A tool like PHP CodeSniffer, combined with the WordPress Coding Standards can be used to warn you if values are not being escaped. These warnings can be shown in the editor if the editor has a PHPCS extension of some kind (VS Code does, but I’m not sure about PhpStorm).
With PHPCS it’s possible to automatically fix many issues using phpcbf, but I don’t think the escaping rule is one of them. This is because the proper escaping function to use depends entirely on context, and an automated tool won’t necessarily know which is appropriate. It would only know if one wasn’t used.
Frankly, you’d be much better of learning the purpose of the various escaping functions and getting in the habit of using them, rather than relying on automated tools to secure your code.
Related Posts:
- esc_url not working within add_settings_field callback
- Whats the safest way to output custom JavaScript and Css code entered by the admin in the Theme Settings?
- What is the safe way to print tracking code / pixel code before tag or tag
- How to escape html generate by a loop
- How to escape multiple attribute at once in WordPress?
- How to safely return the HTML?
- Correct form of escaping and localization – functions.php breadcrumbs
- wp_kses allow checkbox class and checked
- What is best practice when escaping the_title()?
- If necessary, how should wp_get_attachment_image() and its parameters be escaped?
- How to show a custom meta box on the “Quick Edit” screen?
- How to add CSS class to custom logo?
- Display Search Result Count
- theme path in javascript file
- Are content.php and content-single.php the same?
- Theme Customizer : how to create multiple-level panel
- How to change get_custom_logo() url?
- What can I hook into after_setup_theme?
- How to set the default value of a option in a theme?
- Removing all classes from nav_menu except current-menu-item and current-menu-parent
- Add meta-information to theme itself
- Theme elements not translating
- Best practice for including plugins as part of a theme?
- Adding dashicon fonts to the admin of pre 3.8 installs
- How to use bloginfo( ‘template_directory’ ) in array
- Is using eval() ok in this scenario
- Prevent WordPress updates from overriding custom language translations?
- Display site admin profile fields in header.php
- Add tinymce to widget textareas
- Custom Nav Walker to show siblings and children of current branch?
- Page template across themes
- Append HTML to an LI of wp_list_categories
- Customizer API and add_panel(). Panel doesn’t show
- Child themes: disabling the parent
- Is there a filter for enqueue script to strip the type=”text/javascript” property
- How display id of most recent modified post in wordpress?
- I want to get the home root path
- Should I use function_exists() and/or add_action() in theme development?
- Bold letters inside excerpt [closed]
- How to make Home Menu( Front Page) use index.php instead of page.php
- Unable to pass variable on theme cusomizer add_settings()
- JavaScript Change focus to password field login page being reset
- Using esc_url with a hard coded url
- Broken template went invisible
- Select full Image Size on widget “Genesis – Featured Posts”
- Where to find the code that redirects requests on the static page URL to the home page
- How to Add Custom Button to Text(HTML) Editor and NOT Visual Editor
- Custom Nav Walker Trouble
- Set parent theme language with custom .mo files
- Change template if tag selected
- Broken theme, template is missing
- WordPress page/blog incorporated into static website
- How to reverse engineer the Twenty Eleven background image uploader?
- Theme Development -> Specific Homepage
- Premium theme licensing of php called through AJAX
- Customizer: get_preview_url() inside customize_save_after hook
- How to add custom meta box when you have a custom page template file
- Password protect a custom template
- Different themes on one site
- Theme Check errors of theme code
- Allow different tags in widget titles
- Pagination and multiple loops
- Does wordpress add their own classes into nav menus?
- Post archives link yields a 404 Not Found
- Getting white screen of death on category pages because of body_class() function
- Let user to upload multiple time
- get main URL from subdirectory with php
- Infinite loop when nesting have_posts()
- Is_single not working properly in genesis
- Developing WordPress site behind a static site
- Code showing in wordpress post titles around website
- register_theme_directory() sees custom themes directory, but blank frontend
- How to change parent permalink?
- how to call options on front end and add logo
- Jetpack Infinite Scroll Not Working
- After WP 4.6.1 Update , Blog page started giving 500 error
- Editable screenshot.png in a custom theme developed
- How to create multiple pages in a client theme?
- How to share posts (and plugins) between existing site and new, separate dev/test installation?
- Duplicate WordPress site to subdirectory but use same db?
- Menu order of parent menu from perspective of child menu
- Conditional loop based on current page
- Theme customizer live preview JS- Trying to bind to an html image url without luck
- wp_deregister_script was called incorrectly
- Theme options not displaying correctly after theme update
- Undefined index: debuging error for theme option template snippet
- Multiple Content Shortcodes
- Add the ability of changing background color of a theme [closed]
- How to use esc_attr__() function properly to translate a variable that contains string?
- What to do when child theme is out of date with parent theme
- Permalinks problem with custom theme
- Purchased Theme to Custom Made Theme? [closed]
- How to make website with many template that active [closed]
- Query for tag given slug
- Image Size wrong during upload
- Creating image grid on products page in wordpress
- Insert gutenberg blocks into template
- What is the point of using archive.php instead of index.php?
- Querying by post category slug with core/query block markup
- How to add translation for FSE theme?