_wp_kses_allow_pdf_objects( string $url ): bool

2957function _wp_kses_allow_pdf_objects( $url ) {2958	// We're not interested in URLs that contain query strings or fragments.2959	if ( str_contains( $url, '?' ) || str_contains( $url, '#' ) ) {2960		return false;2961	}2962 2963	// If it doesn't have a PDF extension, it's not safe.2964	if ( ! str_ends_with( $url, '.pdf' ) ) {2965		return false;2966	}2967 2968	// If the URL host matches the current site's media URL, it's safe.2969	$upload_info = wp_upload_dir( null, false );2970	$parsed_url  = wp_parse_url( $upload_info['url'] );2971	$upload_host = $parsed_url['host'] ?? '';2972	$upload_port = isset( $parsed_url['port'] ) ? ':' . $parsed_url['port'] : '';2973 2974	if ( str_starts_with( $url, "http://$upload_host$upload_port/" )2975		|| str_starts_with( $url, "https://$upload_host$upload_port/" )2976	) {2977		return true;2978	}2979 2980	return false;2981}