Pretty good - having to explain why someones question doesn't fit our community kind of sucks but other than that - it's.... moddy

new respect for plugin developers, lol

@Howdy_McGee I have a hacky implementation of shortccode customization with the customizeer, so I foolow the slack channel.

@toscho I thought WordPress core in general was just a big mess xD

@toscho From my <100 perspective 1808 is not a lot more sane than 2500 ;-)

note to self in 182 days it's 2k toscho day.

@MarkKaplun ping me in chat if you want to continue our discussion data sanitisation. Comments is not the right place for it.

@StephenHarris, right. I was actually going to say that the core problem is that a user is requested to enter unfiltered HTML in the first place. Once that possibility is there it is very hard to know when you should escape it and when not.

hey @MarkKaplun thanks for the answer, do you mind adding some code examples to help illustrate your answer?

@MarkKaplun True (though iframes, and script tags are usually a big no-no). But even if you want the user to enter unfiltered HTML into a widget. You don't want them to enter unfiltered HTML into wp-admin

I see your point though - if you're allowing a user to inject script tags on the front-end, that's generally speaking no less a security issue than if there were able to inject it the wp-admin. The principle being explained was that 'escaping' data doesn't make sense without context - escaping data for an SQL statement, rendering, displaying in a textarea all mean different things. The text jumping out of a textarea was a simple illustration of that.

is this question in scope for WP.SE: What are the parameters for re-using Adsense code in a WordPress site?

@DᴀʀᴛʜVᴀᴅᴇʀ, yeh hope I will remember in the morning

@MarkKaplun cool, have a good night

@StephenHarris, I agreed with the text which is why I upvoted, it just leaves people confused when they need to implement something like FB pixel tracking and they are told almost everywhere that due to security they have to escape it, which obviously break it.

@DᴀʀᴛʜVᴀᴅᴇʀ, not yet, just had enough coding for today ;)

@MarkKaplun I made github.com/toscho/WP-Magic-Widgets for exactly this purpose.

hey, you know its 10 past beer:30, lol

lol, and had some beer on empty stomach which doesn't help to get into coding mood :)

ha, I have some of the best coding ideas with a chilled glass of jack or krakin

not me, but I am not american nor european and good beers are too expensive over here to drink while working :)

brew your own! we have a SE site for that, lol

LOL

@toscho, wordpress.stackexchange.com/questions/244229/… is the context for the discussion with stephen

yes, I know

lol, anything you don't know? ;)

I don't know

wordpress.stackexchange.com/questions/244229/…

hmm, comment links don't work anymore?

are you trying to be a US defence secratery? :)

nah

so I didin't understand the link to that comment

> Thanks, but whats the Problem in this website. You post questions and people vote it down.

A good summary of our model.

You you I wish mods would just close off-topic questions

@MarkKaplun nah, dont want to do that.

if mods did them all some others would argue the site is only ran by mods

if questions are not being close what other kind of negative feedback is left?

how will people get a hint they should improve their questions

Closing questions should be a community effort.

@toscho agreed

it doesn't work

@MarkKaplun you're supposed to leave a comment with encouragement, and vote to close

@MarkKaplun didnt say it would work, just said that is what you're supposed to do =P

wordpress.stackexchange.com/questions/244299/… for that person this is just a non helpful site

Darth Vader

I salute you

o>

@DᴀʀᴛʜVᴀᴅᴇʀ it is worse as questions with code snippets are getting upvoted even when they are off-topic

@SummerDeveloper why?

@MarkKaplun ya, how do you think I feel when I make questions trying to learn and see that

later people point to them and say - "but there are 1k questions on CF7"

in the question I linked above I actually explained why I downvoted

I usually do

@MarkKaplun thats good

I just don't bother anymore with questions like wordpress.stackexchange.com/questions/244296/…. downvoting is too ofending and there are never 5 close votes in a reasonable time frame. if the question is a week old when the question might get closed the OP might not even remeber he asked it

@MarkKaplun I would vote to close but my rep isn't high enough right now