wpseek.com
A WordPress-centric search engine for devs and theme authors



wp_allowed_protocols › WordPress Function

Since3.3.0
Deprecatedn/a
› wp_allowed_protocols ( No parameters )
See:
Returns:
  • (string[]) Array of allowed protocols. Defaults to an array containing 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'irc6', 'ircs', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'sms', 'svn', 'tel', 'fax', 'xmpp', 'webcal', and 'urn'. This covers all common link protocols, except for 'javascript' which should not be allowed for untrusted users.
Defined at:
Codex:
Change Log:
  • 4.3.0
  • 4.7.0
  • 5.3.0
  • 5.6.0

Retrieves a list of protocols to allow in HTML attributes.



Related Functions: wp_kses_bad_protocol, add_allowed_options, wp_kses_allowed_html, _wp_get_allowed_postdata, allowed_tags

Source 

function wp_allowed_protocols() {
	static $protocols = array();

	if ( empty( $protocols ) ) {
		$protocols = array( 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'irc6', 'ircs', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'sms', 'svn', 'tel', 'fax', 'xmpp', 'webcal', 'urn' );
	}

	if ( ! did_action( 'wp_loaded' ) ) {
		/**
		 * Filters the list of protocols allowed in HTML attributes.
		 *
		 * @since 3.0.0
		 *
		 * @param string[] $protocols Array of allowed protocols e.g. 'http', 'ftp', 'tel', and more.
		 */
		$protocols = array_unique( (array) apply_filters( 'kses_allowed_protocols', $protocols ) );
	}

	return $protocols;
}