Automattic / Automattic/wp-codebox

Bind admin menu globals for PHP admin-page fuzzing

Open
#1,413 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
16
Forks
4
Avg merge
59m
Merged PRs (30d)
131

Description

## Problem
The PHP fuzz-suite primitive can fail while loading admin menu files from inside the ability execution trait:

The primitive includes from inside a class method. Included admin files expect and to be normal WordPress globals, but without explicit binding they are local function-scope variables. If is null or inspected before population, menu loading can throw before the primitive can emit structured coverage.

## Expected
should bind the WordPress admin menu globals before including admin menu files, then emit a structured pass/skip/error result instead of throwing.

## Evidence
Observed in Woo admin-page fuzz runs , , and .

## Fix
Implemented in #1412.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the PHP fuzz-suite ability execution trait and the admin menu files involved in the Woo admin-page fuzz runs. Check the implementation referenced in #1412 and verify that menu loading produces structured pass, skip, or error results instead of throwing.

Written by the indexing model from the issue text.

Assessment

Tech stack
php, wordpress
Domain
testing-qa
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.