technova69/spip-check-cli | 2 commits
Par Gilles Vincent, le 26 août 2026 à 20h15min :
Up d’une version + Maj du CHANGELOG
Modifié
CHANGELOG.md
src/Application.php
==============================
Par Gilles Vincent, le 26 août 2026 à 20h13min :
feat: verify spip_loader.php authenticity and stop flagging its config
spip_loader_config.php (Utiliser spip_loader - SPIP) was
flagged as an unexpected script at the site root: VerificationEmplacementStructurel
allowed it only under the wrong name (spip_loader_options.php, which
doesn’t exist in SPIP). It’s now allowed when its loader is present –
that’s the only condition that makes it meaningful.
Added VerificationSpipLoader: in quick mode it checks spip_loader.php’s
authenticity by comparing it, via SHA-1, to a reference copy downloaded
from get.spip.net and cached for a day (ReferenceSpipLoader, wired into
the existing reference-download progress bar). In deep mode only, it
also checks that spip_loader_config.php does nothing but « return […] »
– the same structural check now shared with language files
(AnalyseurPhp::neRetourneQuUnTableau, extracted from
estUnFichierDeLangueConforme()).
Ajouté
src/Archive/ReferenceSpipLoader.php
src/Verification/VerificationSpipLoader.php
tests/Archive/ReferenceSpipLoaderTest.php
tests/Verification/VerificationSpipLoaderTest.php
Modifié
src/Application.php
src/Command/ScanLancer.php
src/Scan/ContexteScan.php
src/Verification/AnalyseurPhp.php
src/Verification/VerificationEmplacementStructurel.php
tests/Command/ScanLancerTest.php
tests/Scan/ContexteScanTest.php
tests/Verification/AnalyseurPhpTest.php
tests/Verification/VerificationEmplacementStructurelTest.php