How to allow &nbsp with wp_kses()?

not sure the difference but I used &nbsp for adding a white space
..then passed it through wp_kses()

The correct HTML entity for a non-breaking space is   — note the ; which is required and without it (i.e. &nbsp), the entity is not valid and when used with wp_kses(), you’d get &nbsp instead of a non-breaking space.

strangely it was working fine before I used wp_kses()

I’m pretty sure it’s because the browser is smart enough and auto-corrected it to  . 🙂

So, always use valid HTML entities and also tags (e.g. close a <div> with a </div>), regardless you use wp_kses() or not. Don’t rely on “intelligent guess” or auto correction by the browser.

Related Posts:

  1. What characters do I need to escape in XML documents?
  2. What characters must be escaped in HTML 5?
  3. How can I selectively escape percent (%) in Python strings?
  4. How do I escape a single quote in jQuery?
  5. Escape Character in SQL Server
  6. How to escape apostrophe (‘) in MySql?
  7. Should HTML output be passed through esc_html() AND wp_kses()?
  8. How to prevent escaping when saving HTML code in an option value?
  9. What to use instead of wp_kses() in user output
  10. How to correctly escape query variables to be used in WP_Query
  11. esc_attr / esc_html / esc_url in echos
  12. When do I need to use esc_html()? [duplicate]
  13. how to escape wp_oembed_get for phpcs
  14. what’s different between esc_attr, htmlspecialchars and htmlentities
  15. Allow all attributes in $allowedposttags tags
  16. When outputting a static string to the page, is it necessary to escape the output?
  17. How Flexible are the WordPress Coding Standards for PHPCS?
  18. why is esc_html() returning nothing given a string containing a high-bit character?
  19. How to properly escape a translated string?
  20. Quotes being escaped inside wp_editor when saved with wp_kses_post
  21. Translate a Constant while appeasing WordPress PHPCS
  22. Using esc_url() on a url more than once
  23. Do I need to escape get_theme_mod(‘url’) / (‘mail’) with esc_url?
  24. Using esc_attr_e
  25. Why esc_html_() is not used on every text that has a translation (on Twenty Twenty One)?
  26. Escaping crashes my output
  27. How to safely escape the title attribute
  28. How to safely escape data that contains HTML attributes
  29. Can wp_strip_all_tags be used as a substitute for esc_url, esc_attr & esc_html?
  30. Echoing a URL to a link
  31. wp_kses_post escaping doesn’t appear to work as described?
  32. file_get_contents | escaping doesnt show the page
  33. Help about Escaping
  34. How to keep specific tag from an html string?
  35. wp_kses allow checkbox class and checked
  36. Escaping Issues
  37. Escaping and Special Characters (e.g. &)
  38. Escaping get_option( ‘time_format’ ) is nesserary?
  39. How should esc_url be combined with trailingslashit?
  40. Correct way of using esc_attr() and esc_html()
  41. What are all the escape characters?
  42. Which characters need to be escaped when using Bash?
  43. How do I use spaces in the Command Prompt?
  44. With “magic quotes” disabled, why does PHP/WordPress continue to auto-escape my POST data?
  45. Typical wp_kses $allowed
  46. From a security standpoint, should bloginfo() or get_bloginfo() be escaped?
  47. Escaping and sanitizing SVGs in metabox textarea
  48. Which WP functions do you need to use esc_html() or esc_url() on?
  49. What’s the difference between esc_* functions?
  50. How to escape custom css?
  51. How to Use Wildcards in $wpdb Queries Using $wpdb->get_results & $wpdb->prepare?
  52. Escaping SVG with KSES
  53. Should messages in WP_Error already be html escaped?
  54. When do I need to use esc_attr when using WordPress internal functions
  55. wp_kses_post only removes tags, but not their content
  56. Disable escaping html
  57. Do you need to escape hard coded plain text?
  58. What is the difference between strip_tags and wp_filter_nohtml_kses?
  59. WP Editor strips input placeholder attribute
  60. How do I stop HTML entities in a custom meta box from being un-htmlentitied?
  61. Why should I escape translatable strings? and how shall i do that?
  62. Change allowed HTML tags for comments
  63. Do I need to use the esc_html() function on hard coded links?
  64. How Could I sanitize the receive data from this code
  65. Should you escape hardcoded URLs?
  66. Proper use of internationalization
  67. When I re-save a post with [code] sections, the entities are double-escaped (> becomes > etc)
  68. Escape post image attachments added to template
  69. wp_query not searching with apostrophe
  70. wp_kses and magic quotes
  71. Which escape function to use when escaping an email or plain text?
  72. Is Wrapping intval() Around esc_attr() Redundant for Escaping Input?
  73. Base64 & JSON Encode array in PHP, use as HTML data attribute, decode and parse in JavaScript …. with proper Escaping
  74. Something is unescaping all html entities before output to browser [closed]
  75. How to get my post title to work with an apostrophe (‘s)?
  76. How can I remove the kses filters when saving a specific post type ? (it breaks my JSON)
  77. Securing/Escaping Output of file content – reading via fread() in PHP
  78. Is it possible to run wp_kses on all posts?
  79. I want to allow the use of a data-flw attribute in links in comments
  80. Add Attribute to p Tag of Post Content
  81. How to escape html generate by a loop
  82. Inline style HTML attribute is being stripped from all elements of a post
  83. How to escape multiple attribute at once in WordPress?
  84. Add HTML to Term Description
  85. Is there any solution, ide/tool etc., for automatic escaping for WordPress?
  86. Proper way to use esc_html__ and esc_attr__ etc for escaping value for translation
  87. ACF Unexpected T_CONSTANT_ENCAPSED_STRING [closed]
  88. How to pass an array as attribute of shortcode to work properly shortcode parser?
  89. how can i send this to wp_head – escape problem
  90. How to correctly escape an echo
  91. how to unescape wordpress output
  92. How to use wp_filter_oembed_result?
  93. WordPress post_content gets deleted in cron after wp_update_post
  94. Escaping a WPDB Object in One Shot
  95. Render the metabox input values as HTML
  96. Any ideas how to allow CSS input to perfectly work in the text area with wp_kses?
  97. problem with quotes on new post
  98. Multisite, but wp_kses_allowed_html only for one subsite?
  99. how to sanitizing $_POST with the correct way?
  100. How do I return XML to an API post request