Saving html into postmeta without stripping tags – safe?
HTML is perfectly safe in the database. As long as you’re using update_post_meta() or add_post_meta(), and not SQL directly, WordPress will make sure that you’re safe from any SQL issues. The real trouble with allowing HTML in meta is that if you are outputting this HTML on the front-end without escaping, then any user that … Read more