Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Coding Standards に取り込みたい、security と performance 関連の sniff #20

Open
8 tasks
waviaei opened this issue Oct 7, 2024 · 0 comments
Open
8 tasks

Coding Standards に取り込みたい、security と performance 関連の sniff #20

waviaei opened this issue Oct 7, 2024 · 0 comments
Assignees
@waviaei
Labels
enhancement New feature or request

Comments

@waviaei
Copy link
Member

waviaei commented Oct 7, 2024 •
edited
Loading

security

  • エスケープ処理がされていない出力の検出
  • $_POST 等の input 処理がサニタイズされていない箇所の検出
  • eval() の検出

performance

  • posts_per_page で極端に大きな数値の検出。200以上？
  • posts_per_page で -1 の検出
  • meta_query の利用の検出
  • orderby rand の検出
  • exclude の検出

Ref
@waviaei waviaei self-assigned this Oct 7, 2024
@waviaei waviaei added the enhancement New feature or request label Oct 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@waviaei waviaei

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@waviaei