Here’s just a few examples of what escaping looks like: Escaping URLS: <?php echo esc_url( home_url() ); ?> Escaping Content <?php echo esc_html( get_the_title() ); ?> Escaping Attributes <?php echo esc_attr( $my_class ); ?> Escaping Content but keep HTML <?php echo wp_kses_post( get_the_content() ); ?> Escaping Emails <?php echo sanitize_email( $email_address ) ); ?> For … Read more
how to unescape wordpress output
Well, esc_html() doesn’t echo/display the return value (escaped string), so you need to call echo manually: echo esc_html( $FileContents ); Update If you actually want to filter the list of allowed HTML tags in the variable’s value, then you can use the WordPress’ KSES functions like wp_kses_post() and wp_kses_data(): echo wp_kses_post( $FileContents ); echo wp_kses_data( … Read more
A very basic template I created a file named about.php in a pages folder in the root of my theme with this code. You can do the same or change the location as you see fit, just dont put it inside a child folder that is in a child folder, wordpress can’t read templates two … Read more
escape html in jQuery for WordPress
wp_kses_post escaping doesn’t appear to work as described?
Escaping is only necessary when you have no full control of the the thing you are echoing. So as long as $folder is a variable that you have defined yourself, there’s no real need to escape. But if there is user input involved, there is esc_html, to be used as follows: echo esc_html (“this input … Read more
You don’t need to escape HTML you wrote. You wrote it and it’s hard-coded a certain way so there’s no way for it to be replaced by malicious or broken code. You only need to escape the external values that are being inserted into the attributes and you’ve done that. Also, note that the purpose … Read more
* SOLVED * sorry for the bother. my problem wasnt this char at all –> ; but this line which i missed: echo ‘$(‘a.lightbox’).lightBox(); // Select all links with lightbox class’ . “\n”; Sometimes sterring at code i miss such stuff.. sorry = thanks for anyone who watched.
You have to escape th < and the > with < and >, otherwise WordPress will remove the “unknown tags”. You could also filter pre_kses to change the output before it gets stripped. add_filter( ‘pre_kses’, function( $str ) { // find and escape < and > on specific positions, then return $str; });