You appear to be a bot. Output may be restricted

Description

Retrieves a list of protocols to allow in HTML attributes.

Usage

$string[] = wp_allowed_protocols();

Parameters

Returns

string[] Array of allowed protocols. Defaults to an array containing 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'irc6', 'ircs', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'sms', 'svn', 'tel', 'fax', 'xmpp', 'webcal', and 'urn'. This covers all common link protocols, except for 'javascript' which should not be allowed for untrusted users.

Source

File name: wordpress/wp-includes/functions.php
Lines:

function wp_allowed_protocols() {
  static $protocols = array();

  if ( empty( $protocols ) ) {
    $protocols = array( 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'irc6', 'ircs', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'sms', 'svn', 'tel', 'fax', 'xmpp', 'webcal', 'urn' );
  }

  if ( ! did_action( 'wp_loaded' ) ) {
    
/**
 * Filters the list of protocols allowed in HTML attributes.
 *
 * @since 3.0.0
 *
 * @param string[] $protocols Array of allowed protocols e.g. 'http', 'ftp', 'tel', and more.
 */
    $protocols = array_unique( (array) apply_filters( 'kses_allowed_protocols', $protocols ) );
  }

  return $protocols;
}
 

 View on GitHub View on Trac