[theme-reviewers] esc_url() for all links?
Tom
wptr at edge22.com
Fri Aug 29 23:25:55 UTC 2014
I believe get_permalink() does it for you.
-----Original Message-----
From: theme-reviewers [mailto:theme-reviewers-bounces at lists.wordpress.org]
On Behalf Of Yentl Bresseleers
Sent: Friday, August 29, 2014 4:24 PM
To: Discussion list for WordPress theme reviewers.
Subject: [theme-reviewers] esc_url() for all links?
> Themes are required to escape all untrusted links before output using
> esc_url(). Escape home_url() in header.php and other similar links
> used elsewhere.
Does that mean we have to pass all links through esc_url()? Even
the_permalink()?
echo esc_url(get_permalink());
Rather than:
the_permalink() ?
_______________________________________________
theme-reviewers mailing list
theme-reviewers at lists.wordpress.org
http://lists.wordpress.org/mailman/listinfo/theme-reviewers
More information about the theme-reviewers
mailing list