Strings are not escaped in TGM Activation, should i care about it?
You can replace __( ) with esc_html__(). Why wait for soft rejection?
1 Like
TGM Activation has _n_noop() strins and how to escape it?
And what if some one want to use < strong > tag in translated string ?
And some off topic, what is interesting I get soft reject because of “notice” in debug mode which also exist in WP4.5 core files.
use wp_kses function
in your case:
wp_kses(__(’<strong>text</strong> string’, ‘textdomain’),array(‘strong’ => array()));