It’s not completely pointless, but probably smart to sanitize, because of the following situations:
- What’s the certainty that the SVGs only come from you directly?
- Can you guarantee that the SVGs won’t be intercepted during upload?
Redundancies for keeping your site secure are generally recommended.
I don’t know that wp_kses() is the best for sanitizing SVGs though. I’d reference Safe SVG and see how that sanitizes.
Related Posts:
- Should I use spl_autoload_register() in my plugin?
- How can I save a multiple select array with the settings API for a plug-in options page?
- Include WP_Query in my own PHP file?
- Using register_activation_hook in classes
- Is there a way for a plugin to add an attribute to the tag of a theme?
- How to use update and delete query in wordpress
- Shortcode putting html such as
- Gutenberg Blocks doesn’t render correctly when using do_blocks
- add_meta_boxes action with refresh on save
- Resize Image without cropping
- My shortcode is showing up twice
- Database “Migration” for Plugins?
- Custom plugin issue when trying to use the shortcode twice on a page [closed]
- When is is_admin() available?
- Does wp-cron runs all tasks scheduled at same time together or one after other?
- Sanitizing, Validating and Escaping in WordPress (Plugin)
- Making Quote Plugin more efficient
- Hiding WordPress Plugin Source Code
- How do I use the Simple HTML DOM Parser in plugin when other plugin already uses it?
- Will simple function names in a class structure conflict with other plugins?
- Instantiate class to be available to all plugin functions
- How to test nonce with AJAX – Plugin development
- wp_loaded hook block script enquequing
- WP nonce invalid
- Is it necessary to sanitize wp_set_password user input?
- How can i upload images in an admin page?
- How to find error in my code when the error message is pointing to WP core file?
- Custom user login page by creating a plugin
- Singelton class does not work, multiple initialization on page reload
- Retrieve $_POST data submitted from external URL in WordPress(NOT API)
- How to upload a file to a folder named after the user_id via plugin
- Reprinting tags with all attributes
- developing a wordpress plugin, have a few PHP Woocommerce related coding questions
- Whitelisting items from custom options page
- Add_menu_page not displaying the menu in class based plugin
- Update results, Before deleting the related category [closed]
- adjust section according to country?
- Adding function to Genesis genesis_header [closed]
- how to update and display an option without reloading the page
- How to obtain the current website URL in my theme?
- What exactly do this function declared into functions.php file of a WP theme?
- How to use html inside a functions.php code?
- Plugin Generate Unexpected output during activation
- WordPress Environment: Dynamic Page using shortcode – how to change the page name for sharing
- Extend Woocommerce Widget Class – WC_Widget_Product_Categories
- Undefined method class::construct() when creating a plugin
- Hook called before text widget save
- zip unzip attachments in wordpress
- wpdb prepare insert table doesn’t work
- wordpress admin plugin menu custom css
- how to Update 15k products on plugin activation with meta_option
- Using admin-post.php for admin form but it directs me to admin-post.php white screen
- How can I display Custom Post type Custom Columns and its Content in a Dashboard Widget?
- Adding Additional Variables on Menus Page
- custom plugin with upload files does not work
- Using flickr api in custom wordpress plugin
- Toolbar Hidden in a Virtual Page
- What is the difference between Null vs Empty (Zero Length) string?
- PHP: $_SESSION destroyed after page reload for my custom session
- send popup after wp_redirect()
- no_rest_route error on custom routes
- How to correctly escape an echo
- Payment field disappears on custom Paypal plugin
- How to Remove Theme Style CSS inside Custom Plugin?
- Create ACF Checkbox to get all ACF Values from Parent Page
- Creating plugin with front-end pages
- How to Send Pingbacks for all Posts in WordPress?
- I am having errors with checkout on wordpress
- File is executed twice if plugin is activating
- product_type_options get saved value [closed]
- Display a custom name when the user has no name settle in his account
- How can I update the price when someone enters postcode or zip code in woocommerce checkout page?
- 400 bad request admin-ajax file upload
- get Woocommerce product format json for WP_Query
- Sum All the Post Meta of Published posts of Current Logged in user
- Update user meta when an external link in admin notice is clicked
- Is there an option to execute javascript file only on plugin activation
- The plugin generated 225 characters of unexpected output during activation
- Autoloading Classes in Plugins
- Ajax in a class instantiated via shortcode
- Parsing webhook from Shopify in WordPress
- Comparing Dates within plugin using PHP If statement
- Shortcode Works for Logged in Users but Not Working for Guest
- WordPress / PhpStorm / XDebug and plugin_dir_path issues
- Singleton plugin activation; create database
- Send data from plugin to external database
- See output of a sql query while plugin installation in wordpress
- Why this plugin is not working?
- Permission error on plugin save
- How to get WordPress Adminmenu items?
- How to execute add_action() function from custom plugin to Crontrol plugin or do_action()?
- How keep woocommerce users separeted in multisite install and keep admins on network
- base64_encode conflict with convert_smilies in wordpress
- Properly process a custom WP REST API request (Authenticate, Authorize + Validate)?
- Displaying custom meta box value in a custom post page
- Redirect posts to post editor page based on query string
- how to check elementor is widget is active or loaded
- Create a custom plugin with dynamic child pages listing database records
- Load style and script for custom post type metabox
- Permissions error when I use my plugin to delete comments in the front-end