XSS and CSRF Protection — a practical guide to WooCommerce XSS CSRF with clear examples you can reuse in real projects.
WooCommerce Plugin Development Series (84/101). Prefer one article? Read the complete WooCommerce plugin development tutorial.
Short description
Order admin screens and product fields are common XSS targets if meta is printed raw.
Escape meta
echo esc_html($order->get_meta('_acme_note'));