Skip to content

Upd. Integrations. Add check for woo add pay method. - #898

Open
svedge wants to merge 3 commits into
devfrom
upd-woo
Open

svedge wants to merge 3 commits into
devfrom
upd-woo

Conversation

@svedge

@svedge svedge commented Sep 29, 2026

Copy link
Copy Markdown
Contributor

@svedge
svedge requested a balanced review from Copilot September 29, 2026 05:20
@codecov

codecov Bot commented Sep 29, 2026 •

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 28.42105% with 68 lines in your changes missing coverage. Please review.
✅ Project coverage is 32.02%. Comparing base (b6945e5) to head (c24834f).

Files with missing lines Patch % Lines
...ntalk/Antispam/IntegrationsByClass/Woocommerce.php 28.76% 52 Missing ⚠️
inc/cleantalk-public-validate-skip-functions.php 30.76% 9 Missing ⚠️
inc/cleantalk-public-validate.php 14.28% 6 Missing ⚠️
inc/cleantalk-ajax.php 0.00% 1 Missing ⚠️

❌ Your patch check has failed because the patch coverage (28.42%) is below the target coverage (70.00%). You can increase the patch coverage or adjust the target coverage.

Additional details and impacted files
@@             Coverage Diff              @@
##                dev     #898      +/-   ##
============================================
- Coverage     32.03%   32.02%   -0.02%     
- Complexity     6781     6809      +28     
============================================
  Files           292      292              
  Lines         26775    26869      +94     
============================================
+ Hits           8578     8604      +26     
- Misses        18197    18265      +68     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Warning

  • Copilot's review of this pull request may be incomplete because some of the changed files are excluded by your Copilot content exclusion settings. See Excluding content from Copilot for details.

Copilot review overview

🟡 Changes recommended

Hard-coded endpoint matching bypasses protection when WooCommerce’s payment-method endpoint is customized.

Review effort: Balanced
Findings: 3 Medium severity

Open (3)
What changed in this PR

Adds spam protection for WooCommerce customers adding payment methods.

Changes:

  • Checks add-payment-method submissions as orders.
  • Intercepts Stripe setup-intent requests.
  • Updates settings guidance and validation exclusions.
File Description
lib/​Cleantalk/​Antispam/​IntegrationsByClass/​Woocommerce.php Implements payment-method checks.
inc/​cleantalk-settings.php Documents the new behavior.
inc/​cleantalk-public-validate.php Skips dedicated Stripe requests.
inc/​cleantalk-public-validate-skip-functions.php Identifies payment-method submissions.
tests/​Antispam/​IntegrationsByClass/​TestWoocommerceAddPaymentMethod.php Excluded from review by policy.
Files excluded by content exclusion policy (1)
  • tests/Antispam/IntegrationsByClass/TestWoocommerceAddPaymentMethod.php

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread inc/cleantalk-public-validate-skip-functions.php
Comment thread inc/cleantalk-public-validate.php
Comment thread lib/Cleantalk/Antispam/IntegrationsByClass/Woocommerce.php

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants