vip-scanner

vip-scanner copied to clipboard

Moving (or hiding) the admin bar isn't allowed on VIP. We should make a note of CSS changes.

joshbetz

For the same reason that `extract()` is blocked, we should block variable variables. It just makes determining what's in the current scope super confusing.

joshbetz

For example, `after_theme_setup` should be `after_setup_theme`. What other commonly mis-named hooks can we flag?

nickdaugherty

The use of `die()` and `wp_die()` should be flagged except in the case of use within an AJAX handler. This is especially true in plugins which could take down WordPress...

spencermorin

`posts_per_page` = -1 just sets `nopaging` = true internally. You can also manually set `nopaging`.

joshbetz

Conditionals aren't available before then. To be fully accurate, need to tokenize the source, and trace the function calls to check everything before `parse_query` for conditional tag functions. http://codex.wordpress.org/Conditional_Tags

nickdaugherty

Since CSS files are often concatenated for performance reasons, and older versions of IE have issues with more than 4096 selectors per file, we should flag when this limit may...

nickdaugherty

Dynamic analysis support

1

In addition to Scanner's static analysis, Scanner should support dynamic analysis of sites. This would consist of finding site urls and crawling them, while recording what happens, such as expensive...

nickdaugherty

Some of my pages produce a blank output, no error messages on page, in wp log or php error log. If I delete some pages it works. Not sure if...

Zackio

If a flagged issue has a file / line number, and it's under version control, we can add historical info from version control to the error.

nickdaugherty