views->get(...) // or extract()-equivalents in the loader. Composed HTML fragments are echoed // from internal data sources; both rules below are acknowledged-by-design // for this template surface. // phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound // phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?> '; slug could be either urlencoded OR decoded unicode (项目01) if ( in_array( $_term->slug, $knowledge_base, true ) || in_array( urlencode( $_term->slug ), $knowledge_base, true ) || in_array( strtolower( urlencode( $_term->slug ) ), $knowledge_base, true ) || in_array( urldecode( $_term->slug ), $knowledge_base, true ) ) { $is_selected = true; } } $_selected_slug = $is_selected ? $_term->slug : ''; // option_kses() returns a kses-sanitized string. echo betterdocs()->template_helper->option_kses( $_term->slug, $_term->name, $_selected_slug ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped } ?>