Sanitizing

• unsalkorkmaz

• March 7, 2015 at 3:49 am

Hi,
Do you think security steps are necessary for acf?

If we need, do you think acf/load_value filter with esc_attr would cover all field values?

• James

• April 8, 2016 at 12:48 am

Hi @unsalkorkmaz,

Thanks for the post.

According to the plugin author, ACF does not sanitize the field output.

You can create a function to be used instead of the native functions( get_field() and the_field()) and have the values pass through the esc_attr function.

• weatheranvil

• November 16, 2022 at 5:42 am

@dinosaur game I think it is necessary