<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
I'd be lenient as long as it's secure and works. Then, just provide
a note about what it should be changed to in the next update.<br>
<br>
On 4/27/2012 12:16 PM, Kirk Wight wrote:
<blockquote
cite="mid:CAFQFuXO04U7rw-vprKW1GZLQfKC+WRc=cZO-ic6=E0WxUJhTkA@mail.gmail.com"
type="cite">Hi all,
<div><br>
</div>
<div>How lenient are others towards validation with theme options?
I'm doing a review in which options are sanitized on input using
wp_filter_nohtml_kses(), but not validated for their purpose -
they're supposed to be social media URLs, but whatever the user
enters is simply echoed out, whether it's a valid URL or not.
Should it be sanitized on output with esc_url() also?..</div>
<div><br>
</div>
<div>Thanks, I'm a little out of my league with options stuff.</div>
<div><br>
</div>
<div>Thanks,</div>
<div>Kirk</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
theme-reviewers mailing list
<a class="moz-txt-link-abbreviated" href="mailto:theme-reviewers@lists.wordpress.org">theme-reviewers@lists.wordpress.org</a>
<a class="moz-txt-link-freetext" href="http://lists.wordpress.org/mailman/listinfo/theme-reviewers">http://lists.wordpress.org/mailman/listinfo/theme-reviewers</a>
</pre>
</blockquote>
</body>
</html>