[drupal-devel] theme_box

[Tom Dobes]

On 7/5/05, Karoly Negyesi <karoly at negyesi.net> wrote:
> I am somewhat surprised that theme_box contains no check_plain() calls.

Why should it?  I thought the purpose of theme_box was to be a
multi-purpose container for use by modules.  Putting a check_plain in
there on the content would make it nearly useless, as it would become
impossible to put any HTML tags within the box.  If modules are
putting plain-text content within boxes, they should run the
check_plain themselves.