widoz / wp-starter-theme Goto Github PK

The post_class is a wrapper for get_post_class which apply a filter post_class to the returned value, for this reason is not possible to say if the value returned adhere to the WordPress security standards.

I would like to sanitize the html classes before them are printed but Wp does not have a function to sanitize over a list of html classes but just one, so we need to implement the function which get the string, convert to array, sanitize all of the entries and return back the sanitize string.

Related to #1 and the solution is obviously the same

Introduce https://github.com/widoz/bem for class attributes instead of hard strings