<?xml version="1.0"?>
<ruleset name="SpamJam Security and Compatibility">
	<description>Release-blocking security, database, escaping, and PHP compatibility checks.</description>
	<file>spamjam.php</file>
	<file>includes</file>
	<file>premium</file>
	<exclude-pattern>vendor/*</exclude-pattern>
	<arg name="basepath" value="./"/>
	<arg name="parallel" value="8"/>

	<rule ref="WordPress.Security">
		<!-- Integration callbacks run after the host form verifies its nonce. -->
		<exclude name="WordPress.Security.NonceVerification"/>
	</rule>
	<rule ref="WordPress.DB.PreparedSQL"/>
	<rule ref="WordPress.DB.RestrictedFunctions"/>
	<rule ref="WordPress.DB.RestrictedClasses"/>
</ruleset>
