wp_allowed_protocols(): string[]

Return

string[]

Array of allowed protocols. Defaults to an array containing 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'irc6', 'ircs', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'sms', 'svn', 'tel', 'fax', 'xmpp', 'webcal', and 'urn'. This covers all common link protocols, except for 'javascript' which should not be allowed for untrusted users.

Hooks fired · 1

One hook fires while wp_allowed_protocols() runs, in this order:

1. 1
   apply_filters( kses_allowed_protocols )filterline 7218 (+15 into the body)

   Filters the list of protocols allowed in HTML attributes.

Uses · 2

• did_action()Retrieves the number of times an action has been fired during the current request.
• apply_filters()Calls the callback functions that have been added to a filter hook.

Used by · 11

• _links_add_base()Callback to add a base URL to relative links in passed content.
• _make_clickable_rel_attr()Helper function used to build the "rel" attribute for a URL when creating an anchor using make_clickable().
• edit_user()Edit user settings based on contents of $_POST
• esc_url()Checks and cleans a URL.
• safecss_filter_attr()Filters an inline style attribute and removes disallowed rules.
• wp_filter_oembed_iframe_title_attribute()Filters the given oEmbed HTML to make sure iframes have a title attribute.
• wp_is_internal_link()Determines whether or not the specified URL is of a host included in the internal hosts list.
• wp_kses()Filters text content and strips out disallowed HTML.
• wp_kses_one_attr()Filters one HTML attribute and ensures its value is allowed.
• wp_rel_callback()Callback to add a rel attribute to HTML A element.
• wp_targeted_link_rel_callback()Callback to add `rel="noopener"` string to HTML A element.

Source

View on Trac ↗View on GitHub ↗

7203function wp_allowed_protocols() {7204	static $protocols = array();7205 7206	if ( empty( $protocols ) ) {7207		$protocols = array( 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'irc6', 'ircs', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'sms', 'svn', 'tel', 'fax', 'xmpp', 'webcal', 'urn' );7208	}7209 7210	if ( ! did_action( 'wp_loaded' ) ) {7211		/**7212		 * Filters the list of protocols allowed in HTML attributes.7213		 *7214		 * @since 3.0.07215		 *7216		 * @param string[] $protocols Array of allowed protocols e.g. 'http', 'ftp', 'tel', and more.7217		 */7218		$protocols = array_unique( (array) apply_filters( 'kses_allowed_protocols', $protocols ) );7219	}7220 7221	return $protocols;7222}

History

Introduced in 3.3.0. Unchanged from 6.7.7 through 7.1.0.

1. 6.7.7
2. 6.8.8
3. 6.9.7
4. 7.0.4
5. 7.1.0

Signature, return type and hooks compared across 5 parsed releases.

About this page

Parsed data

Generated from the wordpress-develop 6.9.7 tag, from src/wp-includes/functions.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.

Corrections

Something wrong on this page? Report it and it gets fixed in the next regeneration.