WordPress Quality Control & Assurance 2

Question 1

Which WordPress function should you use to safely output user-supplied data in HTML attributes to prevent XSS?

Accepted Answer

esc_attr()

Answer

esc_attr() escapes special characters for safe use inside HTML attributes, preventing XSS attacks.

Question 2

When running PHPUnit tests for a WordPress plugin, which command runs only tests in a specific file?

Accepted Answer

phpunit tests/FileName.php

Answer

Passing the file path directly to PHPUnit runs only the tests contained in that specific file.

Question 3

What is the purpose of the WordPress beta tester plugin?

Accepted Answer

It allows switching to beta or nightly builds of WordPress core

Answer

The WordPress Beta Tester plugin lets you opt into bleeding-edge or RC releases of WordPress core for testing.

Question 4

Which wp-config.php constant enables display of PHP errors on screen in WordPress?

Accepted Answer

define('WP_DEBUG_DISPLAY', true)

Answer

WP_DEBUG_DISPLAY controls whether debug errors are printed to the screen (requires WP_DEBUG to also be true).

Question 5

During a WordPress theme QA review, you notice inline styles are being output via the_content(). What is the recommended fix?

Accepted Answer

Use wp_kses_post() to strip disallowed tags

Answer

wp_kses_post() strips HTML tags and attributes not allowed in post content, including unwanted inline styles.

WordPress Practice Test