escaping Archives - Page 8 of 10

WordPress

IT Nursery

What to use instead of wp_kses() in user output

I need some help here. While developing a theme, I want to make sure there are no security issues. So all dynamic data ...

April 23, 2022
0 Comments

HTML-encoding lost when attribute read from input field

I’m using JavaScript to pull a value out from a hidden field and display it in a textbox. The value in the hidden ...

April 22, 2022
0 Comments

WordPress

IT Nursery

What’s the difference between esc_* functions?

I’ve read Professional WordPress and it says: esc_html function is used for scrubbing data that contains HTML. This function encodes special characters into ...

April 22, 2022
0 Comments

WordPress

IT Nursery

Which WP functions do you need to use esc_html() or esc_url() on?

I’ve come across situations where people have used either esc_html() or esc_url() with certain WP functions such as home_url("https://wordpress.stackexchange.com/"). An example being in ...

April 20, 2022
0 Comments

Insert HTML into view from AngularJS controller

Is it possible to create an HTML fragment in an AngularJS controller and have this HTML shown in the view? This comes from ...

April 20, 2022
0 Comments

WordPress

IT Nursery

How to print translation supported text with HTML URL

I am somewhat new in WordPress if it is about “deeper” customization. Now I am having this function: esc_html_e( 'Dear Guest, with Your ...

April 19, 2022
0 Comments

WordPress

IT Nursery

Difference between esc_url() and esc_url_raw()

http://core.trac.wordpress.org/browser/trunk/wp-includes/formatting.php#L2239 I’m confused about when should either of them be used. Assuming I have this URL: http://site.com/?getsomejavascript=1, which is dynamically generated javascript: if ...

April 19, 2022
0 Comments

WordPress

IT Nursery

Sanitize and data validation with apply_filters() function

Should we sanitize and validate the apply_filters() like the examples below? absint( apply_filters( 'slug_excerpt_length', 35 ) ); wp_kses_post( apply_filters( 'slug_excerpt_more', '…' ) ); ...

April 17, 2022
0 Comments

WordPress

IT Nursery

Escaping and sanitizing SVGs in metabox textarea

I want to include inline SVGs in a metabox textarea. That’s easy. What’s killing me is how do I sanitize the textarea before ...

April 16, 2022
0 Comments

WordPress

IT Nursery

What is the difference between esc_html filter vs attribute_escape filter?

What is the exact difference between esc_html and attribute_escape filter? esc_html() uses esc_html filter and esc_attr() uses attribute_escape filter. Both encodes < > ...

April 16, 2022
0 Comments