Skip to content

Commit 83728fb

Browse files
allilevinegithub-actionsjeherve
authored
Email Editor: Integrate the convert class from the HTML to Text library (woocommerce#59859)
* # This is a combination of 5 commits. # This is the 1st commit message: Email Editor: Integrate the convert class from the HTML to Text library and remove the dependency. # This is the commit message #2: Fix linting errors. # This is the commit message #3: Fix more linting errors. # This is the commit message #4: Fix package linting errors. # This is the commit message woocommerce#5: Fix additional package linting errors. * Email Editor: Integrate HTML to Text library and remove external dependency - Internalized soundasleep/html2text functionality - Added Html2Text and Html2Text_Exception classes - Updated composer.json to remove dependency - Fixed all PHPStan and WordPress coding standards violations - Ensured PHP 7.4+ compatibility and standalone package support * Fix potential security issues with exceptions. * Ignore error_logs since they're for security purposes. * Remove unused . * Email editor: Add unit and integration tests for html2text, and remove unnecessary import. * Fix PHP and linter issues. * Attempt to keep the tests happy while fixing the PHPStan error. * Change from double quotes to single quotes. * Add changefile(s) from automation for the following project(s): packages/php/email-editor * Add security information to package * Add copyright and license headers to new files * Add package license - GPLv2 or later - Also incorporates work with different copyright and license. Internal reference: p2y3YZ-9Ry-p2#comment-22676 * Add new licensing / security reporting policy * Add 2 new files to mirror repo as well --------- Co-authored-by: github-actions <github-actions@github.com> Co-authored-by: Jeremy Herve <jeremy@jeremy.hu>
1 parent e34929d commit 83728fb

12 files changed

Lines changed: 1546 additions & 64 deletions
Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
# Security Policy
2+
3+
Full details of the Automattic Security Policy can be found on [automattic.com/security](https://automattic.com/security/).
4+
5+
## Reporting a Vulnerability
6+
7+
**For responsible disclosure of security issues and to be eligible for our bug bounty program, please submit your report based on instructions found on [automattic.com/security](https://automattic.com/security).**
8+
9+
## Guidelines
10+
11+
We're committed to working with security researchers to resolve the vulnerabilities they discover. You can help us by following these guidelines:
12+
13+
* Follow [HackerOne's disclosure guidelines](https://www.hackerone.com/disclosure-guidelines).
14+
* Pen-testing Production:
15+
* Please **setup a local environment** instead whenever possible. Most of our code is open source (see above).
16+
* If that's not possible, **limit any data access/modification** to the bare minimum necessary to reproduce a PoC.
17+
* **Don't automate form submissions!** That's very annoying for us, because it adds extra work for the volunteers who manage those systems, and reduces the signal/noise ratio in our communication channels.
18+
* To be eligible for a bounty, please follow all of these guidelines.
19+
* Be Patient - Give us a reasonable time to correct the issue before you disclose the vulnerability.
20+
21+
We also expect you to comply with all applicable laws. You're responsible to pay any taxes associated with your bounties.
Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
Significance: patch
2+
Type: dev
3+
Comment: Integrated the convert class from the external HTML to Text library and removed the dependency from the Email Editor package.
4+
Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
Significance: minor
2+
Type: add
3+
4+
Add licensing and security policy.

packages/php/email-editor/composer.json

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,8 +18,7 @@
1818
},
1919
"require": {
2020
"php": ">=7.4",
21-
"pelago/emogrifier": "^7.3",
22-
"soundasleep/html2text": "^2.1"
21+
"pelago/emogrifier": "^7.3"
2322
},
2423
"require-dev": {
2524
"automattic/jetpack-changelogger": "3.3.0",

packages/php/email-editor/composer.lock

Lines changed: 6 additions & 61 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)