This is a code I have in a function.php action. It is responsible for getting and displaying an embed code. Typically there is a youtube link from $embed_link but it comes from a public form so it can contain anything:
$embed_link = get_post_meta( $post_id, 'user_content_link_to_remote_video' ); $embed_code = wp_oembed_get( $embed_link ); if ($embed_code): echo $embed_code; endif;
Is there a risk of malicious code in there? Is this code safe? If not, how to make it safer?