What?

Ensure content we render has been passed through sanitization functions

Why?

In reviewing a separate PR, I was prompted to do some larger review of our codebase to ensure any content we pull from the editor to send to an LLM, or content we receive back from an LLM and render in the editor, has been passed through proper sanitization. For the most part that was already being done but there were a few areas that could be improved, which this PR does.

How?

• For the Editorial Updates feature, ensure the content we receive from the LLM passes through wp_kses_post
• For the Content Resizing feature, ensure the content we render is passed through safeHTML
• For the Type Ahead feature, ensure the content we grab is passed through an inert element so it can never execute

Use of AI Tools

AI assistance: Yes
Tool(s): Claude
Model(s): Opus 5
Used for: Reviewing our entire codebase for missing sanitization and adding those in. Review and testing by me

Testing Instructions

The changes here touch Editorial Updates, Content Resizing and Type Ahead so turn those features on and ensure they all work as expected

Changelog Entry

Security - Ensure any content we render from the LLM or content we send to the LLM is properly sanitized.