Browse Source

Task #2969 - Adding a comment.

Ivan Tcholakov 14 years ago
parent
commit
8c7cfffa73
1 changed files with 5 additions and 0 deletions
  1. 5 0
      main/inc/lib/kses-0.2.2/kses.php

+ 5 - 0
main/inc/lib/kses-0.2.2/kses.php

@@ -86,6 +86,11 @@ $kses_allowedentitynames = array(
  * $string. You have to remove any slashes from PHP's magic quotes before you
  * call this function.
  *
+ * The default allowed protocols are 'http', 'https', 'ftp', 'news',
+ * 'nntp', 'telnet', 'gopher', 'mailto'.
+ * This covers all common link protocols, except for 'javascript' which should not
+ * be allowed for untrusted users.
+ *
  * @param string $string
  * @param string $allowed_html
  * @param array $allowed_protocols