Content Security Policy Manager

Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors

v1.2.1Patrick SletvoldUpdated Added 2k+ installs86% rating
68
Score
19
Errors
2
Warnings
+0
Change

Category Scores

Security45
Repo94
Performance100
Maintainability95

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

21 findings

Security

16

2 issue groups

Maintainability

4

3 issue groups

Repo Compliance

1

1 issue group

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$description'.15
Category
Security
Occurrences
15
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$description'.

ERRORMaintainabilitywp function not compatible with requires wpFunction "wp_doing_ajax()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0.2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Function "wp_doing_ajax()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0.

ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().1
Category
Security
Occurrences
1
Severity
error

Sample message

Sanitization missing for register_setting().

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$core".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$core".

WARNINGMaintainabilitymismatched plugin namePlugin name "Content Security Policy Manager" is different from the name declared in plugin header "CSP Manager".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Content Security Policy Manager" is different from the name declared in plugin header "CSP Manager".

ERRORRepo Complianceoutdated tested upto headerTested up to: 6.1 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.1 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

External Connections

Not analyzed yet.

Score History

First score snapshot

v1.2.1

68

Latest

Findings
21
Errors
19
Warnings
2
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

27 nodes

Related Plugins