[wp-hackers] RSS/Atom excerpt and filters
Stephen O'Connor
steve at stevarino.com
Sat Jul 3 21:23:29 UTC 2004
> So make a function that str_replaces all < into < and all >
> into >, before
> calling htmlentities on it.
What happens when the author includes escaped html code in the entry, as
many authors on this list do. This could make things a whole lot worse. (I
can't stand working with character encoding... ew)
Perhaps a "best-practice" would be to parse $wp_filter for the existance of
htmlentities. It would only work if everyone agreed on it, but it's a
solution you can use today.
More information about the hackers
mailing list