Comments on: XSS and WordPress Themes http://rc3.org/2009/07/06/xss-and-wordpress-themes/ Strong opinions weakly held Mon, 15 Mar 2010 23:37:05 +0000 http://wordpress.org/?v=2.9.1 hourly 1 By: Hanan Cohen http://rc3.org/2009/07/06/xss-and-wordpress-themes/comment-page-1/#comment-6003 Hanan Cohen Mon, 06 Jul 2009 19:24:42 +0000 http://rc3.org/?p=9711#comment-6003 <p>Thanks for telling us about it. Some of my sites have the same problem. Will fix it now.</p> Thanks for telling us about it. Some of my sites have the same problem. Will fix it now.

]]> By: Adam Trachtenberg http://rc3.org/2009/07/06/xss-and-wordpress-themes/comment-page-1/#comment-6002 Adam Trachtenberg Mon, 06 Jul 2009 18:36:41 +0000 http://rc3.org/?p=9711#comment-6002 <p>strip_tags()seems a bit harsh. Maybe htmlentities() would be nicer?</p> <p>Grepping the theme I use, WP seems to have a wp_specialchars() function of its own. I didn't look at exactly how it does what it does, but that would unify all HTML output filtering through a single place.</p> strip_tags()seems a bit harsh. Maybe htmlentities() would be nicer?

Grepping the theme I use, WP seems to have a wp_specialchars() function of its own. I didn’t look at exactly how it does what it does, but that would unify all HTML output filtering through a single place.

]]>