[theme-reviewers] theme option validation

Justin Tadlock justin at justintadlock.com
Sat Apr 28 00:11:18 UTC 2012


I'd be lenient as long as it's secure and works.  Then, just provide a 
note about what it should be changed to in the next update.

On 4/27/2012 12:16 PM, Kirk Wight wrote:
> Hi all,
>
> How lenient are others towards validation with theme options? I'm 
> doing a review in which options are sanitized on input using 
> wp_filter_nohtml_kses(), but not validated for their purpose - they're 
> supposed to be social media URLs, but whatever the user enters is 
> simply echoed out, whether it's a valid URL or not. Should it be 
> sanitized on output with esc_url() also?..
>
> Thanks, I'm a little out of my league with options stuff.
>
> Thanks,
> Kirk
>
>
> _______________________________________________
> theme-reviewers mailing list
> theme-reviewers at lists.wordpress.org
> http://lists.wordpress.org/mailman/listinfo/theme-reviewers
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wordpress.org/pipermail/theme-reviewers/attachments/20120427/be37ae63/attachment.htm>


More information about the theme-reviewers mailing list