protected Renderer::xssFilterAdminIfUnsafe($string)
Applies a very permissive XSS/HTML filter for admin-only use.
Note: This method only filters if $string is not marked safe already. This ensures that HTML intended for display is not filtered.
Parameters
string|\Drupal\Core\Render\Markup $string: A string.
Return value
\Drupal\Core\Render\Markup The escaped string wrapped in a Markup object. If the string is an instance of \Drupal\Component\Render\MarkupInterface, it won't be escaped again.
File
- core/lib/Drupal/Core/Render/Renderer.php, line 704
Class
- Renderer
- Turns a render array into a HTML string.
Namespace
Drupal\Core\Render
Code
protected function xssFilterAdminIfUnsafe($string) { if (!($string instanceof MarkupInterface)) { $string = Xss::filterAdmin($string); } return Markup::create($string); }
Please login to continue.