- There may still be unescaped strings. It’s best to do the output escaping as late as possible, ideally as data is being outputted. Example(s): http://envato.d.pr/tlWse0/60BGT2Um and more.
How can I escaped this later then here … strip_tags is wrong at all ?
I change it to wp_kses … will see what reviewer will say