Question

wp_kses_bad_protocol( string $string,  array $allowed_protocols )

Sanitize string from bad protocols.

---

description

This function removes all non-allowed protocols from the beginning of $string. It ignores whitespace and the case of the letters, and it does understand HTML entities. It does its work in a while loop, so it won’t be fooled by a string like "javascript:javascript:alert(57)".

---

参数

$string

(string) (Required) Content to filter bad protocols from

$allowed_protocols

(array) (Required) Allowed protocols to keep

---

返回值

(string) Filtered content

---

源代码

File: wp-includes/kses.php

function wp_kses_bad_protocol($string, $allowed_protocols) {
	$string = wp_kses_no_null($string);
	$iterations = 0;

	do {
		$original_string = $string;
		$string = wp_kses_bad_protocol_once($string, $allowed_protocols);
	} while ( $original_string != $string && ++$iterations < 6 );

	if ( $original_string != $string )
		return '';

	return $string;
}

---

更新日志

Version	description
1.0.0	Introduced.

---

相关函数

Uses

• wp-includes/kses.php: wp_kses_no_null()
• wp-includes/kses.php: wp_kses_bad_protocol_once()

---

Used By

• wp-includes/kses.php: wp_kses_one_attr()
• wp-includes/formatting.php: esc_url()
• wp-includes/kses.php: wp_kses_hair()
• wp-includes/class-http.php: WP_Http::request()
• wp-includes/http.php: wp_http_validate_url()

---

User Contributed Notes