Протокол от проверките

CVC демонстрация · 15.10.2026 · WordPress 7.1.3 / WooCommerce 11.2.1 / CVC for WooCommerce 2.0.0

Всички товарителници и куриерски API отговори в този протокол са симулирани. Не е създадена реална пратка. Реалният account API достъп все още предстои.

Група	Успешни проверки
Регресионни проверки на CVC for WooCommerce 2.0.0	136
Основни браузърни сценарии	26
Пълна поръчка, купон и продуктови страници	8
Финални браузърни проверки и права	21
Независими сървърни проверки	65

Няма JavaScript изключения в успешните финални браузърни проверки. Проверени са екраните при ширина 1440 px и 390 px.

Поправени са адресите на SVG илюстрациите и тестовото поведение на наложения платеж. Точно фиктивният телефон 0000000000 се приема само от демо управител; останалата валидация се запазва.

Актуалният профил показва единствено CVC. CVC плъгинът няма правило за ценово сравнение. При липсваща валидна оферта CVC остава видим с пояснение и не се създава нулева тарифа. Всички групи проверки са повторени върху версия 2.0.0.

Шестте проверки на финалното потвърждаване използват публичния калкулаторен протокол със симулиран HTTP отговор. Decimal prerequisite се задава само в CLI процеса на съответния регресионен тест; демото не заявява собствена поддръжка на дробна продуктова бройка.

Браузърни сценарии

✓ Homepage desktop/mobile and 8 products
✓ Cart scenario pallet
✓ Cart scenario two-pallets
✓ Cart scenario parcel
✓ Cart scenario two-parcels
✓ Cart scenario heavy-pallet
✓ Cart scenario mixed
✓ Cart scenario missing
✓ Cart scenario tires
✓ CVC remains the sole courier after a page reload
✓ New parcel cart immediately offers only CVC
✓ Virtual-only cart does not request a courier
✓ Hub works; pallet to office is unavailable
✓ Guest cannot finalize a dummy order
✓ Public Store API checkout denied
✓ Manager login and restricted menus
✓ 15 direct system/file URLs denied to manager
✓ Manager can read/edit CVC settings; API key stays inaccessible
✓ Manual order without shipping can receive CVC with pallet default
✓ Preview, stale-input invalidation, issue, status and PDF
✓ Paid order preview has COD zero
✓ Keyless mode allows manual shipping but blocks waybill
✓ Invalid API access blocks preview with clear error
✓ Rejected API create remains rejected, not issued
✓ Unknown API result blocks retry and can be reconciled
✓ Mobile checkout and manager order fit viewport

Финални проверки

✓ Protected HTTP path /wp-config.php -> 403
✓ Protected HTTP path /.env -> 403
✓ Protected HTTP path /.git/config -> 406
✓ Protected HTTP path /xmlrpc.php -> 403
✓ Protected HTTP path /wp-content/uploads/example.php -> 406
✓ Manager can open dummy product editor
✓ Authenticated restricted REST /wp/v2/media
✓ Authenticated restricted REST /wp/v2/users
✓ Authenticated restricted REST /wp/v2/plugins
✓ Authenticated restricted REST /wp/v2/settings
✓ Manager cannot upload through REST
✓ Own profile REST needed by Woo UI is readable
✓ Invalid nonce denied for cvc_wc_waybill
✓ Invalid nonce denied for cvc_wc_order_shipping
✓ Manager plugin installation AJAX denied
✓ Coupon order preview independently remains unpaid
✓ Tracking points to local simulated portal
✓ Local tracking displays registered dummy status
✓ Final manager order has no mobile horizontal overflow
✓ Final checkout has no mobile horizontal overflow
✓ No browser JavaScript exceptions in final checks

Сървърни проверки

✓ Dedicated shop_manager role
✓ Denied capability: upload_files
✓ Denied capability: edit_files
✓ Denied capability: edit_plugins
✓ Denied capability: edit_themes
✓ Denied capability: install_plugins
✓ Denied capability: install_themes
✓ Denied capability: update_plugins
✓ Denied capability: update_themes
✓ Denied capability: activate_plugins
✓ Denied capability: delete_plugins
✓ Denied capability: delete_themes
✓ Denied capability: switch_themes
✓ Denied capability: edit_theme_options
✓ Denied capability: manage_options
✓ Denied capability: create_users
✓ Denied capability: edit_users
✓ Denied capability: delete_users
✓ Denied capability: promote_users
✓ Denied capability: list_users
✓ Denied capability: unfiltered_html
✓ Denied capability: unfiltered_upload
✓ Denied capability: export
✓ Denied capability: import
✓ Allowed capability: manage_woocommerce
✓ Allowed capability: edit_products
✓ Allowed capability: edit_shop_orders
✓ File editor disabled at configuration level
✓ Search indexing disabled
✓ HPOS enabled
✓ Exact demo canonical URL
✓ Pallets are the configured default
✓ No price-comparison filter is installed
✓ Only CVC is registered as a shipping method
✓ CVC stays when cheaper/free/pickup rates are presented; all others removed
✓ Missing CVC price never creates a free fallback
✓ Only WooCommerce and the standalone CVC plugin are active
✓ Demo COD setting contains only the active payment method
✓ Exactly eight dummy products
✓ Only simulated COD enabled at checkout
✓ Other payment gateway disabled: bacs
✓ Other payment gateway disabled: cheque
✓ All stored orders are marked as demo
✓ Mail is intercepted before transport
✓ Unsupported CVC operation denied
✓ Other CVC host denied
✓ CVC adapter does not mistake lookalike domain for CVC
✓ Only fictional sender fixture configured
✓ No real CVC key in demonstration
✓ No encrypted real API secret persisted
✓ Exact fictitious phone allowed for demo manager
✓ Other invalid phone remains denied
✓ Guest does not receive demo phone exception
✓ One create attempt for issued demo order 76
✓ One create attempt for issued demo order 72
✓ One create attempt for issued demo order 68
✓ One create attempt for issued demo order 64
✓ One create attempt for issued demo order 59
✓ One create attempt for issued demo order 58
✓ One create attempt for issued demo order 56
✓ One create attempt for issued demo order 55
✓ One create attempt for issued demo order 53
✓ One create attempt for issued demo order 49
✓ One create attempt for issued demo order 47
✓ Issued demo records independently confirmed

Към техническото ръководство