New answers tagged


It's probably best to render the shortcode on output by running it through do_shortcode()


There are two aspects here obviously all input should be sanitized JSON is just a wrapper no different then any other type of container which is used to aggregate data for transmission. You almost never sanitize the container as usually in case of an error you will just not be able to extract the data from it, but each piece of data should be sanitized. ...

Top 50 recent answers are included