Use securityninja_whitelist to skip parts of the site during malware scans. Typical case: known false positives you are sure are safe.

Use wildcards such as ? and * when matching files and folders.

add_filter( 'securityninja_whitelist', 'filter_securityninja_whitelist' );

function filter_securityninja_whitelist( $whitelist ) {
  $whitelist[] = '*/ignorefolder/*';
  $whitelist[] = '*/wp-content/uploads/ignore-this/*';
  return $whitelist;
}

* matches any path segment before or after it, so you can whitelist a whole folder:

$whitelist[] = '*/my-specific-folder-name/*';

Introduced in 5.141. Use a current plugin version.

Examples

Whitelist the Classic Editor plugin folder:

$whitelist[] = '*/wp-content/plugins/classic-editor/*';

Or a shorter pattern (matches any folder named classic-editor):

$whitelist[] = '*/classic-editor/*';

Avoid generic folder names that would ignore more than you intend.

Whitelist one file only:

$whitelist[] = '*/wp-content/plugins/classic-editor/classic-editor.php';

Whitelist a plugin upload folder (WP All Import example):

$whitelist[] = '*/wp-content/uploads/wpallimport/*';

Where to add the code

How to include custom code on your website.

Customizing the whitelist: a guide

Examples

Where to add the code