> Themes are required to escape all untrusted links before output using
> esc_url(). Escape home_url() in header.php and other similar links
> used elsewhere.
Does that mean we have to pass all links through esc_url()? Even
the_permalink()?
echo esc_url(get_permalink());
Rather than:
the_permalink() ?