janniclas.loosenandClaude Opus 5.5
b24eb6c3e9
Every file under src/ exits outside WordPress (defined('ABSPATH') ||
exit; after the use block, so a direct request no longer prints a fatal
error with the server path); divi-convert-fixture.php gets the WP_CLI
guard the other integration scripts have. A unit test keeps both true;
PSR1 side-effects warning excluded for the guard.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01At3V6SjwbMe6eMzVGW3Hs7
30 lines
1.1 KiB
XML
30 lines
1.1 KiB
XML
<?xml version="1.0"?>
|
|
<ruleset name="wp-lit-mcp">
|
|
<file>src</file>
|
|
<file>wp-lit-mcp.php</file>
|
|
<file>uninstall.php</file>
|
|
<exclude-pattern>/vendor/*</exclude-pattern>
|
|
<arg value="sp"/>
|
|
<arg name="extensions" value="php"/>
|
|
<arg name="basepath" value="."/>
|
|
<rule ref="PSR12">
|
|
<!-- Every file starts with defined('ABSPATH') || exit; (no direct HTTP access, security audit L2). -->
|
|
<exclude name="PSR1.Files.SideEffects.FoundWithSymbols"/>
|
|
</rule>
|
|
<rule ref="WordPress.Security">
|
|
<exclude name="WordPress.Security.EscapeOutput.ExceptionNotEscaped"/>
|
|
</rule>
|
|
<rule ref="WordPress.DB.PreparedSQL"/>
|
|
<rule ref="WordPress.DB.PreparedSQLPlaceholders"/>
|
|
<rule ref="WordPress.WP.AlternativeFunctions"/>
|
|
<rule ref="WordPress.WP.I18n">
|
|
<properties>
|
|
<property name="text_domain" type="array">
|
|
<element value="wp-lit-mcp"/>
|
|
</property>
|
|
</properties>
|
|
</rule>
|
|
<rule ref="PHPCompatibilityWP"/>
|
|
<config name="testVersion" value="8.1-"/>
|
|
</ruleset>
|