wp_check_jsonp_callback( string $callback )

Checks that a JSONP callback is a valid JavaScript callback name.

Description

Only allows alphanumeric characters and the dot character in callback function names. This helps to mitigate XSS attacks caused by directly outputting user input.

Parameters

$callback

(string) (Required) Supplied JSONP callback function name.

Return

(bool) Whether the callback function name is valid.

Source

File: wp-includes/functions.php 

function wp_check_jsonp_callback( $callback ) {
	if ( ! is_string( $callback ) ) {
		return false;
	}

	preg_replace( '/[^\w\.]/', '', $callback, -1, $illegal_char_count );

	return 0 === $illegal_char_count;
}

Used By

Used By Description
wp-includes/load.php: wp_is_jsonp_request()

Checks whether current request is a JSONP request, or is expecting a JSONP response.
wp-includes/rest-api/class-wp-rest-server.php: WP_REST_Server::serve_request()

Handles serving a REST API request.

Changelog

Version Description
4.6.0 Introduced.

© 2003–2021 WordPress Foundation
Licensed under the GNU GPLv2+ License.
https://developer.wordpress.org/reference/functions/wp_check_jsonp_callback