# wp-courses/trunk/functions/security.php

WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses, version trunk. 84 lines.

- Page: https://pluginprobe.com/plugins/wp-courses/trunk/code/functions/security.php
- Raw: https://pluginprobe.com/plugins/wp-courses/trunk/raw/functions/security.php
- Modified: 2022-06-18T17:13:20+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/wp-courses/trunk/code/functions/security.php#L10-L20`.

```php
<?php

	// sanitizes lesson video output
	function wpc_sanitize_video($video) {
		$video = wp_kses($video, 
			array(
				'iframe' => array(
					'src' 				=> true, 
					'width' 			=> true, 
					'height' 			=> true, 
					'title' 			=> true, 
					'frameborder' 		=> true, 
					'allow' 			=> true, 
					'allowfullscreen' 	=> true
				),
				'video' => array(
					'autopictureinpicture' 		=> true, 
					'controls' 					=> true, 
					'controlslist' 				=> true, 
					'crossorigin' 				=> true, 
					'disablepictureinpicture' 	=> true, 
					'disableremoteplayback' 	=> true, 
					'height' 					=> true, 
					'loop' 						=> true, 
					'muted' 					=> true,
					'playsinline'				=> true,
					'poster'					=> true,
					'preload'					=> true,
					'src'						=> true,
					'width'						=> true
				),
				'source' => array(
					'src'	=> true,
					'type'	=> true
				)
			)
		);

		if( strpos($video, 'javascript:') === false ){
			return $video;
		} else {
			return;
		}
		
	}

	function wpc_video_and_content_kses(){

		$allowed = wp_kses_allowed_html( 'post' );
        $allowed['style'] = array();
        $allowed['iframe'] = array(
			'src' 				=> true, 
			'width' 			=> true, 
			'height' 			=> true, 
			'title' 			=> true, 
			'frameborder' 		=> true, 
			'allow' 			=> true, 
			'allowfullscreen' 	=> true
		);
		$allowed['video'] = array(
			'autopictureinpicture' 		=> true, 
			'controls' 					=> true, 
			'controlslist' 				=> true, 
			'crossorigin' 				=> true, 
			'disablepictureinpicture' 	=> true, 
			'disableremoteplayback' 	=> true, 
			'height' 					=> true, 
			'loop' 						=> true, 
			'muted' 					=> true,
			'playsinline'				=> true,
			'poster'					=> true,
			'preload'					=> true,
			'src'						=> true,
			'width'						=> true
		);
		$allowed['source'] = array(
			'src'	=> true,
			'type'	=> true
		);

		return $allowed;
	}

?>
```