filter_xss_admin

Versions
4.7 – 7
filter_xss_admin($string)

Very permissive XSS/HTML filter for admin-only use.

Use only for fields where it is impractical to use the whole filter system, but where some (mainly inline) mark-up is desired (so check_plain() is not acceptable).

Allows all tags that can be used inside an HTML body, save for scripts and styles.

▾ 9 functions call filter_xss_admin()

contact_mail_page in modules/contact.module
Site-wide contact page
drupal_site_offline in includes/common.inc
Generates a site off-line message
node_help in modules/node.module
Implementation of hook_help().
phptemplate_page in themes/engines/phptemplate/phptemplate.engine
Prepare the values passed to the theme_page function to be passed into a pluggable template engine.
theme_form_element in includes/theme.inc
Return a themed form element.
theme_forum_list in modules/forum.module
Format the forum listing.
user_register in modules/user.module
_locale_import_one_string in includes/locale.inc
Imports a string into the database
_locale_string_edit_submit in includes/locale.inc
Process string editing form submissions. Saves all translations of one string submitted from a form.

Code

modules/filter.module, line 1111

<?php
function filter_xss_admin($string) {
  return filter_xss($string, array('a', 'abbr', 'acronym', 'address', 'b', 'bdo', 'big', 'blockquote', 'br', 'caption', 'cite', 'code', 'col', 'colgroup', 'dd', 'del', 'dfn', 'div', 'dl', 'dt', 'em', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'hr', 'i', 'img', 'ins', 'kbd', 'li', 'object', 'ol', 'p', 'param', 'pre', 'q', 'samp', 'small', 'span', 'strong', 'sub', 'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'tr', 'tt', 'ul', 'var'));
}
?>
Login or register to post comments
 
 

All source code and documentation on this site is released under the terms of the GNU General Public License, version 2 and later. Drupal is a registered trademark of Dries Buytaert.