Add a case to identify unescaped static method calls in the sniff

WordPress · Aug 28, 2023 · 2fd4721 · 2fd4721
1 parent 20d3d19
commit 2fd4721
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/WordPress/Sniffs/Security/EscapeOutputSniff.php b/WordPress/Sniffs/Security/EscapeOutputSniff.php
@@ -737,6 +737,14 @@ protected function check_code_is_escaped( $start, $end ) {
 
 				$content = $functionName;
 
+				// Check if it's static method call.
+				$double_colon = $this->phpcsFile->findNext( Tokens::$emptyTokens, ( $i + 1 ), $end, true );
+				if ( false !== $double_colon
+					&& \T_DOUBLE_COLON === $this->tokens[ $double_colon ]['code']
+				) {
+					// Set the pointer to the end of the method.
+					$i = $this->phpcsFile->findNext( \T_CLOSE_PARENTHESIS, $i, $end );
+				}
 			} else {
 				$content = $this->tokens[ $i ]['content'];
 				$ptr     = $i;