43 reputation
3
bio website bytefair.com
location
age
visits member for 1 year, 8 months
seen Feb 8 at 6:45

Jan
15
awarded  Scholar
Jan
15
accepted From a security standpoint, should bloginfo() or get_bloginfo() be escaped?
Jan
15
comment From a security standpoint, should bloginfo() or get_bloginfo() be escaped?
Awesome answer, thanks. I'm only just now getting into the guts of WP and although it was clear to me that bloginfo was a get_bloginfo wrapper, it was not clear that the output was being sanitized. I missed the filters. I should perhaps become more familiar with how WP handles code that enters and leaves the database. I'm left with a similar outlook as when I started but at least I know why now :)
Jan
15
awarded  Supporter
Jan
14
awarded  Student
Jan
14
asked From a security standpoint, should bloginfo() or get_bloginfo() be escaped?