Timeline for esc before saving or before displaying does it matter?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 22, 2016 at 21:21 | comment | added | Jason | There does seems to be an exception: esc_url_raw which is used to inserting where as esc_url is for the screen. codex.wordpress.org/Function_Reference/esc_url_raw | |
| May 22, 2016 at 20:09 | vote | accept | Jason | ||
| May 22, 2016 at 20:06 | comment | added | TheDeadMedic | Last sentence summed it up perfectly - "sanitize on insert, escape on output" | |
| May 22, 2016 at 19:17 | history | answered | Mark Kaplun | CC BY-SA 3.0 |