Skip to content

Update ramsey/composer-install action to v3.0.1 #640

Update ramsey/composer-install action to v3.0.1

Update ramsey/composer-install action to v3.0.1 #640

Triggered via push March 5, 2025 18:58
Status Success
Total duration 52s
Artifacts
ci  /  Generate job matrix
5s
ci / Generate job matrix
Check for missing dependencies
20s
Check for missing dependencies
Mutation Tests
34s
Mutation Tests
Matrix: ci / QA Checks
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
Mutation Tests: src/Escaper.php#L207
Escaped Mutant for Mutator "LogicalOr": @@ @@ public function escapeHtmlAttr(string $string) { $string = $this->toUtf8($string); - if ($string === '' || ctype_digit($string)) { + if ($string === '' && ctype_digit($string)) { return $string; } $result = preg_replace_callback('/[^a-z0-9,\.\-_]/iSu', $this->htmlAttrMatcher, $string);
Mutation Tests: src/Escaper.php#L231
Escaped Mutant for Mutator "LogicalOr": @@ @@ public function escapeJs(string $string) { $string = $this->toUtf8($string); - if ($string === '' || ctype_digit($string)) { + if ($string === '' && ctype_digit($string)) { return $string; } $result = preg_replace_callback('/[^a-z0-9,\._]/iSu', $this->jsMatcher, $string);
Mutation Tests: src/Escaper.php#L262
Escaped Mutant for Mutator "LogicalOr": @@ @@ public function escapeCss(string $string) { $string = $this->toUtf8($string); - if ($string === '' || ctype_digit($string)) { + if ($string === '' && ctype_digit($string)) { return $string; } $result = preg_replace_callback('/[^a-z0-9]/iSu', $this->cssMatcher, $string);
Mutation Tests: src/Escaper.php#L279
Escaped Mutant for Mutator "ProtectedVisibility": @@ @@ * @param array<array-key, string> $matches * @return string */ - protected function htmlAttrMatcher($matches) + private function htmlAttrMatcher($matches) { $chr = $matches[0]; $ord = ord($chr);
Mutation Tests: src/Escaper.php#L289
Escaped Mutant for Mutator "LessThanOrEqualTo": @@ @@ * The following replaces characters undefined in HTML with the * hex entity for the Unicode replacement character. */ - if ($ord <= 0x1f && $chr !== "\t" && $chr !== "\n" && $chr !== "\r" || $ord >= 0x7f && $ord <= 0x9f) { + if ($ord < 0x1f && $chr !== "\t" && $chr !== "\n" && $chr !== "\r" || $ord >= 0x7f && $ord <= 0x9f) { return '&#xFFFD;'; } /**
Mutation Tests: src/Escaper.php#L290
Escaped Mutant for Mutator "GreaterThanOrEqualTo": @@ @@ * The following replaces characters undefined in HTML with the * hex entity for the Unicode replacement character. */ - if ($ord <= 0x1f && $chr !== "\t" && $chr !== "\n" && $chr !== "\r" || $ord >= 0x7f && $ord <= 0x9f) { + if ($ord <= 0x1f && $chr !== "\t" && $chr !== "\n" && $chr !== "\r" || $ord > 0x7f && $ord <= 0x9f) { return '&#xFFFD;'; } /**
Mutation Tests: src/Escaper.php#L290
Escaped Mutant for Mutator "LessThanOrEqualTo": @@ @@ * The following replaces characters undefined in HTML with the * hex entity for the Unicode replacement character. */ - if ($ord <= 0x1f && $chr !== "\t" && $chr !== "\n" && $chr !== "\r" || $ord >= 0x7f && $ord <= 0x9f) { + if ($ord <= 0x1f && $chr !== "\t" && $chr !== "\n" && $chr !== "\r" || $ord >= 0x7f && $ord < 0x9f) { return '&#xFFFD;'; } /**
Mutation Tests: src/Escaper.php#L290
Escaped Mutant for Mutator "LogicalAndAllSubExprNegation": @@ @@ * The following replaces characters undefined in HTML with the * hex entity for the Unicode replacement character. */ - if ($ord <= 0x1f && $chr !== "\t" && $chr !== "\n" && $chr !== "\r" || $ord >= 0x7f && $ord <= 0x9f) { + if ($ord <= 0x1f && $chr !== "\t" && $chr !== "\n" && $chr !== "\r" || !($ord >= 0x7f) && !($ord <= 0x9f)) { return '&#xFFFD;'; } /**
Mutation Tests: src/Escaper.php#L299
Escaped Mutant for Mutator "GreaterThan": @@ @@ * Check if the current character to escape has a name entity we should * replace it with while grabbing the integer value of the character. */ - if (strlen($chr) > 1) { + if (strlen($chr) >= 1) { $chr = $this->convertEncoding($chr, 'UTF-32BE', 'UTF-8'); } $hex = bin2hex($chr);
Mutation Tests: src/Escaper.php#L313
Escaped Mutant for Mutator "GreaterThan": @@ @@ * Per OWASP recommendations, we'll use upper hex entities * for any other characters where a named entity does not exist. */ - if ($ord > 255) { + if ($ord >= 255) { return sprintf('&#x%04X;', $ord); } return sprintf('&#x%02X;', $ord);