Output Sanitation

Your code is working correctly. If you look at the source code of the page, you will see:

<script>alert('Test')</script>

When the above text gets processed for display by your browser, it then becomes 

<script>alert('Test')</script>

which is what you want to be displayed.

Related Posts:

  1. Data Validation: Always escape late / escape HTML Code
  2. Multiple register settings, with same option name – issue
  3. Best Practice for Validating and Sanitizing Data
  4. Data sanitization for user registration and user login
  5. What data sanitzation function should be used to store entire source code of webpage?
  6. Why the WP Core team does not allow filter_* functions? [closed]
  7. confused about sanitize_email after is_email [duplicate]
  8. How do I sanitize the str_replace function in javascript variables
  9. Validating input using java.util.Scanner
  10. What is the actual minimum length of an email address as defined by the IETF?
  11. In Which Contexts are Plugins Responsible for Data Validation/Sanitization?
  12. Sanitize and data validation with apply_filters() function
  13. How to properly validate data from $_GET or $_REQUEST using WordPress functions?
  14. is_email() VS sanitize_email()
  15. Server side validation
  16. Shortcode putting html such as
  17. How do I sanitize a javascript text?
  18. Does wp_insert_post validate the input?
  19. WordPress oEmbed W3C Validation
  20. How to Remove novalidate attribute from comment form
  21. What is wp_check_invalid_utf8?
  22. Data Validation
  23. Inconsistent server code response using HTTP API
  24. wordpress site validation errors
  25. vs WordPress Security
  26. Data validation
  27. Who is responsible for data sanitization in WordPress development?
  28. Settings API – sanitize_callback is not called and it leads to an incorrect behavior
  29. What is the proper way to validate and sanitize JSON response from REST API?
  30. Does balanceTags() provide any escaping / protection?
  31. w3c validation problem – Twitter share button pulling content
  32. wp_remote_post – handling responses
  33. Prevent invalid or empty values from being saved to the database and retain the form field values upon error
  34. Unable to sanitize in customizer and escape in theme without removing ability for user to use “< br >” to insert a line break
  35. protect user submitted posts
  36. Settings API – getting hidden input / submit button’s name
  37. Require user to input code from an array of allowed codes with Gravity Forms [closed]
  38. How WordPress sanitizes post content on save? Or it doesn’t?
  39. Safely store code(html/js..) into database
  40. WordPress live, custom text box validation, how to?
  41. How to do more than one verify_nonce in one function?
  42. W3C validation errors (trailing slashes)
  43. How to save Checkbox-Options in Plugin Options Page
  44. Data Validation & Sanitization for Big HTML Blocks
  45. Jquery Validation Engine with Conatct Form 7
  46. Form Sanitization and Validation
  47. Gravity Forms validate arrival and departure
  48. Why is my script’s regex having its backslash removed?
  49. Proper Way to Sanitize Meta Input
  50. Validation Always Tells There Is an Open DIV
  51. Settings api sanatize callback not being triggered
  52. How long does plugin review usually take?
  53. WP calendar summary attribute validation error
  54. How to use esc_attr__() function properly to translate a variable that contains string?
  55. oneOf two possible objects in WP REST API?
  56. how to sanitizing $_POST with the correct way?
  57. Simple way to alert error messages in Javascript
  58. How can I validate an email address using a regular expression?
  59. Good input validation loop using cin – C++
  60. How can I validate an email address using a regular expression?
  61. Reactjs – Form input validation
  62. How to validate an email address in JavaScript
  63. XAML Binding Groups
  64. “Stray start tag footer” in html validator?
  65. A potentially dangerous Request.Form value was detected from the client
  66. WebForms UnobtrusiveValidationMode requires a ScriptResourceMapping for jquery
  67. Email validation using jQuery
  68. How to test valid UUID/GUID?
  69. what is a parse error and how do I fix it
  70. Server-side schema validation with JAX-WS
  71. How to validate date with format “mm/dd/yyyy” in JavaScript?
  72. Validating IPv4 addresses with regexp
  73. what is a good method to sanitize the whole $_POST array in php?
  74. An invalid form control with name=” is not focusable
  75. Validate date in dd/mm/yyyy format using JQuery Validate
  76. How can I check if a string is a valid number?
  77. HTML5 Validation Error: body start tag seen but an element of the same type was already open
  78. How can I check if a single character appears in a string?
  79. What is jQuery Unobtrusive Validation?
  80. jQuery Form Validation before Ajax submit
  81. Contact Form 7 – Custom Validation
  82. How does the SQL injection from the “Bobby Tables” XKCD comic work?
  83. Hapi/Joi Validation: How to process text to a specific format
  84. What is the best Java email address validation method?
  85. Check if inputs are empty using jQuery
  86. ZIP Code (US Postal Code) validation
  87. A non well formed numeric value encountered
  88. validate textfield contents in wordpress simple job board plugin
  89. Is sanitize_title enough to generate post slugs?
  90. Remove type attribute from script and style tags added by WordPress
  91. wordpress sanitize array?
  92. Data sanitization: Best Practices with code examples
  93. Should I sanitize an email address before passing it to the is_email() function?
  94. don’t publish custom post type post if a meta data field isn’t valid
  95. How safe / sanitized is wp_insert_posts()?
  96. Should HTML output be passed through esc_html() AND wp_kses()?
  97. How to check if a string is a valid URL
  98. When to use esc_html and when to use sanitize_text_field?
  99. How to safely sanitize a textarea which takes full HTML input
  100. Escaping and sanitizing SVGs in metabox textarea