Update ruleset tests: account for new errors from WPCS

* The `WordPress.Security.ValidatedSanitizedInput` sniff will now also examine `$_SESSION` variables.
    As the test is about another sniff, let's just ignore the notices coming from `WordPress.Security.ValidatedSanitizedInput`.

Author: jrfnl

WordPress-VIP-Go/ruleset-test.inc

@@ -557,7 +557,7 @@ echo "<script>
 </article> <?php
 
 // WordPressVIPMinimum.Variables.RestrictedVariables
-foo( $_SESSION['bar'] ); // Error.
+foo( $_SESSION['bar'] ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput -- Error.
 
 // WordPressVIPMinimum.Variables.ServerVariables
 // phpcs:disable WordPress.Security.ValidatedSanitizedInput.InputNotValidated,WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

WordPressVIPMinimum/ruleset-test.inc

@@ -587,7 +587,7 @@ echo '<style type="text/css">.show-admin-bar { visibility: hidden; }</style>'; /
 // WordPressVIPMinimum.Variables.RestrictedVariables
 $query = "SELECT * FROM $wpdb->users"; // Error.
 $x = foo( sanitize_text_field( $_SERVER['HTTP_USER_AGENT'] ) ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotValidated -- Warning.
-foo( $_SESSION['bar'] ); // Error.
+foo( $_SESSION['bar'] ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput -- Error.
 
 // WordPressVIPMinimum.Variables.ServerVariables
 // phpcs:disable WordPress.Security.ValidatedSanitizedInput.InputNotValidated,WordPress.Security.ValidatedSanitizedInput.InputNotSanitized