-
Notifications
You must be signed in to change notification settings - Fork 22
/
phpcs-security.ruleset.xml
41 lines (37 loc) · 1.4 KB
/
phpcs-security.ruleset.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
<?xml version="1.0"?>
<ruleset name="WordPress Security">
<!-- Set a description for this ruleset. -->
<description>A WordPress Ruleset to check application safety.</description>
<exclude-pattern>assets/*</exclude-pattern>
<exclude-pattern>node_modules/*</exclude-pattern>
<exclude-pattern>test/*</exclude-pattern>
<exclude-pattern>vendor/*</exclude-pattern>
<exclude-pattern>*.min.js</exclude-pattern>
<exclude-pattern>js/*.js</exclude-pattern>
<exclude-pattern>css/*.css</exclude-pattern>
<exclude-pattern>src/*</exclude-pattern>
<rule ref="Generic.PHP.Syntax"/>
<rule ref="Generic.CodeAnalysis.UnusedFunctionParameter"/>
<!-- Include the WordPress ruleset, with exclusions. -->
<rule ref="WordPress.CodeAnalysis">
</rule>
<rule ref="WordPress.DB">
</rule>
<rule ref="WordPress.NamingConventions.PrefixAllGlobals"/>
<rule ref="WordPress.PHP">
<!-- omit non security sniffs -->
<exclude name="WordPress.PHP.DisallowShortTernary"/>
<exclude name="WordPress.PHP.DontExtract"/>
<exclude name="WordPress.PHP.YodaConditions"/>
</rule>
<rule ref="WordPress.Security">
</rule>
<rule ref="WordPress.Utils">
</rule>
<rule ref="WordPress.WP">
<exclude name="WordPress.WP.TimezoneChange"/>
<exclude name="WordPress.WP.I18n.MixedOrderedPlaceholders"/>
<exclude name="WordPress.WP.I18n.UnorderedPlaceholders"/>
<exclude name="WordPress.WP.I18n.NonSingularStringLiteralText"/>
</rule>
</ruleset>