Strings are not escaped in TGM Activation



Strings are not escaped in TGM Activation, should i care about it?


You can replace __( ) with esc_html__(). Why wait for soft rejection?


TGM Activation has _n_noop() strins and how to escape it?


And what if some one want to use < strong > tag in translated string ?

And some off topic, what is interesting I get soft reject because of “notice” in debug mode which also exist in WP4.5 core files.


use wp_kses function
in your case:
wp_kses(__(’<strong>text</strong> string’, ‘textdomain’),array(‘strong’ => array()));