11 calls to UrlHelper::stripDangerousProtocols()
- comment_tokens in core/
modules/ comment/ comment.tokens.inc - Implements hook_tokens().
- FormattableMarkup::placeholderFormat in core/
lib/ Drupal/ Component/ Render/ FormattableMarkup.php - Replaces placeholders in a string with values.
- HandlerBase::sanitizeValue in core/
modules/ views/ src/ Plugin/ views/ HandlerBase.php - Sanitize the value for output.
- system_page_attachments in core/
modules/ system/ system.module - Implements hook_page_attachments().
- template_preprocess_aggregator_item in core/
modules/ aggregator/ aggregator.theme.inc - Prepares variables for aggregator item templates.
- template_preprocess_form in core/
includes/ form.inc - Prepares variables for form templates.
- template_preprocess_search_result in core/
modules/ search/ search.pages.inc - Prepares variables for individual search result templates.
- UrlHelper::filterBadProtocol in core/
lib/ Drupal/ Component/ Utility/ UrlHelper.php - Processes an HTML attribute value and strips dangerous protocols from URLs.
- UrlHelper::isExternal in core/
lib/ Drupal/ Component/ Utility/ UrlHelper.php - Determines whether a path is external to Drupal.
- UrlHelperTest::testStripDangerousProtocols in core/
tests/ Drupal/ Tests/ Component/ Utility/ UrlHelperTest.php - Tests dangerous URL protocol filtering.
- XssUnitTest::testBadProtocolStripping in core/
tests/ Drupal/ KernelTests/ Core/ Common/ XssUnitTest.php - Checks that harmful protocols are stripped.
Buggy or inaccurate documentation? Please file an issue. Need support? Need help programming? Connect with the Drupal community.