janniclas.loosenandClaude Opus 5.5 7d0837be6c fix(security): raw content refuses Divi markup (audit M1) ...

lit/content-create and lit/content-update refuse content containing the
divi/* block delimiters WordPress' block parser accepts or Divi 4
shortcodes, so the builder-only gates (S7/S26) can't be bypassed. Other
block markup stays allowed (normal kses).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-26 19:13:58 +02:00

..

Content

fix(security): raw content refuses Divi markup (audit M1)

2026-09-26 19:13:58 +02:00

Menus

fix: menu rollback survives a throwing delete of a new item (S50)

2026-09-26 18:35:21 +02:00

Render

test: FakeChangeLog and SchemaFixture instead of repeated mocks (T2)

2026-09-26 17:53:54 +02:00

Revisions

test: AssertsToolErrors helper for tool error assertions (T3)

2026-09-26 17:55:35 +02:00

Schema

feat: media usage finder and media-get tool

2026-09-26 01:54:55 +02:00

Settings

test: AssertsToolErrors helper for tool error assertions (T3)

2026-09-26 17:55:35 +02:00

Status

test: AssertsToolErrors helper for tool error assertions (T3)

2026-09-26 17:55:35 +02:00

PostGuardTest.php

test: AssertsToolErrors helper for tool error assertions (T3)

2026-09-26 17:55:35 +02:00

PostRowTest.php

refactor: PostRow::update and PostGuard::assertNoMissedSchedule (M5)

2026-09-26 17:42:33 +02:00

PostSaveFollowUpTest.php

refactor: rename for intent (L3)

2026-09-26 18:32:18 +02:00

RevisionPointTest.php

feat: field validation, term resolution, post guard and revision points

2026-09-25 22:29:15 +02:00

WordPressIntegrationTest.php

test: sort the imports of WordPressIntegrationTest (ledger T9)

2026-09-26 18:36:11 +02:00