Function kses_bad_protocol
This function removes all non-allowed protocols from the beginning of $string. It ignores whitespace and the case of the letters, and it does understand HTML entities. It does its work in a while loop, so it won't be fooled by a string like "javascript:javascript:alert(57)".
type |
$string |
|
type |
$allowed_protocols |
type
|
type |