[PHP-NOTES] note 130436 added to function.filter-var

[email protected] ("Anonymous") Thu, 31 Jul 2025 13:12:44 +0000 (UTC)
Newsgroups php.notes
Message-ID <[email protected]>
This is just a note please don't upvote, 

In general i saw many notes saying that the filter validates
content that could be malicious like:
javascript://somejavascript
https://exampledomain.com/?xss=some_javascript_that_could_result_in_xss

In genera the URL consists of (and not ony those)
1: scheme,
2: domain,
3: path,
4: ?arguments

these are used in the url so the browser can understand where we want to go or what we want to do

so yes this 
`javascript://somejavascript`
should be a valid url

if an xss is possible the fault lies in the developers hands that he trusted this data without any further sanitization and checks
----
Server IP: 45.112.84.4
Probable Submitter: 80.90.5.137 (proxied: 89.44.158.12)
----
Manual Page -- https://php.net/manual/en/function.filter-var.php
Edit        -- https://main.php.net/note/edit/130436
Del: integrated  -- https://main.php.net/note/delete/130436/integrated
Del: useless     -- https://main.php.net/note/delete/130436/useless
Del: bad code    -- https://main.php.net/note/delete/130436/bad+code
Del: spam        -- https://main.php.net/note/delete/130436/spam
Del: non-english -- https://main.php.net/note/delete/130436/non-english
Del: in docs     -- https://main.php.net/note/delete/130436/in+docs
Del: other reasons-- https://main.php.net/note/delete/130436
Reject      -- https://main.php.net/note/reject/130436
Search      -- https://main.php.net/manage/user-notes.php