Discussion on "Safe by accident" | Hashnode
Discussion on "Safe by accident". The last post ended with a promise to go deeper, into the places where esc_html() is the wrong tool and code that looks escaped still leaves a hole. This is that post. It comes in two halves: first wh