[theme-reviewers] esc_url() for all links?

Tom wptr at edge22.com
Fri Aug 29 23:25:55 UTC 2014

I believe get_permalink() does it for you.

-----Original Message-----
From: theme-reviewers [mailto:theme-reviewers-bounces at lists.wordpress.org]
On Behalf Of Yentl Bresseleers
Sent: Friday, August 29, 2014 4:24 PM
To: Discussion list for WordPress theme reviewers.
Subject: [theme-reviewers] esc_url() for all links?

> Themes are required to escape all untrusted links before output using 
> esc_url(). Escape home_url() in header.php and other similar links 
> used elsewhere.

Does that mean we have to pass all links through esc_url()? Even

     echo esc_url(get_permalink());

Rather than:

     the_permalink() ?
theme-reviewers mailing list
theme-reviewers at lists.wordpress.org

More information about the theme-reviewers mailing list