Sanitization functions
Functions to sanitize values.
Functions
| Name | Location | Description |
|---|---|---|
| check_url | includes/common.inc | Prepare a URL for use in an HTML attribute. Strips harmful protocols. |
| filter_xss | includes/common.inc | Filter XSS. |
| filter_xss_admin | includes/common.inc | Very permissive XSS/HTML filter for admin-only use. |
| filter_xss_bad_protocol | includes/common.inc | Processes an HTML attribute value and ensures it does not contain an URL with a disallowed protocol (e.g. javascript:). |
| _filter_xss_attributes | includes/common.inc | Processes a string of HTML attributes. |
| _filter_xss_split | includes/common.inc | Processes an HTML tag. |