Automattic / vip-scanner

Deprecated: Scan all sorts of themes and files and things! Use PHPCS and the VIP coding standards instead
https://automattic.com
140 stars 51 forks source link

Check for escaping l10n functions #287

Open philipjohn opened 9 years ago

philipjohn commented 9 years ago

Warn for uses of unescaped localisations such as __() which should really be esc_html__() instead.

See https://codex.wordpress.org/L10n

david-binda commented 8 years ago

@gudmdharalds could you look into this?

gudmdharalds commented 8 years ago

Looking into this one.

westonruter commented 8 years ago

This is also handled by the PHP_CodeSniffer WordPress.XSS.EscapeOutput sniff.