCommentAuthorEmailLink.php | 51 | 'comment_author_email' => $email = 'baz@example.org', | CODE |
| LOW⚡ | …ts/phpunit/tests/comment/getCommentAuthorEmailLink.php | 65 | $expected = sprintf( '%1$s<a href="mailto:foo@example.org">%2$s</a>%3$s', $before, $linktext, $after ); | CODE |
| LOW⚡ | …ts/phpunit/tests/comment/getCommentAuthorEmailLink.php | 71 | $expected = sprintf( '<a href="mailto:foo@example.org">%1$s</a>', $linktext = 'linktext' ); | CODE |
| LOW⚡ | …ts/phpunit/tests/comment/getCommentAuthorEmailLink.php | 77 | $expected = sprintf( '%1$s<a href="mailto:foo@example.org">foo@example.org</a>', $before = 'before' ); | CODE |
| LOW⚡ | …ts/phpunit/tests/comment/getCommentAuthorEmailLink.php | 83 | $expected = sprintf( '<a href="mailto:foo@example.org">foo@example.org</a>%1$s', $after = 'after' ); | CODE |
| LOW | …ts/phpunit/tests/comment/getCommentAuthorEmailLink.php | 94 | 'comment_author_email' => $email = 'bar@example.org', | CODE |
| LOW | …ts/phpunit/tests/comment/wpHandleCommentSubmission.php | 222 | 'email' => 'comment@example.org', | CODE |
| LOW | …ts/phpunit/tests/comment/wpHandleCommentSubmission.php | 260 | 'email' => 'comment@example.org', | CODE |
| 247 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …sts/e2e/specs/media-library-client-side-upload.test.js | 754 | window.wp.media.frame.uploader.uploader.uploader.setOption( | CODE |
| CRITICAL | src/js/_enqueues/wp/revisions.js | 555 | wp.Backbone.View.prototype.render.apply( this, arguments ); | CODE |
| CRITICAL | src/js/_enqueues/wp/revisions.js | 855 | wp.Backbone.View.prototype.render.apply( this, arguments ); | CODE |
| CRITICAL | src/js/_enqueues/wp/api.js | 983 | wp.api.WPApiBaseModel.prototype.initialize.call( model, attributes, options ); | CODE |
| CRITICAL | src/js/_enqueues/wp/widgets/media.js | 54 | wp.media.controller.Library.prototype.initialize.call( this, options ); | CODE |
| CRITICAL | src/js/_enqueues/wp/widgets/media.js | 80 | display = wp.media.controller.Library.prototype.display.call( this, model ); | CODE |
| CRITICAL | src/js/_enqueues/wp/widgets/media.js | 110 | wp.media.view.Embed.prototype.initialize.call( view, options ); | CODE |
| CRITICAL | src/js/_enqueues/wp/widgets/media.js | 144 | this.views.parent.views.parent.views.get( '.media-frame-toolbar' )[0].$el.find( '.media-button-select' ).prop( 'di | CODE |
| CRITICAL | src/js/_enqueues/wp/widgets/media.js | 199 | wp.media.view.EmbedLink.prototype.updateoEmbed.call( embedLinkView ); | CODE |
| CRITICAL | src/js/_enqueues/wp/widgets/media.js | 306 | component.MediaFrameSelect = wp.media.view.MediaFrame.Post.extend(/** @lends wp.mediaWidgets.MediaFrameSelect.prototype | CODE |
| CRITICAL | src/js/_enqueues/wp/widgets/media-gallery.js | 18 | GalleryDetailsMediaFrame = wp.media.view.MediaFrame.Post.extend(/** @lends wp.mediaWidgets~GalleryDetailsMediaFrame.pro | CODE |
| CRITICAL | src/js/_enqueues/wp/widgets/media-audio.js | 17 | AudioDetailsMediaFrame = wp.media.view.MediaFrame.AudioDetails.extend(/** @lends wp.mediaWidgets.controlConstructors~Au | CODE |
| CRITICAL | src/js/_enqueues/wp/widgets/media-video.js | 19 | VideoDetailsMediaFrame = wp.media.view.MediaFrame.VideoDetails.extend(/** @lends wp.mediaWidgets.controlConstructors~Vi | CODE |
| CRITICAL | src/js/_enqueues/wp/customize/preview-nav-menus.js | 134 | api.selectiveRefresh.Partial.prototype.initialize.call( partial, id, options ); | CODE |
| CRITICAL | src/js/_enqueues/wp/customize/preview-nav-menus.js | 244 | return api.selectiveRefresh.Partial.prototype.refresh.call( partial ); | CODE |
| CRITICAL | src/js/_enqueues/wp/customize/preview-nav-menus.js | 261 | if ( api.selectiveRefresh.Partial.prototype.renderContent.call( partial, placement ) ) { | CODE |
| CRITICAL | src/js/_enqueues/wp/customize/preview-widgets.js | 118 | api.selectiveRefresh.Partial.prototype.initialize.call( partial, id, options ); | CODE |
| CRITICAL | src/js/_enqueues/wp/customize/preview-widgets.js | 136 | return api.selectiveRefresh.Partial.prototype.refresh.call( partial ); | CODE |
| CRITICAL | src/js/_enqueues/wp/customize/preview-widgets.js | 151 | if ( api.selectiveRefresh.Partial.prototype.renderContent.call( partial, placement ) ) { | CODE |
| CRITICAL | src/js/_enqueues/wp/customize/preview-widgets.js | 191 | api.selectiveRefresh.Partial.prototype.initialize.call( partial, id, options ); | CODE |
| CRITICAL | src/js/_enqueues/wp/customize/models.js | 352 | api.HeaderTool.ChoiceList.prototype.initialize.apply(this); | CODE |
| CRITICAL | src/js/_enqueues/wp/customize/nav-menus.js | 360 | wp.a11y.speak( api.Menus.data.l10n.itemsFoundMore.replace( '%d', items.length ) ); | CODE |
| CRITICAL | src/js/_enqueues/wp/customize/nav-menus.js | 362 | wp.a11y.speak( api.Menus.data.l10n.itemsFound.replace( '%d', items.length ) ); | CODE |
| CRITICAL | src/js/_enqueues/wp/customize/nav-menus.js | 1170 | $label.text( api.Menus.data.l10n.menuLocation.replace( '%s', locationName ) ); | CODE |
| CRITICAL | src/js/_enqueues/wp/customize/nav-menus.js | 2036 | titleText = api.Menus.data.l10n.invalidTitleTpl.replace( '%s', titleText ); | CODE |
| CRITICAL | src/js/_enqueues/wp/customize/nav-menus.js | 2093 | control.params.title = api.Menus.data.l10n.invalidTitleTpl.replace( '%s', control.params.title ); | CODE |
| CRITICAL | src/js/media/routers/manage.js | 63 | wp.media.frames.edit.content.mode( 'edit-details' ); | CODE |
| CRITICAL | src/js/media/views/view.js | 73 | return wp.Backbone.View.prototype.remove.apply( this, arguments ); | CODE |
| CRITICAL | src/js/media/views/uploader/editor.js | 185 | this.workflow.uploader.uploader.uploader.addFile( _.toArray( this.files ) ); | CODE |
| CRITICAL | src/js/media/views/attachment/edit-selection.js | 13 | var EditSelection = wp.media.view.Attachment.Selection.extend(/** @lends wp.media.view.Attachment.EditSelection.prototyp | CODE |
| CRITICAL | src/js/media/views/frame/manage.js | 76 | this.gridRouter = new wp.media.view.MediaFrame.Manage.Router(); | CODE |
| CRITICAL | src/js/media/views/frame/edit-attachments.js | 153 | contentRegion.view = new wp.media.view.Attachment.Details.TwoColumn({ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/gutenberg/copy.js | 113 | function readReturnedValueFromPHPFile( phpFilepath ) { | CODE |
| LOW | tools/gutenberg/copy.js | 386 | function generateScriptModulesPackages() { | CODE |
| LOW | tools/gutenberg/copy.js | 460 | function generateScriptLoaderPackages() { | CODE |
| LOW | tools/gutenberg/copy.js | 531 | function generateBlockRegistrationFiles() { | CODE |
| LOW | tests/phpunit/tests/dependencies/scripts.php | 89 | private function assertEqualHTMLScriptTagById( string $expected, string $html, string $message = 'The SCRIPT tag did no | CODE |
| LOW | …unit/tests/abilities-api/wpAbilityCategoryRegistry.php | 72 | private function assertDoingItWrongTriggered( string $the_method, ?string $message_contains = null ): void { | CODE |
| LOW | tests/phpunit/tests/image/base.php | 44 | protected function assertImageAlphaAtPointGD( $image_path, $point, $alpha ) { | CODE |
| LOW | tests/phpunit/tests/image/base.php | 60 | protected function assertImageAlphaAtPointImagick( $image_path, $point, $expected ) { | CODE |
| LOW | tests/phpunit/tests/hooks/buildUniqueId.php | 116 | private function assertIsNonDecimalIntString( $value ): void { | CODE |
| LOW | tests/phpunit/tests/query/randomContentRedirect.php | 284 | protected function assertQueryIsNotRandomized( WP_Query $query, string $message ): void { | CODE |
| LOW | …t/tests/rest-api/rest-pattern-directory-controller.php | 83 | public function assertPatternMatchesSchema( $pattern ) { | CODE |
| LOW | …it/includes/wp-ai-client-mock-model-creation-trait.php | 397 | public function convertTextToSpeechResult( array $prompt ): GenerativeAiResult { // phpcs:ignore Generic.CodeAnalysis | CODE |
| LOW | tests/phpunit/includes/abstract-testcase.php | 882 | public function setExpectedIncorrectUsage( $doing_it_wrong ) { | CODE |
| LOW | tests/phpunit/includes/abstract-testcase.php | 1280 | public function assertNonEmptyMultidimensionalArray( $actual, $message = '' ) { | CODE |
| LOW | tests/phpunit/includes/abstract-testcase.php | 1301 | public function assertSamePathIgnoringDirectorySeparators( $path_a, $path_b ) { | CODE |
| LOW | tests/phpunit/includes/abstract-testcase.php | 1316 | public function normalizeDirectorySeparatorsInPath( $path ) { | CODE |
| LOW | …/phpunit/includes/wp-ai-client-mock-provider-trait.php | 112 | protected static function createProviderAvailability(): ProviderAvailabilityInterface { | CODE |
| LOW | …/phpunit/includes/wp-ai-client-mock-provider-trait.php | 121 | protected static function createModelMetadataDirectory(): ModelMetadataDirectoryInterface { | CODE |
| LOW | …punit/includes/secrets/trait-wp-secrets-assertions.php | 56 | public function assertRecordSlotDecryptsTo( $name, $slot, $expected, $network = false ): void { // phpcs:ignore WordPre | CODE |
| LOW | …punit/includes/secrets/trait-wp-secrets-assertions.php | 73 | public function assertNeverContainsPlaintext( $plaintext, $haystack, $message = '' ): void { // phpcs:ignore WordPress. | CODE |
| LOW | src/js/_enqueues/admin/site-health.js | 357 | function addFailedSiteHealthCheckNotice( url, description ) { | CODE |
| LOW | src/js/_enqueues/admin/site-icon.js | 29 | function calculateImageSelectOptions( attachment ) { | CODE |
| LOW | src/js/_enqueues/admin/user-profile.js | 448 | function showOrHideWeakPasswordCheckbox() { | CODE |
| LOW | src/js/_enqueues/admin/common.js | 743 | function changeStructureTagButtonState( button ) { | CODE |
| LOW | src/js/_enqueues/wp/editor/base.js | 340 | function getShortCodePositionsInText( content ) { | CODE |
| LOW | src/js/_enqueues/wp/editor/base.js | 436 | function adjustTextAreaSelectionCursors( content, cursorPositions ) { | CODE |
| LOW | src/js/_enqueues/wp/editor/base.js | 514 | function addHTMLBookmarkInTextAreaContent( $textarea ) { | CODE |
| LOW | src/js/_enqueues/wp/editor/base.js | 565 | function focusHTMLBookmarkInVisualEditor( editor ) { | CODE |
| LOW | src/js/_enqueues/wp/editor/base.js | 626 | function scrollVisualModeToStartElement( editor, element ) { | CODE |
| LOW | src/js/_enqueues/wp/widgets/media.js | 63 | handleDisplaySettingChange: function handleDisplaySettingChange( displaySettings ) { | CODE |
| LOW | src/js/_enqueues/wp/widgets/media.js | 143 | setAddToWidgetButtonDisabled: function setAddToWidgetButtonDisabled( disabled ) { | CODE |
| LOW | src/js/_enqueues/wp/widgets/media.js | 727 | handleMediaLibraryLinkClick: function handleMediaLibraryLinkClick( event ) { | CODE |
| LOW | src/js/_enqueues/wp/widgets/media.js | 825 | getModelPropsFromMediaFrame: function getModelPropsFromMediaFrame( mediaFrame ) { | CODE |
| LOW | src/js/_enqueues/wp/widgets/media.js | 925 | mapModelToMediaFrameProps: function mapModelToMediaFrameProps( modelProps ) { | CODE |
| LOW | src/js/_enqueues/wp/widgets/media.js | 949 | mapModelToPreviewTemplateProps: function mapModelToPreviewTemplateProps() { | CODE |
| LOW | src/js/_enqueues/wp/widgets/media.js | 1313 | $( function initializeExistingWidgetContainers() { | CODE |
| LOW | src/js/_enqueues/wp/widgets/media-gallery.js | 127 | updateSelectedAttachments: function updateSelectedAttachments() { | CODE |
| LOW | src/js/_enqueues/wp/widgets/custom-html.js | 439 | $( function initializeExistingWidgetContainers() { | CODE |
| LOW | src/js/_enqueues/wp/widgets/media-audio.js | 75 | mapModelToMediaFrameProps: function mapModelToMediaFrameProps( modelProps ) { | CODE |
| LOW | src/js/_enqueues/wp/widgets/text.js | 127 | openAvailableWidgetsPanel: function openAvailableWidgetsPanel() { | CODE |
| LOW | src/js/_enqueues/wp/widgets/text.js | 535 | $( function initializeExistingWidgetContainers() { | CODE |
| LOW | src/js/_enqueues/wp/widgets/media-image.js | 143 | getModelPropsFromMediaFrame: function getModelPropsFromMediaFrame( mediaFrame ) { | CODE |
| LOW | src/js/_enqueues/wp/widgets/media-image.js | 156 | mapModelToPreviewTemplateProps: function mapModelToPreviewTemplateProps() { | CODE |
| LOW | src/js/_enqueues/wp/widgets/media-video.js | 93 | mapModelToMediaFrameProps: function mapModelToMediaFrameProps( modelProps ) { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 18 | reducedMotionMediaQuery.addEventListener( 'change' , function handleReducedMotionChange( event ) { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 490 | api.bind( 'change', function incrementChangedSettingRevision( setting ) { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 495 | api.bind( 'add', function incrementCreatedSettingRevision( setting ) { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 634 | request.done( function requestChangesetUpdateDone( data ) { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 659 | request.fail( function requestChangesetUpdateFail( data ) { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 3166 | function toggleDisabledNotifications() { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 4328 | function setAttachmentDataAndRenderContent( value ) { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 6047 | toggleFutureDateNotification: function toggleFutureDateNotification( notify ) { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 7400 | function cancelHighlightScheduleButton() { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 7646 | function captureSettingModifiedDuringSave( setting ) { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 8065 | api.bind( 'ready', function setUpGlobalNotificationsArea() { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 8269 | ( function checkAndDisplayLockNotice() { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 8449 | function getAutosaveRestorationUrl() { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 8496 | function addSiteEditorNotification( notification ) { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 8539 | function addAutosaveRestoreNotification() { | CODE |
| LOW | src/js/_enqueues/wp/customize/controls.js | 9032 | function startPromptingBeforeUnload() { | CODE |
| 116 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/php-ai-client/installer.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/phpstan/generate-baselines.php | 741 | * @param non-falsy-string $identifier Error identifier, a group followed by a code. | COMMENT |
| LOW | tests/phpunit/tests/formatting/balanceTags.php | 81 | return array( | COMMENT |
| LOW | tests/phpunit/data/unicode/utf8tests/utf8tests.txt | 1 | # == UTF-8 Test Cases == | COMMENT |
| LOW | tests/phpunit/data/unicode/utf8tests/utf8tests.txt | 21 | # * The replacment character is U+FFFD <EFBFBD>. | COMMENT |
| LOW | tests/phpunit/data/unicode/utf8tests/utf8tests.txt | 41 | # num:valid:bytes | COMMENT |
| LOW | tests/phpunit/data/unicode/utf8tests/utf8tests.txt | 461 | COMMENT | |
| LOW | tests/phpunit/data/unicode/utf8tests/utf8tests.txt | 741 | # The 36 numbered tests are designed so you can manually validate | COMMENT |
| LOW | .github/workflows/reusable-coding-standards-php.yml | 21 | COMMENT | |
| LOW | .github/workflows/reusable-test-core-build-process.yml | 41 | COMMENT | |
| LOW | .github/workflows/reusable-workflow-lint.yml | 1 | ## | COMMENT |
| LOW | .github/workflows/reusable-workflow-lint.yml | 41 | # Runs the Zizmor GitHub Action workflow file linter. | COMMENT |
| LOW | .github/workflows/reusable-performance-test-v2.yml | 81 | # - Checkout repository. | COMMENT |
| LOW | .github/workflows/reusable-cleanup-pull-requests.yml | 1 | ## | COMMENT |
| LOW | .github/workflows/reusable-phpunit-tests-v1.yml | 81 | COMMENT | |
| LOW | .github/workflows/slack-notifications.yml | 41 | jobs: | COMMENT |
| LOW | …orkflows/reusable-test-local-docker-environment-v1.yml | 61 | # - Sets up PHP. | COMMENT |
| LOW | .github/workflows/reusable-phpunit-tests-v2.yml | 81 | PUPPETEER_SKIP_DOWNLOAD: true | COMMENT |
| LOW | .github/workflows/reusable-php-compatibility.yml | 21 | jobs: | COMMENT |
| LOW | .github/workflows/reusable-phpunit-tests-v3.yml | 121 | PHPUNIT_CONFIG: ${{ inputs.phpunit-config }} | COMMENT |
| LOW | .github/workflows/reusable-phpunit-tests-v3.yml | 141 | # - Logs general debug information about the runner. | COMMENT |
| LOW | …hub/workflows/reusable-javascript-type-checking-v1.yml | 1 | ## | COMMENT |
| LOW | .github/workflows/reusable-upgrade-testing.yml | 41 | # Any needed permissions should be configured at the job level. | COMMENT |
| LOW | .github/workflows/phpstan-pull-request-comments.yml | 1 | # Keeps a comment on a pull request up to date with the errors reported by PHPStan. | COMMENT |
| LOW | .github/workflows/upgrade-testing.yml | 41 | permissions: {} | COMMENT |
| LOW | .github/workflows/upgrade-testing.yml | 61 | # - 5.7.x accounts for ~20% of installs, so this is used below instead. | COMMENT |
| LOW | .github/workflows/reusable-end-to-end-tests.yml | 41 | env: | COMMENT |
| LOW | …thub/workflows/reusable-phpstan-static-analysis-v1.yml | 21 | jobs: | COMMENT |
| LOW | …thub/workflows/reusable-phpstan-static-analysis-v1.yml | 81 | # changing the file: a parser node visitor rewrites a docblock in the syntax tree, and the bytes | COMMENT |
| LOW | …thub/workflows/reusable-phpstan-static-analysis-v1.yml | 201 | } | COMMENT |
| LOW | …thub/workflows/reusable-phpstan-static-analysis-v1.yml | 241 | if [ "${unignorable}" -eq 0 ]; then | COMMENT |
| LOW | .github/workflows/reusable-build-package.yml | 1 | ## | COMMENT |
| LOW | …ub/workflows/reusable-test-gutenberg-build-process.yml | 41 | # Performs the following steps: | COMMENT |
| LOW | src/wp-admin/css/colors/_admin.scss | 401 | COMMENT | |
| LOW | src/wp-admin/css/colors/_admin.scss | 441 | #wpadminbar .quicklinks .menupop ul li a, | COMMENT |
| LOW | src/wp-admin/css/colors/_admin.scss | 461 | #wpadminbar li:hover .ab-icon, | COMMENT |
| LOW | src/wp-admin/css/colors/_tokens.scss | 1 | // ========================================================================== | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 1 | <?php | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 21 | // this software the author can not be responsible. | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 41 | //define( 'PCLZIP_SEPARATOR', ' ' ); | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 61 | // - MUST be a valid, already created directory | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 81 | // -------------------------------------------------------------------------------- | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 181 | // Attributes : | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 201 | COMMENT | |
| LOW | src/wp-admin/includes/class-pclzip.php | 241 | // create($p_filelist, $p_option, $p_option_value, ...) | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 261 | // When $p_add_dir and $p_remove_dir are set, $p_remove_dir | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 421 | // -------------------------------------------------------------------------------- | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 441 | // in order to have a shorter path memorized in the archive. | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 601 | // ----- Return | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 621 | // folder : true | false | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 661 | if (($v_result = $this->privList($p_list)) != 1) | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 681 | // you can indicate this in the optional $p_remove_path parameter. | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 821 | // -------------------------------------------------------------------------------- | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 841 | // $p_remove_path : First part ('root' part) of the memorized path | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 981 | COMMENT | |
| LOW | src/wp-admin/includes/class-pclzip.php | 1001 | // PCLZIP_OPT_BY_INDEX : | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 1061 | // -------------------------------------------------------------------------------- | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 1081 | // Description : | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 1201 | // ----- Error log | COMMENT |
| LOW | src/wp-admin/includes/class-pclzip.php | 1361 | COMMENT | |
| 104 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | tools/php-ai-client/installer.sh | 15 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/php-ai-client/installer.sh | 17 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/php-ai-client/installer.sh | 26 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/php-ai-client/installer.sh | 28 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/php-ai-client/installer.sh | 92 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/php-ai-client/installer.sh | 94 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/php-ai-client/installer.sh | 101 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/php-ai-client/installer.sh | 103 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/php-ai-client/installer.sh | 126 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/php-ai-client/installer.sh | 128 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/php-ai-client/installer.sh | 135 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/php-ai-client/installer.sh | 137 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/php-ai-client/installer.sh | 69 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/php-ai-client/installer.sh | 71 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/php-ai-client/installer.sh | 160 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/php-ai-client/installer.sh | 162 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/php-ai-client/installer.sh | 174 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/php-ai-client/installer.sh | 176 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/php-ai-client/installer.sh | 231 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/php-ai-client/installer.sh | 233 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/php-ai-client/installer.sh | 287 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/php-ai-client/installer.sh | 289 | # --------------------------------------------------------------------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/gutenberg/download.js | 362 | // Step 1: Get an anonymous GHCR token for pulling. | COMMENT |
| LOW | tools/gutenberg/download.js | 373 | // Step 2: Resolve the manifest to use for download. | COMMENT |
| LOW | tools/gutenberg/download.js | 397 | // Step 3: Download and verify the compressed blob before extraction. | COMMENT |
| LOW | src/wp-includes/blocks.php | 1226 | // The block doesn't allow multiple instances, so we need to check if it's already present. | COMMENT |
| LOW | src/wp-includes/abilities-api.php | 621 | // Step 2: Caller-scoped per-item callback. | COMMENT |
| LOW | src/wp-includes/abilities-api.php | 647 | // Step 4: Caller-scoped result callback. | COMMENT |
| LOW | …-client/src/Providers/Models/DTO/ModelRequirements.php | 189 | // Step 6: Return new ModelRequirements | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 86 | // Step 1: Check if the text is already ASCII | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 96 | // Step 2: nameprep | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 99 | // Step 3: UseSTD3ASCIIRules is false, continue | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 100 | // Step 4: Check if it's ASCII now | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 116 | // Step 5: Check ACE prefix | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 121 | // Step 6: Encode with Punycode | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 124 | // Step 7: Prepend ACE prefix | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 127 | // Step 8: Check size | COMMENT |
| LOW⚡ | src/wp-content/themes/twentytwenty/assets/js/index.js | 797 | // Step 1: look at the initial positions of every menu item. | COMMENT |
| LOW⚡ | src/wp-content/themes/twentytwenty/assets/js/index.js | 807 | // Step 2: toggle target menu item and look at the final positions of every menu item. | COMMENT |
| LOW⚡ | src/wp-content/themes/twentytwenty/assets/js/index.js | 815 | // Step 3: close target menu item again. | COMMENT |
| LOW | src/wp-content/themes/twentytwenty/assets/js/index.js | 863 | // Step 6: finish toggling. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/gutenberg/download.js | 362 | // Step 1: Get an anonymous GHCR token for pulling. | COMMENT |
| LOW | tools/gutenberg/download.js | 373 | // Step 2: Resolve the manifest to use for download. | COMMENT |
| LOW | tools/gutenberg/download.js | 397 | // Step 3: Download and verify the compressed blob before extraction. | COMMENT |
| LOW | src/wp-includes/abilities-api.php | 621 | // Step 2: Caller-scoped per-item callback. | COMMENT |
| LOW | src/wp-includes/abilities-api.php | 647 | // Step 4: Caller-scoped result callback. | COMMENT |
| LOW | …-client/src/Providers/Models/DTO/ModelRequirements.php | 189 | // Step 6: Return new ModelRequirements | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 86 | // Step 1: Check if the text is already ASCII | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 96 | // Step 2: nameprep | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 99 | // Step 3: UseSTD3ASCIIRules is false, continue | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 100 | // Step 4: Check if it's ASCII now | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 116 | // Step 5: Check ACE prefix | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 121 | // Step 6: Encode with Punycode | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 124 | // Step 7: Prepend ACE prefix | COMMENT |
| LOW⚡ | src/wp-includes/Requests/src/IdnaEncoder.php | 127 | // Step 8: Check size | COMMENT |
| LOW⚡ | src/wp-content/themes/twentytwenty/assets/js/index.js | 797 | // Step 1: look at the initial positions of every menu item. | COMMENT |
| LOW⚡ | src/wp-content/themes/twentytwenty/assets/js/index.js | 807 | // Step 2: toggle target menu item and look at the final positions of every menu item. | COMMENT |
| LOW⚡ | src/wp-content/themes/twentytwenty/assets/js/index.js | 815 | // Step 3: close target menu item again. | COMMENT |
| LOW | src/wp-content/themes/twentytwenty/assets/js/index.js | 863 | // Step 6: finish toggling. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/phpunit/tests/feed/rss2.php | 98 | // Nasty hack! In the future it would better to leverage do_feed( 'rss2' ). | COMMENT |
| MEDIUM | tests/phpunit/tests/feed/atom.php | 83 | // Nasty hack! In the future it would better to leverage do_feed( 'atom' ). | COMMENT |
| MEDIUM | src/js/_enqueues/wp/customize/controls.js | 6955 | // This event will be received directly by the previewer in normal navigation; this is only needed for seamless refr | COMMENT |
| MEDIUM | src/wp-includes/post.php | 3609 | // Optimized query uses subqueries which can leverage DB indexes for better performance. See #61097. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/wp-admin/export.php | 178 | <p><?php _e( 'Once you’ve saved the download file, you can use the Import function in another WordPress installati | CODE |
| LOW | src/wp-admin/freedoms.php | 98 | __( 'Every plugin and theme in WordPress.org’s directory is 100%% GPL or a similarly free and compatible licen | CODE |
| LOW | src/wp-includes/functions.php | 4531 | // Don't forget to sanitize the ID! | COMMENT |
| MEDIUM | src/wp-includes/theme-compat/sidebar.php | 95 | __( 'You have searched the %1$s blog archives for <strong>‘%2$s’</strong>. If you are unable to find a | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/phpunit/tests/pomo/po.php | 412 | // TODO: Add tests for bad files. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/wp-includes/rss.php | 63 | # Check if PHP xml isn't compiled | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tools/php-ai-client/installer.sh | 8 | # Usage: | COMMENT |