feat: add internal WordPress cron runner

2026-07-23 23:40:44 +02:00
parent f75bce3dea
commit e6ec3c94dc
15 changed files with 245 additions and 24 deletions
@@ -23,7 +23,8 @@ cover content and section order, contact actions, mobile overflow/navigation, se
 landmarks, image alternatives, admin routing, security headers, blocked sensitive
 routes, blocked uploaded PHP requests, and unknown virtual hosts. Security checks also
 assert that WordPress does not publish host ports and that Apache hardening remains
-installed in the WordPress image.
+installed in the WordPress image. They also assert that the default demo plugins are
+removed and that the internal `wp-cron` service has no public network exposure.

 Subjective visual review and a real-device accessibility audit remain manual release
 checks.