[theme-reviewers] WP customizer sanitize question

[Chip Bennett]

Correct me if I'm wrong (I could be), but I don't think core-defined
controls need a defined sanitization_callback. In the case of the image
control, I think it passes the image through wp_handle_upload().

In any case, the value does still need to be escaped on output, such as
what Emil described.


On Fri, Jun 20, 2014 at 12:47 PM, Srikanth Koneru <tskk79 at gmail.com> wrote:

> Does Image control (
> http://codex.wordpress.org/Class_Reference/WP_Customize_Image_Control)
> need sanitization?
>
> If so is esc_url_raw appropriate?
>
> Also what is 'logo' in that example?
>
> Thanks.
>
> _______________________________________________
> theme-reviewers mailing list
> theme-reviewers at lists.wordpress.org
> http://lists.wordpress.org/mailman/listinfo/theme-reviewers
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wordpress.org/pipermail/theme-reviewers/attachments/20140620/22a4d400/attachment.html>