Archive | /wp-includes/kses.php RSS feed for this section

wp_kses_check_attr_val

Performs different checks for attribute values.The currently implemented checks are “maxlen”, “minlen”, “maxval”, “minval” and “valueless”.

3821

Continue reading

wp_kses_bad_protocol_once

Sanitizes content from bad protocols and other characters.This function searches for URL protocols at the beginning of $string, while handling whitespace and HTML entities.

3819

Continue reading

wp_kses_bad_protocol

Sanitize string from bad protocols.This function removes all non-allowed protocols from the beginning of $string. It ignores whitespace and the case of the letters, and it does understand HTML entities. It does its work in a while loop, so it won’t be fooled by a string like “javascript:javascript:alert(57)”.

3817

Continue reading

wp_kses_attr

Removes all attributes, if none are allowed for this element.If some are allowed it calls wp_kses_hair() to split them further, and then it builds up new HTML code from the data that kses_hair() returns. It also removes “” characters, if there are any left. One more thing it does is to check if the tag has a closing XHTML slash, and if it does, it puts one in the returned code as well.

3815

Continue reading