Are un-sanitized theme options more vulnerable to malicious scripts than the theme editor?

I’d like to put text areas in a theme options area to allow users to easily add analytics code, scripts, and css.

Is it silly to worry about malicious code being inserted via un-sanitized theme option text areas when, theoretically, a user could add malicious code just as easily via the standard wordpress theme editor?

Read More

These types of theme options would be so helpful, but I’m struggling with the lack of sanitation/validation that comes with implementation.

Related posts

Leave a Reply