Think your theme is secure? Your plugin API can be trusted? Think again. I’m going to show you how to make your site iron-cast by escaping your way to security