Zach Tollman benchmarked wp_kses() and found that the conventional wisdom about its performance isn’t always true.