How to prevent XSS attack in wordpress theme?

XSS generally would only occur through AJAX or form handling. Verify a referrer header is actually from your FQDN and/or require a captcha, providing pseudorandom input validation.

Related Posts:

  1. Using classes instead of global functions in functions.php
  2. Template for individual post designs
  3. Front End Post Submit Form
  4. Upgrading a custom theme through the Dashboard
  5. Theme Customizer not loading
  6. Version control for both Vagrant config and themes being developed [closed]
  7. How to correctly add JQuery in a WP theme?
  8. How to add a second stylesheet to the editor
  9. WP 3.1 upgrade breaks AutoFocus+ theme
  10. How to make theme elements customizable in wordpress?
  11. Limitations when modifying wp_title with a filter
  12. How to edit theme functions file to modify pagination?
  13. Customizer: save setting/control content to post/page
  14. Customize how a WordPress theme looks like in the Theme Selector
  15. Customizer – loading settings/controls/sections/panels based on a id/page id
  16. Integrate WooCommerce theme with a WordPress theme [closed]
  17. Widget Option is Missing
  18. How do you use WordPress for a website that’s not in a blog format?
  19. searchform.php doesn’t work properly
  20. Customizer: get_preview_url() inside customize_save_after hook
  21. New to WordPress – Read the Codex, Other Docs; Still Confused
  22. Create theme for mobile phones and tablets only?
  23. How to add custom page elements to the WYSIWYG editor?
  24. Can’t change theme name
  25. Is hand coding required at all?
  26. WordPress Twenty-Fourteen: How to Remove Home Page Header Image from Other Pages
  27. How to dowload and edit content of a website
  28. Any way to permanently translate themes?
  29. Best strategy for providing theme options using customizer
  30. How Does One Create a Global Variable Repository
  31. How to convert that page to a wordpress template? [closed]
  32. Turning WordPress Into full-featured website?
  33. Sizing screenshot.png without losing aspect ratio
  34. How To Add New Option Types To Option Tree?
  35. Page template in two level deep folder
  36. Best practices – Should I create a child theme vs. customizing a framework theme? (such as HTML5 reset)
  37. Child Theme not loading parent CSS
  38. Where do I find the functions triggered within a hook?
  39. Use of undefined constant FS_CHMOD_DIR – assumed ‘FS_CHMOD_DIR’
  40. Registering Sidebars and Sidebar Widgets. Sidebar Widgets Not Displaying
  41. How do I get a parent theme modification from a child theme?
  42. Removing the default sidebar from admin panel
  43. How the WordPress sidebar works
  44. Extend walker – navigation, adding data attribute to a tag
  45. how to pull wordpress post comments to a external page
  46. Why use while over if in single wordpress posts?
  47. WordPress website loads but is not displayed until page scrolled
  48. wp_head() not inserting the default stylesheet style.css
  49. First completely customized theme, where should I start?
  50. Best practices: Custom theme sidebar menu – hardcode or widget?
  51. Is it a good idea to make whole theme widgetized?
  52. Single Theme folder for Multiple WordPress
  53. How i can get widgets areas working in customizer?
  54. Cutomize Colors utility: How to add more configurable colors to a theme
  55. Cannot figure out how to overwrite files in child theme
  56. WordPress post arrangement using post_class
  57. Removing non native customizer settings from a child theme
  58. Customize the previous_post_link output
  59. which is the best way to customize nav-menu-template.php?
  60. wp-cli: For development, how can I activate a theme that is on the local disk but not zipped?
  61. My Admin bar covers my sticky navbar [closed]
  62. Single Page Design, Storing in Theme Options
  63. Edit footer via customizer
  64. “Add A Widget” button in the Customizer
  65. Move default page templates to sub directory
  66. loading blank white screen of slide
  67. Child Theme’s style.css not loading in mobile browser
  68. Migrated WordPress site renders Chinese
  69. How to Find the Page the Front Page is Using?
  70. WooCommerce: multiple input field for multiple product variations
  71. How do I get the trackback count of a post in wordpress without writing an SQL query?
  72. Child Theme header1.php file not overwriting parent theme’s header1.php file
  73. 3 Level Deep Navigation Menu Not Showing All Levels
  74. How to Have a Pure HTML Sub Directory In WP Site
  75. Theming Using Bootstrap Glyphicons and WordPress Dashicons
  76. WordPress page/blog incorporated into static website
  77. Random white space before doctype
  78. How to add menù section to my WordPress template?
  79. What are the critical theme files when building a custom theme?
  80. Having issue with WordPress wp_enqueue_style
  81. Starting point for custom Themes [closed]
  82. How add built-in textarea in theme development?
  83. Filter didn’t work on content class (hybrid_post_attributes)
  84. Trying to link to a php template file but its blank
  85. Theme author.php transfer
  86. Custom Enfold theme tab layout not compatible with WPML
  87. How to test another theme in a live WordPress website instead of live preview?
  88. WordPress uploads do not show up and I see the white screen of death in some cases
  89. Can’t upload images on new theme
  90. Import from HubSpot COS into WordPress 4?
  91. WordPress 3.5 + Foundation 5 not working on IE9
  92. Theme customizer live preview JS- Trying to bind to an html image url without luck
  93. Theme automatically inserting “more” tag on every post
  94. How get the 10 most viewed pages (not post)
  95. Using wp_enqueue_script with social media buttons?
  96. Permalinks problem with custom theme
  97. Purchased Theme to Custom Made Theme? [closed]
  98. How to make website with many template that active [closed]
  99. How to create full header but keep content narrow
  100. Correct way to make a custom block theme responsive