Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disallow dashboard widgets #126

Open
dingo-d opened this issue Feb 27, 2017 · 2 comments
Open

Disallow dashboard widgets #126

dingo-d opened this issue Feb 27, 2017 · 2 comments

Comments

@dingo-d
Copy link
Member

dingo-d commented Feb 27, 2017

We should add a sniff that looks for dashboard widgets, which are not allowed in the WordPress themes (as far as I know).

The sniff should search for wp_add_dashboard_widget() function and wp_dashboard_setup hook in the theme and alert if those exist.

Dashboard widgets can easily contain iframes that can be used for user tracking, which is also forbidden.

@ernilambar
Copy link
Member

ernilambar commented Feb 27, 2017

Related to #9 We already have a list of function to be blocked in theme. List will be discussed may be in some meeting and updated accordingly.

@dingo-d dingo-d self-assigned this May 18, 2019
@dingo-d dingo-d added this to the 0.2.x/0.3.0 Next milestone May 18, 2019
@dingo-d
Copy link
Member Author

dingo-d commented May 18, 2019

The wp_add_dashboard_widget function can be added to a ForbiddenFunctionSniff, but the hook won't be checked (as far as I know).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants