[theme-reviewers] home_url clarification

Chip Bennett chip at chipbennett.net
Wed Jun 19 19:53:48 UTC 2013


Well now, don't even get started on why get_home_url() and home_url() both
*return* output, and core has no function to *echo* that output. ;)


On Wed, Jun 19, 2013 at 3:50 PM, Otto <otto at ottodestruct.com> wrote:

> On Wed, Jun 19, 2013 at 2:40 PM, Chip Bennett <chip at chipbennett.net>
> wrote:
> > ... with a core patch to return escaped output.
>
> I think this is not possible because of the way these functions are
> actually used.
>
> home_url (and other *_url functions) are intended to return the URL.
> Keyword being "return", as they're not output functions. They just
> return the relevant data. That data could then be subject to further
> manipulation, and often is. If you escape them early, then they might
> need to be unescaped to manipulate them and then re-escaped later.
>
> Escaping is the responsibility of the code actually doing the output.
> home_url() isn't outputting anything, so it should not return escaped
> data. If you want to argue for combined functions like, say,
> echo_home_url(), or something along those lines, then escaping in them
> would make more sense.
>
> Just because it's in core doesn't mean it should always return "safe"
> data, because "safe" is relative to what the data is being used for.
>
> -Otto
> _______________________________________________
> theme-reviewers mailing list
> theme-reviewers at lists.wordpress.org
> http://lists.wordpress.org/mailman/listinfo/theme-reviewers
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wordpress.org/pipermail/theme-reviewers/attachments/20130619/d9239ec3/attachment.html>


More information about the theme-reviewers mailing list