wp_add_crossorigin_attributes( string $html ): string

6725function wp_add_crossorigin_attributes( string $html ): string {6726	$site_url = site_url();6727 6728	$processor = new WP_HTML_Tag_Processor( $html );6729 6730	// See https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/crossorigin.6731	$cross_origin_tag_attributes = array(6732		'AUDIO'  => array( 'src' ),6733		'LINK'   => array( 'href' ),6734		'SCRIPT' => array( 'src' ),6735		'VIDEO'  => array( 'src', 'poster' ),6736		'SOURCE' => array( 'src' ),6737	);6738 6739	while ( $processor->next_tag() ) {6740		$tag = $processor->get_tag();6741 6742		if ( ! isset( $cross_origin_tag_attributes[ $tag ] ) ) {6743			continue;6744		}6745		$crossorigin = $processor->get_attribute( 'crossorigin' );6746		if ( null !== $crossorigin ) {6747			continue;6748		}6749 6750		if ( 'AUDIO' === $tag || 'VIDEO' === $tag ) {6751			$processor->set_bookmark( 'audio-video-parent' );6752		}6753 6754		$processor->set_bookmark( 'resume' );6755 6756		$sought = false;6757 6758		$is_cross_origin = false;6759 6760		foreach ( $cross_origin_tag_attributes[ $tag ] as $attr ) {6761			$url = $processor->get_attribute( $attr );6762			if ( is_string( $url ) && ! str_starts_with( $url, $site_url ) && ! str_starts_with( $url, '/' ) ) {6763				$is_cross_origin = true;6764			}6765 6766			if ( $is_cross_origin ) {6767				break;6768			}6769		}6770 6771		if ( $is_cross_origin ) {6772			if ( 'SOURCE' === $tag ) {6773				$sought = $processor->seek( 'audio-video-parent' );6774 6775				if ( $sought ) {6776					$processor->set_attribute( 'crossorigin', 'anonymous' );6777				}6778			} else {6779				$processor->set_attribute( 'crossorigin', 'anonymous' );6780			}6781 6782			if ( $sought ) {6783				$processor->seek( 'resume' );6784				$processor->release_bookmark( 'audio-video-parent' );6785			}6786		}6787	}6788 6789	return $processor->get_updated_html();6790}