[theme-reviewers] Settings API and User-Defined Javascript

[Vicky Arulsingam]

Thanks Chip.

That's what I had in mind - just wanted to be sure.

-----
Vicky Arulsingam

On Fri, Feb 17, 2012 at 11:42 AM, Chip Bennett <chip at chipbennett.net> wrote:

> The Settings API doesn't currently do *any* sanitization/validation on its
> own; it simply provides a callback in which the Theme developer can define
> the sanitization/validation functinos.
>
> So, you need to make sure that the callback defined in register_setting()
> properly sanitizes the javascript passed into it, and that the Theme
> properly escapes the javascript on output in the template.
>
> Chip
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wordpress.org/pipermail/theme-reviewers/attachments/20120217/2ffae588/attachment.htm>