[theme-reviewers] theme option validation
Justin Tadlock
justin at justintadlock.com
Sat Apr 28 00:11:18 UTC 2012
I'd be lenient as long as it's secure and works. Then, just provide a
note about what it should be changed to in the next update.
On 4/27/2012 12:16 PM, Kirk Wight wrote:
> Hi all,
>
> How lenient are others towards validation with theme options? I'm
> doing a review in which options are sanitized on input using
> wp_filter_nohtml_kses(), but not validated for their purpose - they're
> supposed to be social media URLs, but whatever the user enters is
> simply echoed out, whether it's a valid URL or not. Should it be
> sanitized on output with esc_url() also?..
>
> Thanks, I'm a little out of my league with options stuff.
>
> Thanks,
> Kirk
>
>
> _______________________________________________
> theme-reviewers mailing list
> theme-reviewers at lists.wordpress.org
> http://lists.wordpress.org/mailman/listinfo/theme-reviewers
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wordpress.org/pipermail/theme-reviewers/attachments/20120427/be37ae63/attachment.htm>
More information about the theme-reviewers
mailing list