views->get(...) // or extract()-equivalents in the loader. Composed HTML fragments are echoed // from internal data sources; both rules below are acknowledged-by-design // for this template surface. // phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound // phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only filter UI. $post_status = ( isset( $_GET['view'] ) ) ? sanitize_text_field( wp_unslash( $_GET['view'] ) ) : ''; ?> > >