12 calls to UrlHelper::stripDangerousProtocols() in Drupal 8

check_url in core/includes/common.inc

Strips dangerous protocols from a URI and encodes it for output to HTML.

comment_tokens in core/modules/comment/comment.tokens.inc

Implements hook_tokens().

FormattableMarkup::placeholderFormat in core/lib/Drupal/Component/Render/FormattableMarkup.php

Replaces placeholders in a string with values.

HandlerBase::sanitizeValue in core/modules/views/src/Plugin/views/HandlerBase.php

Sanitize the value for output.

system_page_attachments in core/modules/system/system.module

Implements hook_page_attachments().

template_preprocess_aggregator_item in core/modules/aggregator/aggregator.theme.inc

Prepares variables for aggregator item templates.

template_preprocess_form in core/includes/form.inc

Prepares variables for form templates.

template_preprocess_search_result in core/modules/search/search.pages.inc

Prepares variables for individual search result templates.

UrlHelper::filterBadProtocol in core/lib/Drupal/Component/Utility/UrlHelper.php

Processes an HTML attribute value and strips dangerous protocols from URLs.

UrlHelper::isExternal in core/lib/Drupal/Component/Utility/UrlHelper.php

Determines whether a path is external to Drupal.

UrlHelperTest::testStripDangerousProtocols in core/tests/Drupal/Tests/Component/Utility/UrlHelperTest.php

Tests dangerous url protocol filtering.

XssUnitTest::testBadProtocolStripping in core/tests/Drupal/KernelTests/Core/Common/XssUnitTest.php

Checks that harmful protocols are stripped.