Question

wp_check_jsonp_callback( string $callback )

Checks that a JSONP callback is a valid JavaScript callback.

---

description

Only allows alphanumeric characters and the dot character in callback function names. This helps to mitigate XSS attacks caused by directly outputting user input.

---

参数

$callback

(string) (Required) Supplied JSONP callback function.

---

返回值

(bool) True if valid callback, otherwise false.

---

源代码

File: wp-includes/functions.php

function wp_check_jsonp_callback( $callback ) {
	if ( ! is_string( $callback ) ) {
		return false;
	}

	preg_replace( '/[^\w\.]/', '', $callback, -1, $illegal_char_count );

	return 0 === $illegal_char_count;
}

---

更新日志

Version	description
4.6.0	Introduced.

---

相关函数

Used By

• wp-includes/rest-api/class-wp-rest-server.php: WP_REST_Server::serve_request()

---

User Contributed Notes