Where the escaping should go
Moving every escape next to its echo made the whole file easier to trust.
Category
Contact
Review
Architecture reviews, audits and honest scorecards. 15 posts, newest first.
Posts here
15
Updated
Nov 05
Avg read
3m
Topics
32
Posts in Review
Page 1 of 2
The audit that started with one query
A single slow lookup led us through a whole site's architecture.
A review that deleted more than it added
The best pull request of the year removed most of a plugin.
Protected: Notes for members on our review process
Checking capabilities twice
The bug was never in the form. It was in who could reach it.
Theme review notes from a long week
What kept coming up across a pile of classic themes.
Reading other people’s hooks
Tracing a filter through three plugins and living to tell the story.
Nonces are not a permission check
A common mistake that keeps turning up in otherwise careful code.
Getting structured data right
Double-encoded titles and other things search engines politely ignore.