10 calls to UrlHelper::stripDangerousProtocols()
- BareHtmlPageRenderer::systemPageAttachments in core/
lib/ Drupal/ Core/ Render/ BareHtmlPageRenderer.php - Helper for system_page_attachments.
- CommentTokensHooks::tokens in core/
modules/ comment/ src/ Hook/ CommentTokensHooks.php - Implements hook_tokens().
- FormattableMarkup::placeholderFormat in core/
lib/ Drupal/ Component/ Render/ FormattableMarkup.php - Replaces placeholders in a string with values.
- FormPreprocess::preprocessForm in core/
lib/ Drupal/ Core/ Form/ FormPreprocess.php - Prepares variables for form templates.
- HandlerBase::sanitizeValue in core/
modules/ views/ src/ Plugin/ views/ HandlerBase.php - Sanitize the value for output.
- SearchThemeHooks::preprocessSearchResult in core/
modules/ search/ src/ Hook/ SearchThemeHooks.php - Prepares variables for individual search result templates.
- UrlHelper::filterBadProtocol in core/
lib/ Drupal/ Component/ Utility/ UrlHelper.php - Processes an HTML attribute value and strips dangerous protocols from URLs.
- UrlHelper::isExternal in core/
lib/ Drupal/ Component/ Utility/ UrlHelper.php - Determines whether a path is external to Drupal.
- UrlHelperTest::testStripDangerousProtocols in core/
tests/ Drupal/ Tests/ Component/ Utility/ UrlHelperTest.php - Tests dangerous URL protocol filtering.
- XssUnitTest::testBadProtocolStripping in core/
tests/ Drupal/ KernelTests/ Core/ Common/ XssUnitTest.php - Checks that harmful protocols are stripped.
Buggy or inaccurate documentation? Please file an issue. Need support? Need help programming? Connect with the Drupal community.