filter_block_kses_value() WordPress Function

filter_block_kses_value is a WordPress function that strips unsafe HTML tags and attributes from a string. It is used to sanitize data before it is stored in the database or displayed on the front end.

filter_block_kses_value( string[]|string $value, array[]|string $allowed_html, string[] $allowed_protocols = array() ) #

Filters and sanitizes a parsed block attribute value to remove non-allowable HTML.


Parameters

$value

(string[]|string)(Required)The attribute value to filter.

$allowed_html

(array[]|string)(Required)An array of allowed HTML elements and attributes, or a context name such as 'post'.

$allowed_protocols

(string[])(Optional)Array of allowed URL protocols.

Default value: array()


Top ↑

Return

(string[]|string) The filtered and sanitized result.


Top ↑

Source

File: wp-includes/blocks.php

function filter_block_kses_value( $value, $allowed_html, $allowed_protocols = array() ) {
	if ( is_array( $value ) ) {
		foreach ( $value as $key => $inner_value ) {
			$filtered_key   = filter_block_kses_value( $key, $allowed_html, $allowed_protocols );
			$filtered_value = filter_block_kses_value( $inner_value, $allowed_html, $allowed_protocols );

			if ( $filtered_key !== $key ) {
				unset( $value[ $key ] );
			}

			$value[ $filtered_key ] = $filtered_value;
		}
	} elseif ( is_string( $value ) ) {
		return wp_kses( $value, $allowed_html, $allowed_protocols );
	}

	return $value;
}


Top ↑

Changelog

Changelog
VersionDescription
5.3.1Introduced.

The content displayed on this page has been created in part by processing WordPress source code files which are made available under the GPLv2 (or a later version) license by theĀ Free Software Foundation. In addition to this, the content includes user-written examples and information. All material is subject to review and curation by the WPPaste.com community.