Hi! You may recall some time ago there was a post that mentioned a thing called the doing_it_wrong theme. Yeah. That small tool to help in looking for things when conducting a review. Or perhaps when you are trying to teach a group of people about theme reviews. Yes, that. If you haven’t already, check out the github repo: https://github.com/WPTRT/doingitwrong
I’ll wait a second so you can check it out.
grabs water and takes a sip
Okay, now that you’ve looked over the theme a little let’s talk about what it all entails. A lot of the readme’s documentation was posted some time ago. Earlier today a small commit was made that added a few more things to the theme. Added were:
- JS error
- missing validation/sanitation of customizer setting
- updated readme documentation
- bypassing theme-check
- custom comment listing
The bigger hurdle here is education of customizer validation and sanitation. For some examples and ideas you can check out the sample library on github:
https://github.com/WPTRT/code-examples/blob/master/customizer/sanitization-callbacks.php
For even more reading when it comes to creating safe themes read the guide Frank so awesomely wrote out: