PHP kses_bad_protocol_once示例

示例#1

文件： kses.php 项目： portokallidis/Metamorphosis-Meducator

function kses_bad_protocol($string, $allowed_protocols)
{
    $string = kses_no_null($string);
    $string = preg_replace('/\\xad+/', '', $string);
    # deals with Opera "feature"
    $string2 = $string . 'a';
    while ($string != $string2) {
        $string2 = $string;
        $string = kses_bad_protocol_once($string, $allowed_protocols);
    }
    # while
    return $string;
}

示例#2

文件： kses.php 项目： omaoibrahim/chamilo-lms

/**
 * Sanitize string from bad protocols.
 *
 * This function removes all non-allowed protocols from the beginning of
 * $string. It ignores whitespace and the case of the letters, and it does
 * understand HTML entities. It does its work in a while loop, so it won't be
 * fooled by a string like "javascript:javascript:alert(57)".
 *
 * @param string $string Content to filter bad protocols from
 * @param array $allowed_protocols Allowed protocols to keep
 * @return string Filtered content
 */
function kses_bad_protocol($string, $allowed_protocols)
{
    $string = kses_no_null($string);
    $string = preg_replace('/([^\\xc3-\\xcf])\\xad+/', '\\1', $string);
    // deals with Opera "feature" -- moodle utf8 fix
    $string2 = $string . 'a';
    while ($string != $string2) {
        $string2 = $string;
        $string = kses_bad_protocol_once($string, $allowed_protocols);
    }
    // while
    return $string;
}

示例#3

文件： kses.php 项目： maexlich/boinc-igemathome

function kses_bad_protocol($string, $allowed_protocols)
{
    $string = kses_no_null($string);
    $string2 = $string . 'a';
    while ($string != $string2) {
        $string2 = $string;
        $string = kses_bad_protocol_once($string, $allowed_protocols);
    }
    # while
    return $string;
}

示例#4

文件： lib-kses.php 项目： ariep/ZenPhoto20-DEV

function kses_bad_protocol($string, $allowed_protocols)
{
    ###############################################################################
    # This function removes all non-allowed protocols from the beginning of
    # $string. It ignores whitespace and the case of the letters, and it does
    # understand HTML entities. It does its work in a while loop, so it won't be
    # fooled by a string like "javascript:javascript:alert(57)".
    ###############################################################################
    $string = kses_no_null($string);
    $string = preg_replace('/\\xad+/', '', $string);
    # deals with Opera "feature"
    $string2 = $string . 'a';
    while ($string != $string2) {
        $string2 = $string;
        $string = kses_bad_protocol_once($string, $allowed_protocols);
    }
    # while
    return $string;
}