WP-API / OAuth2

Connect applications to your WordPress site without ever giving away your password.
GNU General Public License v2.0
171 stars 41 forks source link

Avoid double-slashing #38

Closed rmccue closed 7 years ago

rmccue commented 7 years ago

We use wp_slash() explicitly, but wp_filter_post_kses() calls it internally. This leads to an extra level of slashing in the client name and content. 🤦‍♂️

Instead, let's use the proper internal function for this: wp_kses_post()