wp_check_jsonp_callback() WordPress Function
The wp_check_jsonp_callback() function is used to check if a given string is a valid JSONP callback. This is useful for ensuring that a callback provided by a user is safe to use.
wp_check_jsonp_callback( string $callback ) #
Checks that a JSONP callback is a valid JavaScript callback name.
Description
Only allows alphanumeric characters and the dot character in callback function names. This helps to mitigate XSS attacks caused by directly outputting user input.
Parameters
- $callback
(string)(Required)Supplied JSONP callback function name.
Return
(bool) Whether the callback function name is valid.
Source
File: wp-includes/functions.php
function wp_check_jsonp_callback( $callback ) {
if ( ! is_string( $callback ) ) {
return false;
}
preg_replace( '/[^\w\.]/', '', $callback, -1, $illegal_char_count );
return 0 === $illegal_char_count;
}
Expand full source codeCollapse full source codeView on TracView on GitHub
Changelog
| Version | Description |
|---|---|
| 4.6.0 | Introduced. |