[theme-reviewers] esc_url() for all links?

Yentl Bresseleers hello at design311.com
Fri Aug 29 23:24:28 UTC 2014


> Themes are required to escape all untrusted links before output using 
> esc_url(). Escape home_url() in header.php and other similar links 
> used elsewhere.

Does that mean we have to pass all links through esc_url()? Even 
the_permalink()?

     echo esc_url(get_permalink());

Rather than:

     the_permalink() ?


More information about the theme-reviewers mailing list