Run all output through HTML escaping

trustedlogin / Remove-Dashboard-Access

This WordPress plugin limits user access to the dashboard based on whether users have a chosen capability. Disallowed users are redirected to a chosen URL.

https://wordpress.org/plugins/remove-dashboard-access-for-non-admins/

49 stars 12 forks source link

Run all output through HTML escaping #32

Closed zackkatz closed 2 years ago

zackkatz commented 2 years ago

Note: I left <strong>Advanced</strong>: Limit by capability: so that translators wouldn't need to re-translate, but ran it through wp_kses().