Tag Archives: codex

wp_kses_decode_entities

Convert all entities to their character counterparts.This function decodes numeric HTML entities (A and A). It doesn’t do anything with other entities like ä, but we don’t need them in the URL protocol whitelisting system anyway.

3825

Continue reading

wp_kses_check_attr_val

Performs different checks for attribute values.The currently implemented checks are “maxlen”, “minlen”, “maxval”, “minval” and “valueless”.

3821

Continue reading

wp_kses_bad_protocol_once

Sanitizes content from bad protocols and other characters.This function searches for URL protocols at the beginning of $string, while handling whitespace and HTML entities.

3819

Continue reading

wp_kses_bad_protocol

Sanitize string from bad protocols.This function removes all non-allowed protocols from the beginning of $string. It ignores whitespace and the case of the letters, and it does understand HTML entities. It does its work in a while loop, so it won’t be fooled by a string like “javascript:javascript:alert(57)”.

3817

Continue reading

wp_kses_attr

Removes all attributes, if none are allowed for this element.If some are allowed it calls wp_kses_hair() to split them further, and then it builds up new HTML code from the data that kses_hair() returns. It also removes “” characters, if there are any left. One more thing it does is to check if the tag has a closing XHTML slash, and if it does, it puts one in the returned code as well.

3815

Continue reading