Strings are not escaped in TGM Activation

wordpress

#1

Strings are not escaped in TGM Activation, should i care about it?


#2

You can replace __( ) with esc_html__(). Why wait for soft rejection?


#3

TGM Activation has _n_noop() strins and how to escape it?


#4

And what if some one want to use < strong > tag in translated string ?

And some off topic, what is interesting I get soft reject because of “notice” in debug mode which also exist in WP4.5 core files.


#5

use wp_kses function
in your case:
wp_kses(__(’<strong>text</strong> string’, ‘textdomain’),array(‘strong’ => array()));

https://codex.wordpress.org/Function_Reference/wp_kses