| check_plain | drupal-4-7/includes/bootstrap.inc | Encode special characters in a plain-text string for display as HTML. |
| decode_entities | drupal-4-7/includes/unicode.inc | Decode all HTML entities (including numerical ones) to regular UTF-8 bytes.
Double-escaped entities will only be decoded once ("&lt;" becomes "<", not "<"). |
| filter_xss_bad_protocol | drupal-4-7/modules/filter.module | Processes an HTML attribute value and ensures it does not contain an URL
with a disallowed protocol (e.g. javascript:) |
| variable_get | drupal-4-7/includes/bootstrap.inc | Return a persistent variable. |