mirror of
https://github.com/FOSSBilling/FOSSBilling.git
synced 2026-11-09 13:36:07 +09:00
b49ccb9df8
* Sanitize invoice hash and secure asset paths * Guard against missing client session * Serialize invoice items into indexed inputs * Validate URL field input type before checking * Block legacy paid support hooks on ticket create * Harden CSRF token validation in API client * Add 'Paidsupport' to cspell word list * Use Stripe metadata to link client and invoice * Remove legacy Paidsupport hooks handling * Add paidsupport to cspell word list * Use config debug flag; always warn if install exists * Revert "Use config debug flag; always warn if install exists" This reverts commit fda6fcc0b05758d897a837d125ce1c0a35be0226. * Fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Fix Stripe getClientFromTransaction and simplify UpdatePatcher cache invalidation Agent-Logs-Url: https://github.com/FOSSBilling/FOSSBilling/sessions/49a72bff-61f2-4a3e-9107-08aec7b255d2 Co-authored-by: admdly <2807620+admdly@users.noreply.github.com> * Fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Restrict Dompdf logo remote URLs to http/https schemes only Agent-Logs-Url: https://github.com/FOSSBilling/FOSSBilling/sessions/58c16027-cc36-4c11-a039-0bfcaf5a45f5 Co-authored-by: admdly <2807620+admdly@users.noreply.github.com> * Enable Buildx cache and add release archive * Restrict `claimForProcessing` SQL and update tests * Add HTML sanitizer and sandboxed Twig rendering * Update test expected HTML in ServiceTest * Add `RequestFactory` and trusted proxy support * Use HttpFoundation Responses & Request everywhere * Return HTTP Response objects for exports/downloads * Refactor request routing, auth errors and CSV export * Remove RequestFactory wrapper and minor cleanups * Specify Response union return types * Parenthesize response constructions before send * Clean up PHPStan ignore rules * Relax HTML test to accept optional tbody/br * fix(theme): call getUploadedAssets without arguments Agent-Logs-Url: https://github.com/FOSSBilling/FOSSBilling/sessions/ce04bff6-ccde-4a10-8a68-f6278b1b550e Co-authored-by: admdly <2807620+admdly@users.noreply.github.com> --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: admdly <2807620+admdly@users.noreply.github.com>
27 lines
821 B
Plaintext
27 lines
821 B
Plaintext
includes:
|
|
- phpstan-baseline.neon
|
|
|
|
parameters:
|
|
level: 3
|
|
paths:
|
|
- src
|
|
bootstrapFiles:
|
|
- src/load.php
|
|
excludePaths:
|
|
analyse:
|
|
- src/vendor
|
|
- src/library/Model/Admin.php
|
|
- src/library/Model/Client.php
|
|
- src/library/Model/ServiceLicense.php
|
|
- src/library/Model/Product.php
|
|
- src/library/Server/Manager/Custom.php
|
|
- src/library/Server/Manager/Whm.php
|
|
- src/data/cache (?)
|
|
universalObjectCratesClasses:
|
|
- RedBeanPHP\SimpleModel
|
|
- RedBeanPHP\OODBBean
|
|
ignoreErrors:
|
|
- '#^Function __trans not found\.$#'
|
|
- '#^Function __pluralTrans not found\.$#'
|
|
- '#^Inner named functions are not supported by PHPStan\. Consider refactoring to an anonymous function, class method, or a top\-level\-defined function\. See issue \#165 \(https\://github\.com/phpstan/phpstan/issues/165\) for more details\.$#'
|