safecss_filter_attr( string $css, string $deprecated = '' ): string

Parameters

$cssstring

A string of CSS rules.

$deprecatedstringoptional

Not used.Default: ''

Return

string

Filtered string of CSS rules.

Hooks fired · 2

2 hooks fire while safecss_filter_attr() runs, in this order:

1. 1
   apply_filters( safe_style_css )filterline 2394 (+19 into the body)

   Filters the list of allowed CSS attributes.

2. 2
   apply_filters( safecss_filter_attr_allow_css )filterline 2688 (+313 into the body)

   Filters the check for unsafe CSS in `safecss_filter_attr`.

Uses · 7

• _deprecated_argument()Marks a function argument as deprecated and inform when it has been used.
• wp_kses_no_null()Removes any invalid control characters in a text string.
• wp_allowed_protocols()Retrieves a list of protocols to allow in HTML attributes.
• apply_filters()Calls the callback functions that have been added to a filter hook.
• str_contains()Polyfill for `str_contains()` function added in PHP 8.0.
• str_starts_with()Polyfill for `str_starts_with()` function added in PHP 8.0.
• wp_kses_bad_protocol()Sanitizes a string and removed disallowed URL protocols.

Used by · 8

• WP_Navigation_Block_Renderer::get_responsive_container_markup()Get the responsive container markup
• WP_Style_Engine_CSS_Declarations::filter_declaration()Filters a CSS property + value pair.
• WP_Theme_JSON::is_safe_css_declaration()Checks that a declaration provided by the user is safe.
• get_block_core_post_featured_image_overlay_element_markup()Generate markup for the HTML element that will be used for the overlay.
• render_block_core_post_featured_image()Renders the `core/post-featured-image` block on the server.
• styles_for_block_core_search()Builds an array of inline styles for the search block.
• wp_get_layout_style()Generates the CSS corresponding to the provided layout.
• wp_kses_attr_check()Determines whether an attribute is allowed.

Source

View on Trac ↗View on GitHub ↗

2375function safecss_filter_attr( $css, $deprecated = '' ) {2376	if ( ! empty( $deprecated ) ) {2377		_deprecated_argument( __FUNCTION__, '2.8.1' ); // Never implemented.2378	}2379 2380	$css = wp_kses_no_null( $css );2381	$css = str_replace( array( "\n", "\r", "\t" ), '', $css );2382 2383	$allowed_protocols = wp_allowed_protocols();2384 2385	$css_array = explode( ';', trim( $css ) );2386 2387	/**2388	 * Filters the list of allowed CSS attributes.2389	 *2390	 * @since 2.8.12391	 *2392	 * @param string[] $attr Array of allowed CSS attributes.2393	 */2394	$allowed_attr = apply_filters(2395		'safe_style_css',2396		array(2397			'background',2398			'background-color',2399			'background-image',2400			'background-position',2401			'background-repeat',2402			'background-size',2403			'background-attachment',2404			'background-blend-mode',2405 2406			'border',2407			'border-radius',2408			'border-width',2409			'border-color',2410			'border-style',2411			'border-right',2412			'border-right-color',2413			'border-right-style',2414			'border-right-width',2415			'border-bottom',2416			'border-bottom-color',2417			'border-bottom-left-radius',2418			'border-bottom-right-radius',2419			'border-bottom-style',2420			'border-bottom-width',2421			'border-bottom-right-radius',2422			'border-bottom-left-radius',2423			'border-left',2424			'border-left-color',2425			'border-left-style',2426			'border-left-width',2427			'border-top',2428			'border-top-color',2429			'border-top-left-radius',2430			'border-top-right-radius',2431			'border-top-style',2432			'border-top-width',2433			'border-top-left-radius',2434			'border-top-right-radius',2435 2436			'border-spacing',2437			'border-collapse',2438			'caption-side',2439 2440			'columns',2441			'column-count',2442			'column-fill',2443			'column-gap',2444			'column-rule',2445			'column-span',2446			'column-width',2447 2448			'color',2449			'filter',2450			'font',2451			'font-family',2452			'font-size',2453			'font-style',2454			'font-variant',

History

Introduced in 2.8.1. Unchanged from 6.7.7 through 7.1.0.

1. 6.7.7
2. 6.8.8
3. 6.9.7
4. 7.0.4
5. 7.1.0

Signature, return type and hooks compared across 5 parsed releases.

About this page

Parsed data

Generated from the wordpress-develop 6.8.8 tag, from src/wp-includes/kses.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.

Corrections

Something wrong on this page? Report it and it gets fixed in the next regeneration.