Timeline for Is it necessary to sanitize plugin options?
Current License: CC BY-SA 4.0
3 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Feb 4, 2022 at 16:22 | vote | accept | Rick Hellewell | ||
Feb 3, 2022 at 1:29 | comment | added | Sally CJ | "for WP plugins/themes, I will ensure sanitization of individual POST/GET fields, rather than the above code" - Yes and I initially recommended doing that because WordPress can be extended by plugins and themes via various hooks, so we don't know if the data should all be sanitized (using the same sanitization function or method) - what if a plugin/theme needs to access the original, unsanitized/raw data? How would they retrieve it when for example HTML and/or new lines in the superglobals were already removed (by your code)? | |
Feb 2, 2022 at 22:54 | history | answered | Rick Hellewell | CC BY-SA 4.0 |