<div dir="ltr">> <span style="font-family:arial,sans-serif;font-size:13px">forgot to use esc_attr for one or two instance</span><div><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div><div style>
<span style="font-family:arial,sans-serif;font-size:13px">A missing esc_attr (and other user input escaping/sanitization) may lead to security issues. I strongly recommend *not* approving insecure themes.</span></div></div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Jun 14, 2013 at 11:08 PM, Stephen Cui <span dir="ltr"><<a href="mailto:scui2005@gmail.com" target="_blank">scui2005@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div><div><div><div><div><div><div>Hi,<br><br></div>We all know the trac queue is crazy long. For a new theme, it takes about 4 to 5 weeks to get a first review. If there is any required issue, it takes another 4 to 5 weeks. Practically there are 2 priority queues: approved and new themes.<br>
<br></div>Of course, reviewers are volunteers. We cannot require (or encourage) theme authors or theme shops to participate in the review. However, I have some suggestions for my fellow reviewers. I believe it will help in certain way.<br>
<br></div>1. Follow the guideline and differentiate between Required and Recommended. Please note the WordPress' default theme is not guideline.<br><br></div>2. We should approve the theme if there is only minor issues. (e.g. Untranslated texts, forgot to use esc_attr for one or two instance).<br>
<br></div>3. If the theme is ready to be approved except several required issues, we should follow up with new ticket. It take less time to review the followup ticket and help the trac queue. Tips: You will need to update the email address in Trac system in order to receive the follow up comments.<br>
<br></div><br></div>Have a good weekend!<br></div>
<br>_______________________________________________<br>
theme-reviewers mailing list<br>
<a href="mailto:theme-reviewers@lists.wordpress.org">theme-reviewers@lists.wordpress.org</a><br>
<a href="http://lists.wordpress.org/mailman/listinfo/theme-reviewers" target="_blank">http://lists.wordpress.org/mailman/listinfo/theme-reviewers</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Konstantin
</div>