[wp-hackers] RSS/Atom excerpt and filters

Stephen O'Connor steve at stevarino.com
Sat Jul 3 21:23:29 UTC 2004


> So make a function that str_replaces all &lt; into < and all &gt;
> into >, before
> calling htmlentities on it.

What happens when the author includes escaped html code in the entry, as
many authors on this list do. This could make things a whole lot worse. (I
can't stand working with character encoding... ew)

Perhaps a "best-practice" would be to parse $wp_filter for the existance of
htmlentities. It would only work if everyone agreed on it, but it's a
solution you can use today.




More information about the hackers mailing list