1 files changed, 11 insertions, 0 deletions
diff --git a/includes/common.inc b/includes/common.inc
index 08545ce0e..a4d4ad02f 100644
--- a/includes/common.inc
+++ b/includes/common.inc
@@ -692,6 +692,17 @@ function check_file($filename) {
 }
 
 /**
+ * Prepare a URL for use in an HTML attribute. Strips harmful protocols.
+ *
+ */
+function check_url($uri) {
+  $uri = htmlspecialchars($uri, ENT_QUOTES);
+  $uri = filter_xss_bad_protocol($uri, FALSE);
+
+  return $uri;
+}
+
+/**
  * @defgroup format Formatting
  * @{
  * Functions to format numbers, strings, dates, etc.