Functions to sanitize values.
See https://docs.backdropcms.org/documentation/writing-secure-code for information on writing secure code.
File
- core/
includes/ common.inc, line 1743 - Common functions that many Backdrop modules will need to reference.
Functions
Name |
Location | Description |
|---|---|---|
| backdrop_attributes |
core/ |
Converts an associative array to an XML/HTML tag attribute string. |
| backdrop_strip_dangerous_protocols |
core/ |
Strips dangerous protocols (e.g. 'javascript:') from a URI. |
| check_markup |
core/ |
Runs all the enabled filters on a piece of text. |
| check_plain |
core/ |
Encodes special characters in a plain-text string for display as HTML. |
| check_url |
core/ |
Strips dangerous protocols from a URI and encodes it for output to HTML. |
| filter_xss |
core/ |
Filters HTML to prevent cross-site-scripting (XSS) vulnerabilities. |
| filter_xss_admin |
core/ |
Applies a very permissive XSS/HTML filter for admin-only use. |
| filter_xss_attributes |
core/ |
Sanitizes attributes. |
| filter_xss_bad_protocol |
core/ |
Processes an HTML attribute value and strips dangerous protocols from URLs. |
| format_string |
core/ |
Formats a string for HTML display by replacing variable placeholders. |
| get_t |
core/ |
Returns the name of the proper localization function. |
| st |
core/ |
Translates a string when some systems are not available. |
| t |
core/ |
Translates a string to the current language or to a given language. |
| _filter_xss_allowed_tags |
core/ |
List of the default tags allowed by filter_xss(). |
| _filter_xss_attributes |
core/ |
Processes a string of HTML attributes. |
| _filter_xss_display_allowed_tags |
core/ |
Human-readable list of the default tags allowed by filter_xss(), for display in help texts. |
| _filter_xss_split |
core/ |
Processes an HTML tag. |