note 130436 added to function.filter-var

This is just a note please don't upvote, In general i saw many notes saying that the filter validates content that could be malicious like: javascript://somejavascript https://exampledomain.com/?xss=some_javascript_that_could_result_in_xss In genera the URL consists of (and not ony those) 1: scheme, 2: domain, 3: path, 4: ?arguments these are used in the url so the browser can understand where we want to go or what we want to do so yes this javascript://somejavascript should be a valid url if an xss is possible the fault lies in the developers hands that he trusted this data without any further sanitization and checks ---- Server IP: 45.112.84.4 Probable Submitter: 80.90.5.137 (proxied: 89.44.158.12) ---- Manual Page -- https://php.net/manual/en/function.filter-var.php Edit -- https://main.php.net/note/edit/130436 Del: integrated -- https://main.php.net/note/delete/130436/integrated Del: useless -- https://main.php.net/note/delete/130436/useless Del: bad code -- https://main.php.net/note/delete/130436/bad+code Del: spam -- https://main.php.net/note/delete/130436/spam Del: non-english -- https://main.php.net/note/delete/130436/non-english Del: in docs -- https://main.php.net/note/delete/130436/in+docs Del: other reasons-- https://main.php.net/note/delete/130436 Reject -- https://main.php.net/note/reject/130436 Search -- https://main.php.net/manage/user-notes.php