Terence Ong 221a46a60a fix: remove wp_kses_post() HTML escaping from REST API JSON output ...

The security audit added wp_kses_post()/esc_html() to article fields
before returning them via the REST API. This caused double-encoding
(e.g., & → &) because REST responses are JSON, not HTML —
WordPress's rest_ensure_response() already handles JSON encoding.
The frontend is responsible for output escaping at render time.

Removes the 4 escaping lines from get_articles() to fix broken
summaries and truncated content on the live site.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-09 12:34:02 +07:00

14 KiB

Raw Blame History

View Raw