function _coder_review_security_fapi_markup_value_warning in Coder 7.2

Same name and namespace in other branches

1. 7 coder_review/includes/coder_review_security.inc \_coder_review_security_fapi_markup_value_warning()

1 call to _coder_review_security_fapi_markup_value_warning()

_coder_review_security_callback in coder_review/includes/coder_review_security.inc

Define the rule callbacks.

File

coder_review/includes/coder_review_security.inc, line 515

This include file implements coder functionality for Drupal Standards.

Code

function _coder_review_security_fapi_markup_value_warning() {
  return array(
    '#text' => "Potential problem: when FAPI element '#type' is set to 'markup' (default), '#value' only accepts filtered text, be sure to use !check_plain(), !filter_xss() or similar to ensure your \$variable is fully sanitized.",
    '#args' => array(
      '!hook_form' => _drupalapi('hook_form'),
      '!check_plain' => _drupalapi('check_plain'),
      '!filter_xss' => _drupalapi('filter_xss'),
    ),
    '#link' => _drupalnode(28984),
  );
}