janniclas.loosenandClaude Opus 5.5 b24eb6c3e9 fix(security): no direct HTTP access to plugin PHP files (audit L2, cheap part) ...

Every file under src/ exits outside WordPress (defined('ABSPATH') ||
exit; after the use block, so a direct request no longer prints a fatal
error with the server path); divi-convert-fixture.php gets the WP_CLI
guard the other integration scripts have. A unit test keeps both true;
PSR1 side-effects warning excluded for the guard.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01At3V6SjwbMe6eMzVGW3Hs7

2026-09-26 19:32:12 +02:00

..

Abilities

fix(security): content-create divi follows the Divi group switches (audit M2)

2026-09-26 19:16:35 +02:00

Admin

feat: Protokoll tab as a core-style list table

2026-09-26 19:02:47 +02:00

ChangeLog

feat: change log tab with filters, revision links and clear button

2026-09-26 04:12:13 +02:00

Guides

refactor: DiviWriteAbility base and shared DiviErrors (H4)

2026-09-26 18:22:51 +02:00

Integrations

fix(security): honour Pods field restrictions (audit M4)

2026-09-26 19:29:29 +02:00

Server

fix(security): refuse OAuth authorize/consent for users without access (audit L1)

2026-09-26 19:30:54 +02:00

Support

test: AssertsToolErrors helper for tool error assertions (T3)

2026-09-26 17:55:35 +02:00

AccessTest.php

fix: guard allowedRoles() against corrupt filtered results

2026-09-25 15:23:56 +02:00

DependenciesTest.php

feat: plugin scaffold with dependency check

2026-09-25 15:13:57 +02:00

DirectAccessGuardTest.php

fix(security): no direct HTTP access to plugin PHP files (audit L2, cheap part)

2026-09-26 19:32:12 +02:00

LifecycleTest.php

feat: clean up own data on deactivation and uninstall

2026-09-26 04:21:23 +02:00

LimitsTest.php

fix: cap Base64 media transfers at 10 MB, upload limit at most 32 MB

2026-09-26 05:04:38 +02:00

LogTest.php

refactor: one logging helper LIT\MCP\Log (M6)

2026-09-26 17:36:01 +02:00

TestCase.php

test: AssertsToolErrors helper for tool error assertions (T3)

2026-09-26 17:55:35 +02:00

UninstallerTest.php

feat: clean up own data on deactivation and uninstall

2026-09-26 04:21:23 +02:00

UninstallTest.php

feat: clean up own data on deactivation and uninstall

2026-09-26 04:21:23 +02:00