> Themes are required to escape all untrusted links before output using > esc_url(). Escape home_url() in header.php and other similar links > used elsewhere. Does that mean we have to pass all links through esc_url()? Even the_permalink()? echo esc_url(get_permalink()); Rather than: the_permalink() ?