Files
ultimatemember/composer.json
T
Mykyta Synelnikov 9d83fba560 Update dynamic function blacklist for security enhancement
Added a mechanism to dynamically retrieve and merge updated WordPress function lists into the blacklist to prevent unsafe usage in dropdown options. Addresses a security issue (CVE-2025-47691) by using a JSON-based function source tied to WordPress versioning.
2025-05-12 13:16:17 +03:00

50 lines
1.6 KiB
JSON

{
"name": "ultimatemember/ultimatemember",
"description": "The easiest way to create powerful online communities and beautiful user profiles with WordPress.",
"type": "wordpress-plugin",
"homepage": "https://wordpress.org/plugins/ultimate-member/",
"license": "GPL-3.0-or-later",
"minimum-stability": "stable",
"prefer-stable": true,
"config": {
"allow-plugins": {
"symfony/flex": true,
"dealerdirect/phpcodesniffer-composer-installer": true,
"composer/installers": true
}
},
"require": {
"ext-mbstring": "*",
"ext-json": "*",
"ext-dom": "*",
"ext-exif": "*",
"ext-gd": "*",
"ext-fileinfo": "*",
"ext-curl": "*",
"ext-iconv": "*",
"ext-tidy": "*",
"composer/installers": "^2.3",
"woocommerce/action-scheduler": "3.9.0"
},
"require-dev": {
"wp-cli/wp-cli": "*",
"dealerdirect/phpcodesniffer-composer-installer": "^0.7.1",
"object-calisthenics/phpcs-calisthenics-rules": "*",
"phpcompatibility/phpcompatibility-wp": "*",
"wp-coding-standards/wpcs": "2.3.0",
"squizlabs/php_codesniffer": "3.*",
"phpdocumentor/phpdocumentor": "3.1.*",
"sniccowp/php-scoper-wordpress-excludes": "6.8.*"
},
"scripts": {
"wordpress-excludes": [
"@php -r \"$dest = 'includes/lib/php-scoper-wordpress-excludes/'; if (!is_dir($dest)) { mkdir($dest, 0755, true); }; copy('vendor/sniccowp/php-scoper-wordpress-excludes/generated/exclude-wordpress-functions.json', $dest . 'exclude-wordpress-functions.json');\""
]
},
"extra": {
"installer-paths": {
"includes/lib/{$name}/": ["woocommerce/action-scheduler"]
}
}
}