wp_kses() – Filters text content and strips out disallowed HTML.

You appear to be a bot. Output may be restricted

Description

Filters text content and strips out disallowed HTML.

This function makes sure that only the allowed HTML element names, attribute names, attribute values, and HTML entities will occur in the given text string. This function expects unslashed data.

Usage

$string = wp_kses( $string, $allowed_html, $allowed_protocols );

Parameters

$string: ( string ) required – Text content to filter.
$allowed_html: ( array[]|string ) required – An array of allowed HTML elements and attributes, or a context name such as 'post'.
$allowed_protocols: ( string[] ) optional – Array of allowed URL protocols.

Returns

string Filtered content containing only the allowed HTML.

Source

File name: wordpress/wp-includes/kses.php
Lines: 1 to 9 of 9

function wp_kses( $string, $allowed_html, $allowed_protocols = array() ) {
  if ( empty( $allowed_protocols ) ) {
    $allowed_protocols = wp_allowed_protocols();
  }
  $string = wp_kses_no_null( $string, array( 'slash_zero' => 'keep' ) );
  $string = wp_kses_normalize_entities( $string );
  $string = wp_kses_hook( $string, $allowed_html, $allowed_protocols );
  return wp_kses_split( $string, $allowed_html, $allowed_protocols );
}

View on GitHub View on Trac