A WordPress-centric search engine for devs and theme authors



wp_check_jsonp_callback ›

Since4.6.0
Deprecatedn/a
wp_check_jsonp_callback ( $callback )
Parameters:
  • (string) $callback Supplied JSONP callback function.
    Required: Yes
Returns:
  • (bool) True if valid callback, otherwise false.
Defined at:
Codex:

Checks that a JSONP callback is a valid JavaScript callback.

Only allows alphanumeric characters and the dot character in callback function names. This helps to mitigate XSS attacks caused by directly outputting user input.



Source

function wp_check_jsonp_callback( $callback ) {
	if ( ! is_string( $callback ) ) {
		return false;
	}

	preg_replace( '/[^\w\.]/', '', $callback, -1, $illegal_char_count );

	return 0 === $illegal_char_count;
}