Mini Shell

<?php
/**
 * kses 0.2.2 - HTML/XHTML filter that only allows some elements and attributes
 * Copyright (C) 2002, 2003, 2005  Ulf Harnhammar
 *
 * This program is free software and open source software; you can redistribute
 * it and/or modify it under the terms of the GNU General Public License as
 * published by the Free Software Foundation; either version 2 of the License,
 * or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
 * more details.
 *
 * You should have received a copy of the GNU General Public License along
 * with this program; if not, write to the Free Software Foundation, Inc.,
 * 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
 * http://www.gnu.org/licenses/gpl.html
 *
 * [kses strips evil scripts!]
 *
 * Added wp_ prefix to avoid conflicts with existing kses users
 *
 * @version 0.2.2
 * @copyright (C) 2002, 2003, 2005
 * @author Ulf Harnhammar <http://advogato.org/person/metaur/>
 *
 * @package External
 * @subpackage KSES
 */

/**
 * Specifies the default allowable HTML tags.
 *
 * Using `CUSTOM_TAGS` is not recommended and should be considered deprecated. The
 * {@see 'wp_kses_allowed_html'} filter is more powerful and supplies context.
 *
 * When using this constant, make sure to set all of these globals to arrays:
 *
 *  - `$allowedposttags`
 *  - `$allowedtags`
 *  - `$allowedentitynames`
 *  - `$allowedxmlentitynames`
 *
 * @see wp_kses_allowed_html()
 * @since 1.2.0
 *
 * @var array[]|false Array of default allowable HTML tags, or false to use the defaults.
 */
if ( ! defined( 'CUSTOM_TAGS' ) ) {
	define( 'CUSTOM_TAGS', false );
}

// Ensure that these variables are added to the global namespace
// (e.g. if using namespaces / autoload in the current PHP environment).
global $allowedposttags, $allowedtags, $allowedentitynames, $allowedxmlentitynames;

if ( ! CUSTOM_TAGS ) {
	/**
	 * KSES global for default allowable HTML tags.
	 *
	 * Can be overridden with the `CUSTOM_TAGS` constant.
	 *
	 * @var array[] $allowedposttags Array of default allowable HTML tags.
	 * @since 2.0.0
	 */
	$allowedposttags = array(
		'address'    => array(),
		'a'          => array(
			'href'     => true,
			'rel'      => true,
			'rev'      => true,
			'name'     => true,
			'target'   => true,
			'download' => array(
				'valueless' => 'y',
			),
		),
		'abbr'       => array(),
		'acronym'    => array(),
		'area'       => array(
			'alt'    => true,
			'coords' => true,
			'href'   => true,
			'nohref' => true,
			'shape'  => true,
			'target' => true,
		),
		'article'    => array(
			'align' => true,
		),
		'aside'      => array(
			'align' => true,
		),
		'audio'      => array(
			'autoplay' => true,
			'controls' => true,
			'loop'     => true,
			'muted'    => true,
			'preload'  => true,
			'src'      => true,
		),
		'b'          => array(),
		'bdo'        => array(),
		'big'        => array(),
		'blockquote' => array(
			'cite' => true,
		),
		'br'         => array(),
		'button'     => array(
			'disabled' => true,
			'name'     => true,
			'type'     => true,
			'value'    => true,
		),
		'caption'    => array(
			'align' => true,
		),
		'cite'       => array(),
		'code'       => array(),
		'col'        => array(
			'align'   => true,
			'char'    => true,
			'charoff' => true,
			'span'    => true,
			'valign'  => true,
			'width'   => true,
		),
		'colgroup'   => array(
			'align'   => true,
			'char'    => true,
			'charoff' => true,
			'span'    => true,
			'valign'  => true,
			'width'   => true,
		),
		'del'        => array(
			'datetime' => true,
		),
		'dd'         => array(),
		'dfn'        => array(),
		'details'    => array(
			'align' => true,
			'open'  => true,
		),
		'div'        => array(
			'align' => true,
		),
		'dl'         => array(),
		'dt'         => array(),
		'em'         => array(),
		'fieldset'   => array(),
		'figure'     => array(
			'align' => true,
		),
		'figcaption' => array(
			'align' => true,
		),
		'font'       => array(
			'color' => true,
			'face'  => true,
			'size'  => true,
		),
		'footer'     => array(
			'align' => true,
		),
		'h1'         => array(
			'align' => true,
		),
		'h2'         => array(
			'align' => true,
		),
		'h3'         => array(
			'align' => true,
		),
		'h4'         => array(
			'align' => true,
		),
		'h5'         => array(
			'align' => true,
		),
		'h6'         => array(
			'align' => true,
		),
		'header'     => array(
			'align' => true,
		),
		'hgroup'     => array(
			'align' => true,
		),
		'hr'         => array(
			'align'   => true,
			'noshade' => true,
			'size'    => true,
			'width'   => true,
		),
		'i'          => array(),
		'img'        => array(
			'alt'      => true,
			'align'    => true,
			'border'   => true,
			'height'   => true,
			'hspace'   => true,
			'loading'  => true,
			'longdesc' => true,
			'vspace'   => true,
			'src'      => true,
			'usemap'   => true,
			'width'    => true,
		),
		'ins'        => array(
			'datetime' => true,
			'cite'     => true,
		),
		'kbd'        => array(),
		'label'      => array(
			'for' => true,
		),
		'legend'     => array(
			'align' => true,
		),
		'li'         => array(
			'align' => true,
			'value' => true,
		),
		'main'       => array(
			'align' => true,
		),
		'map'        => array(
			'name' => true,
		),
		'mark'       => array(),
		'menu'       => array(
			'type' => true,
		),
		'nav'        => array(
			'align' => true,
		),
		'object'     => array(
			'data' => array(
				'required'       => true,
				'value_callback' => '_wp_kses_allow_pdf_objects',
			),
			'type' => array(
				'required' => true,
				'values'   => array( 'application/pdf' ),
			),
		),
		'p'          => array(
			'align' => true,
		),
		'pre'        => array(
			'width' => true,
		),
		'q'          => array(
			'cite' => true,
		),
		'rb'         => array(),
		'rp'         => array(),
		'rt'         => array(),
		'rtc'        => array(),
		'ruby'       => array(),
		's'          => array(),
		'samp'       => array(),
		'span'       => array(
			'align' => true,
		),
		'section'    => array(
			'align' => true,
		),
		'small'      => array(),
		'strike'     => array(),
		'strong'     => array(),
		'sub'        => array(),
		'summary'    => array(
			'align' => true,
		),
		'sup'        => array(),
		'table'      => array(
			'align'       => true,
			'bgcolor'     => true,
			'border'      => true,
			'cellpadding' => true,
			'cellspacing' => true,
			'rules'       => true,
			'summary'     => true,
			'width'       => true,
		),
		'tbody'      => array(
			'align'   => true,
			'char'    => true,
			'charoff' => true,
			'valign'  => true,
		),
		'td'         => array(
			'abbr'    => true,
			'align'   => true,
			'axis'    => true,
			'bgcolor' => true,
			'char'    => true,
			'charoff' => true,
			'colspan' => true,
			'headers' => true,
			'height'  => true,
			'nowrap'  => true,
			'rowspan' => true,
			'scope'   => true,
			'valign'  => true,
			'width'   => true,
		),
		'textarea'   => array(
			'cols'     => true,
			'rows'     => true,
			'disabled' => true,
			'name'     => true,
			'readonly' => true,
		),
		'tfoot'      => array(
			'align'   => true,
			'char'    => true,
			'charoff' => true,
			'valign'  => true,
		),
		'th'         => array(
			'abbr'    => true,
			'align'   => true,
			'axis'    => true,
			'bgcolor' => true,
			'char'    => true,
			'charoff' => true,
			'colspan' => true,
			'headers' => true,
			'height'  => true,
			'nowrap'  => true,
			'rowspan' => true,
			'scope'   => true,
			'valign'  => true,
			'width'   => true,
		),
		'thead'      => array(
			'align'   => true,
			'char'    => true,
			'charoff' => true,
			'valign'  => true,
		),
		'title'      => array(),
		'tr'         => array(
			'align'   => true,
			'bgcolor' => true,
			'char'    => true,
			'charoff' => true,
			'valign'  => true,
		),
		'track'      => array(
			'default' => true,
			'kind'    => true,
			'label'   => true,
			'src'     => true,
			'srclang' => true,
		),
		'tt'         => array(),
		'u'          => array(),
		'ul'         => array(
			'type' => true,
		),
		'ol'         => array(
			'start'    => true,
			'type'     => true,
			'reversed' => true,
		),
		'var'        => array(),
		'video'      => array(
			'autoplay'    => true,
			'controls'    => true,
			'height'      => true,
			'loop'        => true,
			'muted'       => true,
			'playsinline' => true,
			'poster'      => true,
			'preload'     => true,
			'src'         => true,
			'width'       => true,
		),
	);

	/**
	 * @var array[] $allowedtags Array of KSES allowed HTML elements.
	 * @since 1.0.0
	 */
	$allowedtags = array(
		'a'          => array(
			'href'  => true,
			'title' => true,
		),
		'abbr'       => array(
			'title' => true,
		),
		'acronym'    => array(
			'title' => true,
		),
		'b'          => array(),
		'blockquote' => array(
			'cite' => true,
		),
		'cite'       => array(),
		'code'       => array(),
		'del'        => array(
			'datetime' => true,
		),
		'em'         => array(),
		'i'          => array(),
		'q'          => array(
			'cite' => true,
		),
		's'          => array(),
		'strike'     => array(),
		'strong'     => array(),
	);

	/**
	 * @var string[] $allowedentitynames Array of KSES allowed HTML entity names.
	 * @since 1.0.0
	 */
	$allowedentitynames = array(
		'nbsp',
		'iexcl',
		'cent',
		'pound',
		'curren',
		'yen',
		'brvbar',
		'sect',
		'uml',
		'copy',
		'ordf',
		'laquo',
		'not',
		'shy',
		'reg',
		'macr',
		'deg',
		'plusmn',
		'acute',
		'micro',
		'para',
		'middot',
		'cedil',
		'ordm',
		'raquo',
		'iquest',
		'Agrave',
		'Aacute',
		'Acirc',
		'Atilde',
		'Auml',
		'Aring',
		'AElig',
		'Ccedil',
		'Egrave',
		'Eacute',
		'Ecirc',
		'Euml',
		'Igrave',
		'Iacute',
		'Icirc',
		'Iuml',
		'ETH',
		'Ntilde',
		'Ograve',
		'Oacute',
		'Ocirc',
		'Otilde',
		'Ouml',
		'times',
		'Oslash',
		'Ugrave',
		'Uacute',
		'Ucirc',
		'Uuml',
		'Yacute',
		'THORN',
		'szlig',
		'agrave',
		'aacute',
		'acirc',
		'atilde',
		'auml',
		'aring',
		'aelig',
		'ccedil',
		'egrave',
		'eacute',
		'ecirc',
		'euml',
		'igrave',
		'iacute',
		'icirc',
		'iuml',
		'eth',
		'ntilde',
		'ograve',
		'oacute',
		'ocirc',
		'otilde',
		'ouml',
		'divide',
		'oslash',
		'ugrave',
		'uacute',
		'ucirc',
		'uuml',
		'yacute',
		'thorn',
		'yuml',
		'quot',
		'amp',
		'lt',
		'gt',
		'apos',
		'OElig',
		'oelig',
		'Scaron',
		'scaron',
		'Yuml',
		'circ',
		'tilde',
		'ensp',
		'emsp',
		'thinsp',
		'zwnj',
		'zwj',
		'lrm',
		'rlm',
		'ndash',
		'mdash',
		'lsquo',
		'rsquo',
		'sbquo',
		'ldquo',
		'rdquo',
		'bdquo',
		'dagger',
		'Dagger',
		'permil',
		'lsaquo',
		'rsaquo',
		'euro',
		'fnof',
		'Alpha',
		'Beta',
		'Gamma',
		'Delta',
		'Epsilon',
		'Zeta',
		'Eta',
		'Theta',
		'Iota',
		'Kappa',
		'Lambda',
		'Mu',
		'Nu',
		'Xi',
		'Omicron',
		'Pi',
		'Rho',
		'Sigma',
		'Tau',
		'Upsilon',
		'Phi',
		'Chi',
		'Psi',
		'Omega',
		'alpha',
		'beta',
		'gamma',
		'delta',
		'epsilon',
		'zeta',
		'eta',
		'theta',
		'iota',
		'kappa',
		'lambda',
		'mu',
		'nu',
		'xi',
		'omicron',
		'pi',
		'rho',
		'sigmaf',
		'sigma',
		'tau',
		'upsilon',
		'phi',
		'chi',
		'psi',
		'omega',
		'thetasym',
		'upsih',
		'piv',
		'bull',
		'hellip',
		'prime',
		'Prime',
		'oline',
		'frasl',
		'weierp',
		'image',
		'real',
		'trade',
		'alefsym',
		'larr',
		'uarr',
		'rarr',
		'darr',
		'harr',
		'crarr',
		'lArr',
		'uArr',
		'rArr',
		'dArr',
		'hArr',
		'forall',
		'part',
		'exist',
		'empty',
		'nabla',
		'isin',
		'notin',
		'ni',
		'prod',
		'sum',
		'minus',
		'lowast',
		'radic',
		'prop',
		'infin',
		'ang',
		'and',
		'or',
		'cap',
		'cup',
		'int',
		'sim',
		'cong',
		'asymp',
		'ne',
		'equiv',
		'le',
		'ge',
		'sub',
		'sup',
		'nsub',
		'sube',
		'supe',
		'oplus',
		'otimes',
		'perp',
		'sdot',
		'lceil',
		'rceil',
		'lfloor',
		'rfloor',
		'lang',
		'rang',
		'loz',
		'spades',
		'clubs',
		'hearts',
		'diams',
		'sup1',
		'sup2',
		'sup3',
		'frac14',
		'frac12',
		'frac34',
		'there4',
	);

	/**
	 * @var string[] $allowedxmlentitynames Array of KSES allowed XML entity names.
	 * @since 5.5.0
	 */
	$allowedxmlentitynames = array(
		'amp',
		'lt',
		'gt',
		'apos',
		'quot',
	);

	$allowedposttags = array_map( '_wp_add_global_attributes', $allowedposttags );
} else {
	$required_kses_globals = array(
		'allowedposttags',
		'allowedtags',
		'allowedentitynames',
		'allowedxmlentitynames',
	);
	$missing_kses_globals  = array();

	foreach ( $required_kses_globals as $global_name ) {
		if ( ! isset( $GLOBALS[ $global_name ] ) || ! is_array( $GLOBALS[ $global_name ] ) ) {
			$missing_kses_globals[] = '<code>$' . $global_name . '</code>';
		}
	}

	if ( $missing_kses_globals ) {
		_doing_it_wrong(
			'wp_kses_allowed_html',
			sprintf(
				/* translators: 1: CUSTOM_TAGS, 2: Global variable names. */
				__( 'When using the %1$s constant, make sure to set these globals to an array: %2$s.' ),
				'<code>CUSTOM_TAGS</code>',
				implode( ', ', $missing_kses_globals )
			),
			'6.2.0'
		);
	}

	$allowedtags     = wp_kses_array_lc( $allowedtags );
	$allowedposttags = wp_kses_array_lc( $allowedposttags );
}

/**
 * Filters text content and strips out disallowed HTML.
 *
 * This function makes sure that only the allowed HTML element names, attribute
 * names, attribute values, and HTML entities will occur in the given text string.
 *
 * This function expects unslashed data.
 *
 * @see wp_kses_post() for specifically filtering post content and fields.
 * @see wp_allowed_protocols() for the default allowed protocols in link URLs.
 *
 * @since 1.0.0
 *
 * @param string         $content           Text content to filter.
 * @param array[]|string $allowed_html      An array of allowed HTML elements and attributes,
 *                                          or a context name such as 'post'. See wp_kses_allowed_html()
 *                                          for the list of accepted context names.
 * @param string[]       $allowed_protocols Optional. Array of allowed URL protocols.
 *                                          Defaults to the result of wp_allowed_protocols().
 * @return string Filtered content containing only the allowed HTML.
 */
function wp_kses( $content, $allowed_html, $allowed_protocols = array() ) {
	if ( empty( $allowed_protocols ) ) {
		$allowed_protocols = wp_allowed_protocols();
	}

	$content = wp_kses_no_null( $content, array( 'slash_zero' => 'keep' ) );
	$content = wp_kses_normalize_entities( $content );
	$content = wp_kses_hook( $content, $allowed_html, $allowed_protocols );

	return wp_kses_split( $content, $allowed_html, $allowed_protocols );
}

/**
 * Filters one HTML attribute and ensures its value is allowed.
 *
 * This function can escape data in some situations where `wp_kses()` must strip the whole attribute.
 *
 * @since 4.2.3
 *
 * @param string $attr    The 'whole' attribute, including name and value.
 * @param string $element The HTML element name to which the attribute belongs.
 * @return string Filtered attribute.
 */
function wp_kses_one_attr( $attr, $element ) {
	$uris              = wp_kses_uri_attributes();
	$allowed_html      = wp_kses_allowed_html( 'post' );
	$allowed_protocols = wp_allowed_protocols();
	$attr              = wp_kses_no_null( $attr, array( 'slash_zero' => 'keep' ) );

	// Preserve leading and trailing whitespace.
	$matches = array();
	preg_match( '/^\s*/', $attr, $matches );
	$lead = $matches[0];
	preg_match( '/\s*$/', $attr, $matches );
	$trail = $matches[0];
	if ( empty( $trail ) ) {
		$attr = substr( $attr, strlen( $lead ) );
	} else {
		$attr = substr( $attr, strlen( $lead ), -strlen( $trail ) );
	}

	// Parse attribute name and value from input.
	$split = preg_split( '/\s*=\s*/', $attr, 2 );
	$name  = $split[0];
	if ( count( $split ) == 2 ) {
		$value = $split[1];

		// Remove quotes surrounding $value.
		// Also guarantee correct quoting in $attr for this one attribute.
		if ( '' === $value ) {
			$quote = '';
		} else {
			$quote = $value[0];
		}
		if ( '"' === $quote || "'" === $quote ) {
			if ( substr( $value, -1 ) != $quote ) {
				return '';
			}
			$value = substr( $value, 1, -1 );
		} else {
			$quote = '"';
		}

		// Sanitize quotes, angle braces, and entities.
		$value = esc_attr( $value );

		// Sanitize URI values.
		if ( in_array( strtolower( $name ), $uris, true ) ) {
			$value = wp_kses_bad_protocol( $value, $allowed_protocols );
		}

		$attr  = "$name=$quote$value$quote";
		$vless = 'n';
	} else {
		$value = '';
		$vless = 'y';
	}

	// Sanitize attribute by name.
	wp_kses_attr_check( $name, $value, $attr, $vless, $element, $allowed_html );

	// Restore whitespace.
	return $lead . $attr . $trail;
}

/**
 * Returns an array of allowed HTML tags and attributes for a given context.
 *
 * @since 3.5.0
 * @since 5.0.1 `form` removed as allowable HTML tag.
 *
 * @global array $allowedposttags
 * @global array $allowedtags
 * @global array $allowedentitynames
 *
 * @param string|array $context The context for which to retrieve tags. Allowed values are 'post',
 *                              'strip', 'data', 'entities', or the name of a field filter such as
 *                              'pre_user_description', or an array of allowed HTML elements and attributes.
 * @return array Array of allowed HTML tags and their allowed attributes.
 */
function wp_kses_allowed_html( $context = '' ) {
	global $allowedposttags, $allowedtags, $allowedentitynames;

	if ( is_array( $context ) ) {
		// When `$context` is an array it's actually an array of allowed HTML elements and attributes.
		$html    = $context;
		$context = 'explicit';

		/**
		 * Filters the HTML tags that are allowed for a given context.
		 *
		 * HTML tags and attribute names are case-insensitive in HTML but must be
		 * added to the KSES allow list in lowercase. An item added to the allow list
		 * in upper or mixed case will not recognized as permitted by KSES.
		 *
		 * @since 3.5.0
		 *
		 * @param array[] $html    Allowed HTML tags.
		 * @param string  $context Context name.
		 */
		return apply_filters( 'wp_kses_allowed_html', $html, $context );
	}

	switch ( $context ) {
		case 'post':
			/** This filter is documented in wp-includes/kses.php */
			$tags = apply_filters( 'wp_kses_allowed_html', $allowedposttags, $context );

			// 5.0.1 removed the `<form>` tag, allow it if a filter is allowing it's sub-elements `<input>` or `<select>`.
			if ( ! CUSTOM_TAGS && ! isset( $tags['form'] ) && ( isset( $tags['input'] ) || isset( $tags['select'] ) ) ) {
				$tags = $allowedposttags;

				$tags['form'] = array(
					'action'         => true,
					'accept'         => true,
					'accept-charset' => true,
					'enctype'        => true,
					'method'         => true,
					'name'           => true,
					'target'         => true,
				);

				/** This filter is documented in wp-includes/kses.php */
				$tags = apply_filters( 'wp_kses_allowed_html', $tags, $context );
			}

			return $tags;

		case 'user_description':
		case 'pre_user_description':
			$tags             = $allowedtags;
			$tags['a']['rel'] = true;
			/** This filter is documented in wp-includes/kses.php */
			return apply_filters( 'wp_kses_allowed_html', $tags, $context );

		case 'strip':
			/** This filter is documented in wp-includes/kses.php */
			return apply_filters( 'wp_kses_allowed_html', array(), $context );

		case 'entities':
			/** This filter is documented in wp-includes/kses.php */
			return apply_filters( 'wp_kses_allowed_html', $allowedentitynames, $context );

		case 'data':
		default:
			/** This filter is documented in wp-includes/kses.php */
			return apply_filters( 'wp_kses_allowed_html', $allowedtags, $context );
	}
}

/**
 * You add any KSES hooks here.
 *
 * There is currently only one KSES WordPress hook, {@see 'pre_kses'}, and it is called here.
 * All parameters are passed to the hooks and expected to receive a string.
 *
 * @since 1.0.0
 *
 * @param string         $content           Content to filter through KSES.
 * @param array[]|string $allowed_html      An array of allowed HTML elements and attributes,
 *                                          or a context name such as 'post'. See wp_kses_allowed_html()
 *                                          for the list of accepted context names.
 * @param string[]       $allowed_protocols Array of allowed URL protocols.
 * @return string Filtered content through {@see 'pre_kses'} hook.
 */
function wp_kses_hook( $content, $allowed_html, $allowed_protocols ) {
	/**
	 * Filters content to be run through KSES.
	 *
	 * @since 2.3.0
	 *
	 * @param string         $content           Content to filter through KSES.
	 * @param array[]|string $allowed_html      An array of allowed HTML elements and attributes,
	 *                                          or a context name such as 'post'. See wp_kses_allowed_html()
	 *                                          for the list of accepted context names.
	 * @param string[]       $allowed_protocols Array of allowed URL protocols.
	 */
	return apply_filters( 'pre_kses', $content, $allowed_html, $allowed_protocols );
}

/**
 * Returns the version number of KSES.
 *
 * @since 1.0.0
 *
 * @return string KSES version number.
 */
function wp_kses_version() {
	return '0.2.2';
}

/**
 * Searches for HTML tags, no matter how malformed.
 *
 * It also matches stray `>` characters.
 *
 * @since 1.0.0
 *
 * @global array[]|string $pass_allowed_html      An array of allowed HTML elements and attributes,
 *                                                or a context name such as 'post'.
 * @global string[]       $pass_allowed_protocols Array of allowed URL protocols.
 *
 * @param string         $content           Content to filter.
 * @param array[]|string $allowed_html      An array of allowed HTML elements and attributes,
 *                                          or a context name such as 'post'. See wp_kses_allowed_html()
 *                                          for the list of accepted context names.
 * @param string[]       $allowed_protocols Array of allowed URL protocols.
 * @return string Content with fixed HTML tags
 */
function wp_kses_split( $content, $allowed_html, $allowed_protocols ) {
	global $pass_allowed_html, $pass_allowed_protocols;

	$pass_allowed_html      = $allowed_html;
	$pass_allowed_protocols = $allowed_protocols;

	return preg_replace_callback( '%(<!--.*?(-->|$))|(<[^>]*(>|$)|>)%', '_wp_kses_split_callback', $content );
}

/**
 * Returns an array of HTML attribute names whose value contains a URL.
 *
 * This function returns a list of all HTML attributes that must contain
 * a URL according to the HTML specification.
 *
 * This list includes URI attributes both allowed and disallowed by KSES.
 *
 * @link https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes
 *
 * @since 5.0.1
 *
 * @return string[] HTML attribute names whose value contains a URL.
 */
function wp_kses_uri_attributes() {
	$uri_attributes = array(
		'action',
		'archive',
		'background',
		'cite',
		'classid',
		'codebase',
		'data',
		'formaction',
		'href',
		'icon',
		'longdesc',
		'manifest',
		'poster',
		'profile',
		'src',
		'usemap',
		'xmlns',
	);

	/**
	 * Filters the list of attributes that are required to contain a URL.
	 *
	 * Use this filter to add any `data-` attributes that are required to be
	 * validated as a URL.
	 *
	 * @since 5.0.1
	 *
	 * @param string[] $uri_attributes HTML attribute names whose value contains a URL.
	 */
	$uri_attributes = apply_filters( 'wp_kses_uri_attributes', $uri_attributes );

	return $uri_attributes;
}

/**
 * Callback for `wp_kses_split()`.
 *
 * @since 3.1.0
 * @access private
 * @ignore
 *
 * @global array[]|string $pass_allowed_html      An array of allowed HTML elements and attributes,
 *                                                or a context name such as 'post'.
 * @global string[]       $pass_allowed_protocols Array of allowed URL protocols.
 *
 * @param array $matches preg_replace regexp matches
 * @return string
 */
function _wp_kses_split_callback( $matches ) {
	global $pass_allowed_html, $pass_allowed_protocols;

	return wp_kses_split2( $matches[0], $pass_allowed_html, $pass_allowed_protocols );
}

/**
 * Callback for `wp_kses_split()` for fixing malformed HTML tags.
 *
 * This function does a lot of work. It rejects some very malformed things like
 * `<:::>`. It returns an empty string, if the element isn't allowed (look ma, no
 * `strip_tags()`!). Otherwise it splits the tag into an element and an attribute
 * list.
 *
 * After the tag is split into an element and an attribute list, it is run
 * through another filter which will remove illegal attributes and once that is
 * completed, will be returned.
 *
 * @access private
 * @ignore
 * @since 1.0.0
 *
 * @param string         $content           Content to filter.
 * @param array[]|string $allowed_html      An array of allowed HTML elements and attributes,
 *                                          or a context name such as 'post'. See wp_kses_allowed_html()
 *                                          for the list of accepted context names.
 * @param string[]       $allowed_protocols Array of allowed URL protocols.
 * @return string Fixed HTML element
 */
function wp_kses_split2( $content, $allowed_html, $allowed_protocols ) {
	$content = wp_kses_stripslashes( $content );

	// It matched a ">" character.
	if ( '<' !== substr( $content, 0, 1 ) ) {
		return '&gt;';
	}

	// Allow HTML comments.
	if ( '<!--' === substr( $content, 0, 4 ) ) {
		$content = str_replace( array( '<!--', '-->' ), '', $content );
		while ( ( $newstring = wp_kses( $content, $allowed_html, $allowed_protocols ) ) != $content ) {
			$content = $newstring;
		}
		if ( '' === $content ) {
			return '';
		}
		// Prevent multiple dashes in comments.
		$content = preg_replace( '/--+/', '-', $content );
		// Prevent three dashes closing a comment.
		$content = preg_replace( '/-$/', '', $content );
		return "<!--{$content}-->";
	}

	// It's seriously malformed.
	if ( ! preg_match( '%^<\s*(/\s*)?([a-zA-Z0-9-]+)([^>]*)>?$%', $content, $matches ) ) {
		return '';
	}

	$slash    = trim( $matches[1] );
	$elem     = $matches[2];
	$attrlist = $matches[3];

	if ( ! is_array( $allowed_html ) ) {
		$allowed_html = wp_kses_allowed_html( $allowed_html );
	}

	// They are using a not allowed HTML element.
	if ( ! isset( $allowed_html[ strtolower( $elem ) ] ) ) {
		return '';
	}

	// No attributes are allowed for closing elements.
	if ( '' !== $slash ) {
		return "</$elem>";
	}

	return wp_kses_attr( $elem, $attrlist, $allowed_html, $allowed_protocols );
}

/**
 * Removes all attributes, if none are allowed for this element.
 *
 * If some are allowed it calls `wp_kses_hair()` to split them further, and then
 * it builds up new HTML code from the data that `wp_kses_hair()` returns. It also
 * removes `<` and `>` characters, if there are any left. One more thing it does
 * is to check if the tag has a closing XHTML slash, and if it does, it puts one
 * in the returned code as well.
 *
 * An array of allowed values can be defined for attributes. If the attribute value
 * doesn't fall into the list, the attribute will be removed from the tag.
 *
 * Attributes can be marked as required. If a required attribute is not present,
 * KSES will remove all attributes from the tag. As KSES doesn't match opening and
 * closing tags, it's not possible to safely remove the tag itself, the safest
 * fallback is to strip all attributes from the tag, instead.
 *
 * @since 1.0.0
 * @since 5.9.0 Added support for an array of allowed values for attributes.
 *              Added support for required attributes.
 *
 * @param string         $element           HTML element/tag.
 * @param string         $attr              HTML attributes from HTML element to closing HTML element tag.
 * @param array[]|string $allowed_html      An array of allowed HTML elements and attributes,
 *                                          or a context name such as 'post'. See wp_kses_allowed_html()
 *                                          for the list of accepted context names.
 * @param string[]       $allowed_protocols Array of allowed URL protocols.
 * @return string Sanitized HTML element.
 */
function wp_kses_attr( $element, $attr, $allowed_html, $allowed_protocols ) {
	if ( ! is_array( $allowed_html ) ) {
		$allowed_html = wp_kses_allowed_html( $allowed_html );
	}

	// Is there a closing XHTML slash at the end of the attributes?
	$xhtml_slash = '';
	if ( preg_match( '%\s*/\s*$%', $attr ) ) {
		$xhtml_slash = ' /';
	}

	// Are any attributes allowed at all for this element?
	$element_low = strtolower( $element );
	if ( empty( $allowed_html[ $element_low ] ) || true === $allowed_html[ $element_low ] ) {
		return "<$element$xhtml_slash>";
	}

	// Split it.
	$attrarr = wp_kses_hair( $attr, $allowed_protocols );

	// Check if there are attributes that are required.
	$required_attrs = array_filter(
		$allowed_html[ $element_low ],
		function( $required_attr_limits ) {
			return isset( $required_attr_limits['required'] ) && true === $required_attr_limits['required'];
		}
	);

	/*
	 * If a required attribute check fails, we can return nothing for a self-closing tag,
	 * but for a non-self-closing tag the best option is to return the element with attributes,
	 * as KSES doesn't handle matching the relevant closing tag.
	 */
	$stripped_tag = '';
	if ( empty( $xhtml_slash ) ) {
		$stripped_tag = "<$element>";
	}

	// Go through $attrarr, and save the allowed attributes for this element in $attr2.
	$attr2 = '';
	foreach ( $attrarr as $arreach ) {
		// Check if this attribute is required.
		$required = isset( $required_attrs[ strtolower( $arreach['name'] ) ] );

		if ( wp_kses_attr_check( $arreach['name'], $arreach['value'], $arreach['whole'], $arreach['vless'], $element, $allowed_html ) ) {
			$attr2 .= ' ' . $arreach['whole'];

			// If this was a required attribute, we can mark it as found.
			if ( $required ) {
				unset( $required_attrs[ strtolower( $arreach['name'] ) ] );
			}
		} elseif ( $required ) {
			// This attribute was required, but didn't pass the check. The entire tag is not allowed.
			return $stripped_tag;
		}
	}

	// If some required attributes weren't set, the entire tag is not allowed.
	if ( ! empty( $required_attrs ) ) {
		return $stripped_tag;
	}

	// Remove any "<" or ">" characters.
	$attr2 = preg_replace( '/[<>]/', '', $attr2 );

	return "<$element$attr2$xhtml_slash>";
}

/**
 * Determines whether an attribute is allowed.
 *
 * @since 4.2.3
 * @since 5.0.0 Added support for `data-*` wildcard attributes.
 *
 * @param string $name         The attribute name. Passed by reference. Returns empty string when not allowed.
 * @param string $value        The attribute value. Passed by reference. Returns a filtered value.
 * @param string $whole        The `name=value` input. Passed by reference. Returns filtered input.
 * @param string $vless        Whether the attribute is valueless. Use 'y' or 'n'.
 * @param string $element      The name of the element to which this attribute belongs.
 * @param array  $allowed_html The full list of allowed elements and attributes.
 * @return bool Whether or not the attribute is allowed.
 */
function wp_kses_attr_check( &$name, &$value, &$whole, $vless, $element, $allowed_html ) {
	$name_low    = strtolower( $name );
	$element_low = strtolower( $element );

	if ( ! isset( $allowed_html[ $element_low ] ) ) {
		$name  = '';
		$value = '';
		$whole = '';
		return false;
	}

	$allowed_attr = $allowed_html[ $element_low ];

	if ( ! isset( $allowed_attr[ $name_low ] ) || '' === $allowed_attr[ $name_low ] ) {
		/*
		 * Allow `data-*` attributes.
		 *
		 * When specifying `$allowed_html`, the attribute name should be set as
		 * `data-*` (not to be mixed with the HTML 4.0 `data` attribute, see
		 * https://www.w3.org/TR/html40/struct/objects.html#adef-data).
		 *
		 * Note: the attribute name should only contain `A-Za-z0-9_-` chars,
		 * double hyphens `--` are not accepted by WordPress.
		 */
		if ( strpos( $name_low, 'data-' ) === 0 && ! empty( $allowed_attr['data-*'] )
			&& preg_match( '/^data(?:-[a-z0-9_]+)+$/', $name_low, $match )
		) {
			/*
			 * Add the whole attribute name to the allowed attributes and set any restrictions
			 * for the `data-*` attribute values for the current element.
			 */
			$allowed_attr[ $match[0] ] = $allowed_attr['data-*'];
		} else {
			$name  = '';
			$value = '';
			$whole = '';
			return false;
		}
	}

	if ( 'style' === $name_low ) {
		$new_value = safecss_filter_attr( $value );

		if ( empty( $new_value ) ) {
			$name  = '';
			$value = '';
			$whole = '';
			return false;
		}

		$whole = str_replace( $value, $new_value, $whole );
		$value = $new_value;
	}

	if ( is_array( $allowed_attr[ $name_low ] ) ) {
		// There are some checks.
		foreach ( $allowed_attr[ $name_low ] as $currkey => $currval ) {
			if ( ! wp_kses_check_attr_val( $value, $vless, $currkey, $currval ) ) {
				$name  = '';
				$value = '';
				$whole = '';
				return false;
			}
		}
	}

	return true;
}

/**
 * Builds an attribute list from string containing attributes.
 *
 * This function does a lot of work. It parses an attribute list into an array
 * with attribute data, and tries to do the right thing even if it gets weird
 * input. It will add quotes around attribute values that don't have any quotes
 * or apostrophes around them, to make it easier to produce HTML code that will
 * conform to W3C's HTML specification. It will also remove bad URL protocols
 * from attribute values. It also reduces duplicate attributes by using the
 * attribute defined first (`foo='bar' foo='baz'` will result in `foo='bar'`).
 *
 * @since 1.0.0
 *
 * @param string   $attr              Attribute list from HTML element to closing HTML element tag.
 * @param string[] $allowed_protocols Array of allowed URL protocols.
 * @return array[] Array of attribute information after parsing.
 */
function wp_kses_hair( $attr, $allowed_protocols ) {
	$attrarr  = array();
	$mode     = 0;
	$attrname = '';
	$uris     = wp_kses_uri_attributes();

	// Loop through the whole attribute list.

	while ( strlen( $attr ) != 0 ) {
		$working = 0; // Was the last operation successful?

		switch ( $mode ) {
			case 0:
				if ( preg_match( '/^([_a-zA-Z][-_a-zA-Z0-9:.]*)/', $attr, $match ) ) {
					$attrname = $match[1];
					$working  = 1;
					$mode     = 1;
					$attr     = preg_replace( '/^[_a-zA-Z][-_a-zA-Z0-9:.]*/', '', $attr );
				}

				break;

			case 1:
				if ( preg_match( '/^\s*=\s*/', $attr ) ) { // Equals sign.
					$working = 1;
					$mode    = 2;
					$attr    = preg_replace( '/^\s*=\s*/', '', $attr );
					break;
				}

				if ( preg_match( '/^\s+/', $attr ) ) { // Valueless.
					$working = 1;
					$mode    = 0;
					if ( false === array_key_exists( $attrname, $attrarr ) ) {
						$attrarr[ $attrname ] = array(
							'name'  => $attrname,
							'value' => '',
							'whole' => $attrname,
							'vless' => 'y',
						);
					}
					$attr = preg_replace( '/^\s+/', '', $attr );
				}

				break;

			case 2:
				if ( preg_match( '%^"([^"]*)"(\s+|/?$)%', $attr, $match ) ) {
					// "value"
					$thisval = $match[1];
					if ( in_array( strtolower( $attrname ), $uris, true ) ) {
						$thisval = wp_kses_bad_protocol( $thisval, $allowed_protocols );
					}

					if ( false === array_key_exists( $attrname, $attrarr ) ) {
						$attrarr[ $attrname ] = array(
							'name'  => $attrname,
							'value' => $thisval,
							'whole' => "$attrname=\"$thisval\"",
							'vless' => 'n',
						);
					}
					$working = 1;
					$mode    = 0;
					$attr    = preg_replace( '/^"[^"]*"(\s+|$)/', '', $attr );
					break;
				}

				if ( preg_match( "%^'([^']*)'(\s+|/?$)%", $attr, $match ) ) {
					// 'value'
					$thisval = $match[1];
					if ( in_array( strtolower( $attrname ), $uris, true ) ) {
						$thisval = wp_kses_bad_protocol( $thisval, $allowed_protocols );
					}

					if ( false === array_key_exists( $attrname, $attrarr ) ) {
						$attrarr[ $attrname ] = array(
							'name'  => $attrname,
							'value' => $thisval,
							'whole' => "$attrname='$thisval'",
							'vless' => 'n',
						);
					}
					$working = 1;
					$mode    = 0;
					$attr    = preg_replace( "/^'[^']*'(\s+|$)/", '', $attr );
					break;
				}

				if ( preg_match( "%^([^\s\"']+)(\s+|/?$)%", $attr, $match ) ) {
					// value
					$thisval = $match[1];
					if ( in_array( strtolower( $attrname ), $uris, true ) ) {
						$thisval = wp_kses_bad_protocol( $thisval, $allowed_protocols );
					}

					if ( false === array_key_exists( $attrname, $attrarr ) ) {
						$attrarr[ $attrname ] = array(
							'name'  => $attrname,
							'value' => $thisval,
							'whole' => "$attrname=\"$thisval\"",
							'vless' => 'n',
						);
					}
					// We add quotes to conform to W3C's HTML spec.
					$working = 1;
					$mode    = 0;
					$attr    = preg_replace( "%^[^\s\"']+(\s+|$)%", '', $attr );
				}

				break;
		} // End switch.

		if ( 0 == $working ) { // Not well-formed, remove and try again.
			$attr = wp_kses_html_error( $attr );
			$mode = 0;
		}
	} // End while.

	if ( 1 == $mode && false === array_key_exists( $attrname, $attrarr ) ) {
		// Special case, for when the attribute list ends with a valueless
		// attribute like "selected".
		$attrarr[ $attrname ] = array(
			'name'  => $attrname,
			'value' => '',
			'whole' => $attrname,
			'vless' => 'y',
		);
	}

	return $attrarr;
}

/**
 * Finds all attributes of an HTML element.
 *
 * Does not modify input.  May return "evil" output.
 *
 * Based on `wp_kses_split2()` and `wp_kses_attr()`.
 *
 * @since 4.2.3
 *
 * @param string $element HTML element.
 * @return array|false List of attributes found in the element. Returns false on failure.
 */
function wp_kses_attr_parse( $element ) {
	$valid = preg_match( '%^(<\s*)(/\s*)?([a-zA-Z0-9]+\s*)([^>]*)(>?)$%', $element, $matches );
	if ( 1 !== $valid ) {
		return false;
	}

	$begin  = $matches[1];
	$slash  = $matches[2];
	$elname = $matches[3];
	$attr   = $matches[4];
	$end    = $matches[5];

	if ( '' !== $slash ) {
		// Closing elements do not get parsed.
		return false;
	}

	// Is there a closing XHTML slash at the end of the attributes?
	if ( 1 === preg_match( '%\s*/\s*$%', $attr, $matches ) ) {
		$xhtml_slash = $matches[0];
		$attr        = substr( $attr, 0, -strlen( $xhtml_slash ) );
	} else {
		$xhtml_slash = '';
	}

	// Split it.
	$attrarr = wp_kses_hair_parse( $attr );
	if ( false === $attrarr ) {
		return false;
	}

	// Make sure all input is returned by adding front and back matter.
	array_unshift( $attrarr, $begin . $slash . $elname );
	array_push( $attrarr, $xhtml_slash . $end );

	return $attrarr;
}

/**
 * Builds an attribute list from string containing attributes.
 *
 * Does not modify input.  May return "evil" output.
 * In case of unexpected input, returns false instead of stripping things.
 *
 * Based on `wp_kses_hair()` but does not return a multi-dimensional array.
 *
 * @since 4.2.3
 *
 * @param string $attr Attribute list from HTML element to closing HTML element tag.
 * @return array|false List of attributes found in $attr. Returns false on failure.
 */
function wp_kses_hair_parse( $attr ) {
	if ( '' === $attr ) {
		return array();
	}

	// phpcs:disable Squiz.Strings.ConcatenationSpacing.PaddingFound -- don't remove regex indentation
	$regex =
		'(?:'
		.     '[_a-zA-Z][-_a-zA-Z0-9:.]*' // Attribute name.
		. '|'
		.     '\[\[?[^\[\]]+\]\]?'        // Shortcode in the name position implies unfiltered_html.
		. ')'
		. '(?:'               // Attribute value.
		.     '\s*=\s*'       // All values begin with '='.
		.     '(?:'
		.         '"[^"]*"'   // Double-quoted.
		.     '|'
		.         "'[^']*'"   // Single-quoted.
		.     '|'
		.         '[^\s"\']+' // Non-quoted.
		.         '(?:\s|$)'  // Must have a space.
		.     ')'
		. '|'
		.     '(?:\s|$)'      // If attribute has no value, space is required.
		. ')'
		. '\s*';              // Trailing space is optional except as mentioned above.
	// phpcs:enable

	// Although it is possible to reduce this procedure to a single regexp,
	// we must run that regexp twice to get exactly the expected result.

	$validation = "%^($regex)+$%";
	$extraction = "%$regex%";

	if ( 1 === preg_match( $validation, $attr ) ) {
		preg_match_all( $extraction, $attr, $attrarr );
		return $attrarr[0];
	} else {
		return false;
	}
}

/**
 * Performs different checks for attribute values.
 *
 * The currently implemented checks are "maxlen", "minlen", "maxval", "minval",
 * and "valueless".
 *
 * @since 1.0.0
 *
 * @param string $value      Attribute value.
 * @param string $vless      Whether the attribute is valueless. Use 'y' or 'n'.
 * @param string $checkname  What $checkvalue is checking for.
 * @param mixed  $checkvalue What constraint the value should pass.
 * @return bool Whether check passes.
 */
function wp_kses_check_attr_val( $value, $vless, $checkname, $checkvalue ) {
	$ok = true;

	switch ( strtolower( $checkname ) ) {
		case 'maxlen':
			/*
			 * The maxlen check makes sure that the attribute value has a length not
			 * greater than the given value. This can be used to avoid Buffer Overflows
			 * in WWW clients and various Internet servers.
			 */

			if ( strlen( $value ) > $checkvalue ) {
				$ok = false;
			}
			break;

		case 'minlen':
			/*
			 * The minlen check makes sure that the attribute value has a length not
			 * smaller than the given value.
			 */

			if ( strlen( $value ) < $checkvalue ) {
				$ok = false;
			}
			break;

		case 'maxval':
			/*
			 * The maxval check does two things: it checks that the attribute value is
			 * an integer from 0 and up, without an excessive amount of zeroes or
			 * whitespace (to avoid Buffer Overflows). It also checks that the attribute
			 * value is not greater than the given value.
			 * This check can be used to avoid Denial of Service attacks.
			 */

			if ( ! preg_match( '/^\s{0,6}[0-9]{1,6}\s{0,6}$/', $value ) ) {
				$ok = false;
			}
			if ( $value > $checkvalue ) {
				$ok = false;
			}
			break;

		case 'minval':
			/*
			 * The minval check makes sure that the attribute value is a positive integer,
			 * and that it is not smaller than the given value.
			 */

			if ( ! preg_match( '/^\s{0,6}[0-9]{1,6}\s{0,6}$/', $value ) ) {
				$ok = false;
			}
			if ( $value < $checkvalue ) {
				$ok = false;
			}
			break;

		case 'valueless':
			/*
			 * The valueless check makes sure if the attribute has a value
			 * (like `<a href="blah">`) or not (`<option selected>`). If the given value
			 * is a "y" or a "Y", the attribute must not have a value.
			 * If the given value is an "n" or an "N", the attribute must have a value.
			 */

			if ( strtolower( $checkvalue ) != $vless ) {
				$ok = false;
			}
			break;

		case 'values':
			/*
			 * The values check is used when you want to make sure that the attribute
			 * has one of the given values.
			 */

			if ( false === array_search( strtolower( $value ), $checkvalue, true ) ) {
				$ok = false;
			}
			break;

		case 'value_callback':
			/*
			 * The value_callback check is used when you want to make sure that the attribute
			 * value is accepted by the callback function.
			 */

			if ( ! call_user_func( $checkvalue, $value ) ) {
				$ok = false;
			}
			break;
	} // End switch.

	return $ok;
}

/**
 * Sanitizes a string and removed disallowed URL protocols.
 *
 * This function removes all non-allowed protocols from the beginning of the
 * string. It ignores whitespace and the case of the letters, and it does
 * understand HTML entities. It does its work recursively, so it won't be
 * fooled by a string like `javascript:javascript:alert(57)`.
 *
 * @since 1.0.0
 *
 * @param string   $content           Content to filter bad protocols from.
 * @param string[] $allowed_protocols Array of allowed URL protocols.
 * @return string Filtered content.
 */
function wp_kses_bad_protocol( $content, $allowed_protocols ) {
	$content = wp_kses_no_null( $content );

	// Short-circuit if the string starts with `https://` or `http://`. Most common cases.
	if (
		( str_starts_with( $content, 'https://' ) && in_array( 'https', $allowed_protocols, true ) ) ||
		( str_starts_with( $content, 'http://' ) && in_array( 'http', $allowed_protocols, true ) )
	) {
		return $content;
	}

	$iterations = 0;

	do {
		$original_content = $content;
		$content          = wp_kses_bad_protocol_once( $content, $allowed_protocols );
	} while ( $original_content != $content && ++$iterations < 6 );

	if ( $original_content != $content ) {
		return '';
	}

	return $content;
}

/**
 * Removes any invalid control characters in a text string.
 *
 * Also removes any instance of the `\0` string.
 *
 * @since 1.0.0
 *
 * @param string $content Content to filter null characters from.
 * @param array  $options Set 'slash_zero' => 'keep' when '\0' is allowed. Default is 'remove'.
 * @return string Filtered content.
 */
function wp_kses_no_null( $content, $options = null ) {
	if ( ! isset( $options['slash_zero'] ) ) {
		$options = array( 'slash_zero' => 'remove' );
	}

	$content = preg_replace( '/[\x00-\x08\x0B\x0C\x0E-\x1F]/', '', $content );
	if ( 'remove' === $options['slash_zero'] ) {
		$content = preg_replace( '/\\\\+0+/', '', $content );
	}

	return $content;
}

/**
 * Strips slashes from in front of quotes.
 *
 * This function changes the character sequence `\"` to just `"`. It leaves all other
 * slashes alone. The quoting from `preg_replace(//e)` requires this.
 *
 * @since 1.0.0
 *
 * @param string $content String to strip slashes from.
 * @return string Fixed string with quoted slashes.
 */
function wp_kses_stripslashes( $content ) {
	return preg_replace( '%\\\\"%', '"', $content );
}

/**
 * Converts the keys of an array to lowercase.
 *
 * @since 1.0.0
 *
 * @param array $inarray Unfiltered array.
 * @return array Fixed array with all lowercase keys.
 */
function wp_kses_array_lc( $inarray ) {
	$outarray = array();

	foreach ( (array) $inarray as $inkey => $inval ) {
		$outkey              = strtolower( $inkey );
		$outarray[ $outkey ] = array();

		foreach ( (array) $inval as $inkey2 => $inval2 ) {
			$outkey2                         = strtolower( $inkey2 );
			$outarray[ $outkey ][ $outkey2 ] = $inval2;
		}
	}

	return $outarray;
}

/**
 * Handles parsing errors in `wp_kses_hair()`.
 *
 * The general plan is to remove everything to and including some whitespace,
 * but it deals with quotes and apostrophes as well.
 *
 * @since 1.0.0
 *
 * @param string $attr
 * @return string
 */
function wp_kses_html_error( $attr ) {
	return preg_replace( '/^("[^"]*("|$)|\'[^\']*(\'|$)|\S)*\s*/', '', $attr );
}

/**
 * Sanitizes content from bad protocols and other characters.
 *
 * This function searches for URL protocols at the beginning of the string, while
 * handling whitespace and HTML entities.
 *
 * @since 1.0.0
 *
 * @param string   $content           Content to check for bad protocols.
 * @param string[] $allowed_protocols Array of allowed URL protocols.
 * @param int      $count             Depth of call recursion to this function.
 * @return string Sanitized content.
 */
function wp_kses_bad_protocol_once( $content, $allowed_protocols, $count = 1 ) {
	$content  = preg_replace( '/(&#0*58(?![;0-9])|&#x0*3a(?![;a-f0-9]))/i', '$1;', $content );
	$content2 = preg_split( '/:|&#0*58;|&#x0*3a;|&colon;/i', $content, 2 );

	if ( isset( $content2[1] ) && ! preg_match( '%/\?%', $content2[0] ) ) {
		$content  = trim( $content2[1] );
		$protocol = wp_kses_bad_protocol_once2( $content2[0], $allowed_protocols );
		if ( 'feed:' === $protocol ) {
			if ( $count > 2 ) {
				return '';
			}
			$content = wp_kses_bad_protocol_once( $content, $allowed_protocols, ++$count );
			if ( empty( $content ) ) {
				return $content;
			}
		}
		$content = $protocol . $content;
	}

	return $content;
}

/**
 * Callback for `wp_kses_bad_protocol_once()` regular expression.
 *
 * This function processes URL protocols, checks to see if they're in the
 * list of allowed protocols or not, and returns different data depending
 * on the answer.
 *
 * @access private
 * @ignore
 * @since 1.0.0
 *
 * @param string   $scheme            URI scheme to check against the list of allowed protocols.
 * @param string[] $allowed_protocols Array of allowed URL protocols.
 * @return string Sanitized content.
 */
function wp_kses_bad_protocol_once2( $scheme, $allowed_protocols ) {
	$scheme = wp_kses_decode_entities( $scheme );
	$scheme = preg_replace( '/\s/', '', $scheme );
	$scheme = wp_kses_no_null( $scheme );
	$scheme = strtolower( $scheme );

	$allowed = false;
	foreach ( (array) $allowed_protocols as $one_protocol ) {
		if ( strtolower( $one_protocol ) == $scheme ) {
			$allowed = true;
			break;
		}
	}

	if ( $allowed ) {
		return "$scheme:";
	} else {
		return '';
	}
}

/**
 * Converts and fixes HTML entities.
 *
 * This function normalizes HTML entities. It will convert `AT&T` to the correct
 * `AT&amp;T`, `&#00058;` to `&#058;`, `&#XYZZY;` to `&amp;#XYZZY;` and so on.
 *
 * When `$context` is set to 'xml', HTML entities are converted to their code points.  For
 * example, `AT&T&hellip;&#XYZZY;` is converted to `AT&amp;T…&amp;#XYZZY;`.
 *
 * @since 1.0.0
 * @since 5.5.0 Added `$context` parameter.
 *
 * @param string $content Content to normalize entities.
 * @param string $context Context for normalization. Can be either 'html' or 'xml'.
 *                        Default 'html'.
 * @return string Content with normalized entities.
 */
function wp_kses_normalize_entities( $content, $context = 'html' ) {
	// Disarm all entities by converting & to &amp;
	$content = str_replace( '&', '&amp;', $content );

	// Change back the allowed entities in our list of allowed entities.
	if ( 'xml' === $context ) {
		$content = preg_replace_callback( '/&amp;([A-Za-z]{2,8}[0-9]{0,2});/', 'wp_kses_xml_named_entities', $content );
	} else {
		$content = preg_replace_callback( '/&amp;([A-Za-z]{2,8}[0-9]{0,2});/', 'wp_kses_named_entities', $content );
	}
	$content = preg_replace_callback( '/&amp;#(0*[0-9]{1,7});/', 'wp_kses_normalize_entities2', $content );
	$content = preg_replace_callback( '/&amp;#[Xx](0*[0-9A-Fa-f]{1,6});/', 'wp_kses_normalize_entities3', $content );

	return $content;
}

/**
 * Callback for `wp_kses_normalize_entities()` regular expression.
 *
 * This function only accepts valid named entity references, which are finite,
 * case-sensitive, and highly scrutinized by HTML and XML validators.
 *
 * @since 3.0.0
 *
 * @global array $allowedentitynames
 *
 * @param array $matches preg_replace_callback() matches array.
 * @return string Correctly encoded entity.
 */
function wp_kses_named_entities( $matches ) {
	global $allowedentitynames;

	if ( empty( $matches[1] ) ) {
		return '';
	}

	$i = $matches[1];
	return ( ! in_array( $i, $allowedentitynames, true ) ) ? "&amp;$i;" : "&$i;";
}

/**
 * Callback for `wp_kses_normalize_entities()` regular expression.
 *
 * This function only accepts valid named entity references, which are finite,
 * case-sensitive, and highly scrutinized by XML validators.  HTML named entity
 * references are converted to their code points.
 *
 * @since 5.5.0
 *
 * @global array $allowedentitynames
 * @global array $allowedxmlentitynames
 *
 * @param array $matches preg_replace_callback() matches array.
 * @return string Correctly encoded entity.
 */
function wp_kses_xml_named_entities( $matches ) {
	global $allowedentitynames, $allowedxmlentitynames;

	if ( empty( $matches[1] ) ) {
		return '';
	}

	$i = $matches[1];

	if ( in_array( $i, $allowedxmlentitynames, true ) ) {
		return "&$i;";
	} elseif ( in_array( $i, $allowedentitynames, true ) ) {
		return html_entity_decode( "&$i;", ENT_HTML5 );
	}

	return "&amp;$i;";
}

/**
 * Callback for `wp_kses_normalize_entities()` regular expression.
 *
 * This function helps `wp_kses_normalize_entities()` to only accept 16-bit
 * values and nothing more for `&#number;` entities.
 *
 * @access private
 * @ignore
 * @since 1.0.0
 *
 * @param array $matches `preg_replace_callback()` matches array.
 * @return string Correctly encoded entity.
 */
function wp_kses_normalize_entities2( $matches ) {
	if ( empty( $matches[1] ) ) {
		return '';
	}

	$i = $matches[1];
	if ( valid_unicode( $i ) ) {
		$i = str_pad( ltrim( $i, '0' ), 3, '0', STR_PAD_LEFT );
		$i = "&#$i;";
	} else {
		$i = "&amp;#$i;";
	}

	return $i;
}

/**
 * Callback for `wp_kses_normalize_entities()` for regular expression.
 *
 * This function helps `wp_kses_normalize_entities()` to only accept valid Unicode
 * numeric entities in hex form.
 *
 * @since 2.7.0
 * @access private
 * @ignore
 *
 * @param array $matches `preg_replace_callback()` matches array.
 * @return string Correctly encoded entity.
 */
function wp_kses_normalize_entities3( $matches ) {
	if ( empty( $matches[1] ) ) {
		return '';
	}

	$hexchars = $matches[1];
	return ( ! valid_unicode( hexdec( $hexchars ) ) ) ? "&amp;#x$hexchars;" : '&#x' . ltrim( $hexchars, '0' ) . ';';
}

/**
 * Determines if a Unicode codepoint is valid.
 *
 * @since 2.7.0
 *
 * @param int $i Unicode codepoint.
 * @return bool Whether or not the codepoint is a valid Unicode codepoint.
 */
function valid_unicode( $i ) {
	return ( 0x9 == $i || 0xa == $i || 0xd == $i ||
			( 0x20 <= $i && $i <= 0xd7ff ) ||
			( 0xe000 <= $i && $i <= 0xfffd ) ||
			( 0x10000 <= $i && $i <= 0x10ffff ) );
}

/**
 * Converts all numeric HTML entities to their named counterparts.
 *
 * This function decodes numeric HTML entities (`&#65;` and `&#x41;`).
 * It doesn't do anything with named entities like `&auml;`, but we don't
 * need them in the allowed URL protocols system anyway.
 *
 * @since 1.0.0
 *
 * @param string $content Content to change entities.
 * @return string Content after decoded entities.
 */
function wp_kses_decode_entities( $content ) {
	$content = preg_replace_callback( '/&#([0-9]+);/', '_wp_kses_decode_entities_chr', $content );
	$content = preg_replace_callback( '/&#[Xx]([0-9A-Fa-f]+);/', '_wp_kses_decode_entities_chr_hexdec', $content );

	return $content;
}

/**
 * Regex callback for `wp_kses_decode_entities()`.
 *
 * @since 2.9.0
 * @access private
 * @ignore
 *
 * @param array $matches preg match
 * @return string
 */
function _wp_kses_decode_entities_chr( $matches ) {
	return chr( $matches[1] );
}

/**
 * Regex callback for `wp_kses_decode_entities()`.
 *
 * @since 2.9.0
 * @access private
 * @ignore
 *
 * @param array $matches preg match
 * @return string
 */
function _wp_kses_decode_entities_chr_hexdec( $matches ) {
	return chr( hexdec( $matches[1] ) );
}

/**
 * Sanitize content with allowed HTML KSES rules.
 *
 * This function expects slashed data.
 *
 * @since 1.0.0
 *
 * @param string $data Content to filter, expected to be escaped with slashes.
 * @return string Filtered content.
 */
function wp_filter_kses( $data ) {
	return addslashes( wp_kses( stripslashes( $data ), current_filter() ) );
}

/**
 * Sanitize content with allowed HTML KSES rules.
 *
 * This function expects unslashed data.
 *
 * @since 2.9.0
 *
 * @param string $data Content to filter, expected to not be escaped.
 * @return string Filtered content.
 */
function wp_kses_data( $data ) {
	return wp_kses( $data, current_filter() );
}

/**
 * Sanitizes content for allowed HTML tags for post content.
 *
 * Post content refers to the page contents of the 'post' type and not `$_POST`
 * data from forms.
 *
 * This function expects slashed data.
 *
 * @since 2.0.0
 *
 * @param string $data Post content to filter, expected to be escaped with slashes.
 * @return string Filtered post content with allowed HTML tags and attributes intact.
 */
function wp_filter_post_kses( $data ) {
	return addslashes( wp_kses( stripslashes( $data ), 'post' ) );
}

/**
 * Sanitizes global styles user content removing unsafe rules.
 *
 * @since 5.9.0
 *
 * @param string $data Post content to filter.
 * @return string Filtered post content with unsafe rules removed.
 */
function wp_filter_global_styles_post( $data ) {
	$decoded_data        = json_decode( wp_unslash( $data ), true );
	$json_decoding_error = json_last_error();
	if (
		JSON_ERROR_NONE === $json_decoding_error &&
		is_array( $decoded_data ) &&
		isset( $decoded_data['isGlobalStylesUserThemeJSON'] ) &&
		$decoded_data['isGlobalStylesUserThemeJSON']
	) {
		unset( $decoded_data['isGlobalStylesUserThemeJSON'] );

		$data_to_encode = WP_Theme_JSON::remove_insecure_properties( $decoded_data );

		$data_to_encode['isGlobalStylesUserThemeJSON'] = true;
		return wp_slash( wp_json_encode( $data_to_encode ) );
	}
	return $data;
}

/**
 * Sanitizes content for allowed HTML tags for post content.
 *
 * Post content refers to the page contents of the 'post' type and not `$_POST`
 * data from forms.
 *
 * This function expects unslashed data.
 *
 * @since 2.9.0
 *
 * @param string $data Post content to filter.
 * @return string Filtered post content with allowed HTML tags and attributes intact.
 */
function wp_kses_post( $data ) {
	return wp_kses( $data, 'post' );
}

/**
 * Navigates through an array, object, or scalar, and sanitizes content for
 * allowed HTML tags for post content.
 *
 * @since 4.4.2
 *
 * @see map_deep()
 *
 * @param mixed $data The array, object, or scalar value to inspect.
 * @return mixed The filtered content.
 */
function wp_kses_post_deep( $data ) {
	return map_deep( $data, 'wp_kses_post' );
}

/**
 * Strips all HTML from a text string.
 *
 * This function expects slashed data.
 *
 * @since 2.1.0
 *
 * @param string $data Content to strip all HTML from.
 * @return string Filtered content without any HTML.
 */
function wp_filter_nohtml_kses( $data ) {
	return addslashes( wp_kses( stripslashes( $data ), 'strip' ) );
}

/**
 * Adds all KSES input form content filters.
 *
 * All hooks have default priority. The `wp_filter_kses()` function is added to
 * the 'pre_comment_content' and 'title_save_pre' hooks.
 *
 * The `wp_filter_post_kses()` function is added to the 'content_save_pre',
 * 'excerpt_save_pre', and 'content_filtered_save_pre' hooks.
 *
 * @since 2.0.0
 */
function kses_init_filters() {
	// Normal filtering.
	add_filter( 'title_save_pre', 'wp_filter_kses' );

	// Comment filtering.
	if ( current_user_can( 'unfiltered_html' ) ) {
		add_filter( 'pre_comment_content', 'wp_filter_post_kses' );
	} else {
		add_filter( 'pre_comment_content', 'wp_filter_kses' );
	}

	// Global Styles filtering: Global Styles filters should be executed before normal post_kses HTML filters.
	add_filter( 'content_save_pre', 'wp_filter_global_styles_post', 9 );
	add_filter( 'content_filtered_save_pre', 'wp_filter_global_styles_post', 9 );

	// Post filtering.
	add_filter( 'content_save_pre', 'wp_filter_post_kses' );
	add_filter( 'excerpt_save_pre', 'wp_filter_post_kses' );
	add_filter( 'content_filtered_save_pre', 'wp_filter_post_kses' );
}

/**
 * Removes all KSES input form content filters.
 *
 * A quick procedural method to removing all of the filters that KSES uses for
 * content in WordPress Loop.
 *
 * Does not remove the `kses_init()` function from {@see 'init'} hook (priority is
 * default). Also does not remove `kses_init()` function from {@see 'set_current_user'}
 * hook (priority is also default).
 *
 * @since 2.0.6
 */
function kses_remove_filters() {
	// Normal filtering.
	remove_filter( 'title_save_pre', 'wp_filter_kses' );

	// Comment filtering.
	remove_filter( 'pre_comment_content', 'wp_filter_post_kses' );
	remove_filter( 'pre_comment_content', 'wp_filter_kses' );

	// Global Styles filtering.
	remove_filter( 'content_save_pre', 'wp_filter_global_styles_post', 9 );
	remove_filter( 'content_filtered_save_pre', 'wp_filter_global_styles_post', 9 );

	// Post filtering.
	remove_filter( 'content_save_pre', 'wp_filter_post_kses' );
	remove_filter( 'excerpt_save_pre', 'wp_filter_post_kses' );
	remove_filter( 'content_filtered_save_pre', 'wp_filter_post_kses' );
}

/**
 * Sets up most of the KSES filters for input form content.
 *
 * First removes all of the KSES filters in case the current user does not need
 * to have KSES filter the content. If the user does not have `unfiltered_html`
 * capability, then KSES filters are added.
 *
 * @since 2.0.0
 */
function kses_init() {
	kses_remove_filters();

	if ( ! current_user_can( 'unfiltered_html' ) ) {
		kses_init_filters();
	}
}

/**
 * Filters an inline style attribute and removes disallowed rules.
 *
 * @since 2.8.1
 * @since 4.4.0 Added support for `min-height`, `max-height`, `min-width`, and `max-width`.
 * @since 4.6.0 Added support for `list-style-type`.
 * @since 5.0.0 Added support for `background-image`.
 * @since 5.1.0 Added support for `text-transform`.
 * @since 5.2.0 Added support for `background-position` and `grid-template-columns`.
 * @since 5.3.0 Added support for `grid`, `flex` and `column` layout properties.
 *              Extended `background-*` support for individual properties.
 * @since 5.3.1 Added support for gradient backgrounds.
 * @since 5.7.1 Added support for `object-position`.
 * @since 5.8.0 Added support for `calc()` and `var()` values.
 * @since 6.1.0 Added support for `min()`, `max()`, `minmax()`, `clamp()`,
 *              nested `var()` values, and assigning values to CSS variables.
 *              Added support for `object-fit`, `gap`, `column-gap`, `row-gap`, and `flex-wrap`.
 *              Extended `margin-*` and `padding-*` support for logical properties.
 * @since 6.2.0 Added support for `aspect-ratio`, `position`, `top`, `right`, `bottom`, `left`,
 *              and `z-index` CSS properties.
 *
 * @param string $css        A string of CSS rules.
 * @param string $deprecated Not used.
 * @return string Filtered string of CSS rules.
 */
function safecss_filter_attr( $css, $deprecated = '' ) {
	if ( ! empty( $deprecated ) ) {
		_deprecated_argument( __FUNCTION__, '2.8.1' ); // Never implemented.
	}

	$css = wp_kses_no_null( $css );
	$css = str_replace( array( "\n", "\r", "\t" ), '', $css );

	$allowed_protocols = wp_allowed_protocols();

	$css_array = explode( ';', trim( $css ) );

	/**
	 * Filters the list of allowed CSS attributes.
	 *
	 * @since 2.8.1
	 *
	 * @param string[] $attr Array of allowed CSS attributes.
	 */
	$allowed_attr = apply_filters(
		'safe_style_css',
		array(
			'background',
			'background-color',
			'background-image',
			'background-position',
			'background-size',
			'background-attachment',
			'background-blend-mode',

			'border',
			'border-radius',
			'border-width',
			'border-color',
			'border-style',
			'border-right',
			'border-right-color',
			'border-right-style',
			'border-right-width',
			'border-bottom',
			'border-bottom-color',
			'border-bottom-left-radius',
			'border-bottom-right-radius',
			'border-bottom-style',
			'border-bottom-width',
			'border-bottom-right-radius',
			'border-bottom-left-radius',
			'border-left',
			'border-left-color',
			'border-left-style',
			'border-left-width',
			'border-top',
			'border-top-color',
			'border-top-left-radius',
			'border-top-right-radius',
			'border-top-style',
			'border-top-width',
			'border-top-left-radius',
			'border-top-right-radius',

			'border-spacing',
			'border-collapse',
			'caption-side',

			'columns',
			'column-count',
			'column-fill',
			'column-gap',
			'column-rule',
			'column-span',
			'column-width',

			'color',
			'filter',
			'font',
			'font-family',
			'font-size',
			'font-style',
			'font-variant',
			'font-weight',
			'letter-spacing',
			'line-height',
			'text-align',
			'text-decoration',
			'text-indent',
			'text-transform',

			'height',
			'min-height',
			'max-height',

			'width',
			'min-width',
			'max-width',

			'margin',
			'margin-right',
			'margin-bottom',
			'margin-left',
			'margin-top',
			'margin-block-start',
			'margin-block-end',
			'margin-inline-start',
			'margin-inline-end',

			'padding',
			'padding-right',
			'padding-bottom',
			'padding-left',
			'padding-top',
			'padding-block-start',
			'padding-block-end',
			'padding-inline-start',
			'padding-inline-end',

			'flex',
			'flex-basis',
			'flex-direction',
			'flex-flow',
			'flex-grow',
			'flex-shrink',
			'flex-wrap',

			'gap',
			'column-gap',
			'row-gap',

			'grid-template-columns',
			'grid-auto-columns',
			'grid-column-start',
			'grid-column-end',
			'grid-column-gap',
			'grid-template-rows',
			'grid-auto-rows',
			'grid-row-start',
			'grid-row-end',
			'grid-row-gap',
			'grid-gap',

			'justify-content',
			'justify-items',
			'justify-self',
			'align-content',
			'align-items',
			'align-self',

			'clear',
			'cursor',
			'direction',
			'float',
			'list-style-type',
			'object-fit',
			'object-position',
			'overflow',
			'vertical-align',

			'position',
			'top',
			'right',
			'bottom',
			'left',
			'z-index',
			'aspect-ratio',

			// Custom CSS properties.
			'--*',
		)
	);

	/*
	 * CSS attributes that accept URL data types.
	 *
	 * This is in accordance to the CSS spec and unrelated to
	 * the sub-set of supported attributes above.
	 *
	 * See: https://developer.mozilla.org/en-US/docs/Web/CSS/url
	 */
	$css_url_data_types = array(
		'background',
		'background-image',

		'cursor',

		'list-style',
		'list-style-image',
	);

	/*
	 * CSS attributes that accept gradient data types.
	 *
	 */
	$css_gradient_data_types = array(
		'background',
		'background-image',
	);

	if ( empty( $allowed_attr ) ) {
		return $css;
	}

	$css = '';
	foreach ( $css_array as $css_item ) {
		if ( '' === $css_item ) {
			continue;
		}

		$css_item        = trim( $css_item );
		$css_test_string = $css_item;
		$found           = false;
		$url_attr        = false;
		$gradient_attr   = false;
		$is_custom_var   = false;

		if ( strpos( $css_item, ':' ) === false ) {
			$found = true;
		} else {
			$parts        = explode( ':', $css_item, 2 );
			$css_selector = trim( $parts[0] );

			// Allow assigning values to CSS variables.
			if ( in_array( '--*', $allowed_attr, true ) && preg_match( '/^--[a-zA-Z0-9-_]+$/', $css_selector ) ) {
				$allowed_attr[] = $css_selector;
				$is_custom_var  = true;
			}

			if ( in_array( $css_selector, $allowed_attr, true ) ) {
				$found         = true;
				$url_attr      = in_array( $css_selector, $css_url_data_types, true );
				$gradient_attr = in_array( $css_selector, $css_gradient_data_types, true );
			}

			if ( $is_custom_var ) {
				$css_value     = trim( $parts[1] );
				$url_attr      = str_starts_with( $css_value, 'url(' );
				$gradient_attr = str_contains( $css_value, '-gradient(' );
			}
		}

		if ( $found && $url_attr ) {
			// Simplified: matches the sequence `url(*)`.
			preg_match_all( '/url\([^)]+\)/', $parts[1], $url_matches );

			foreach ( $url_matches[0] as $url_match ) {
				// Clean up the URL from each of the matches above.
				preg_match( '/^url\(\s*([\'\"]?)(.*)(\g1)\s*\)$/', $url_match, $url_pieces );

				if ( empty( $url_pieces[2] ) ) {
					$found = false;
					break;
				}

				$url = trim( $url_pieces[2] );

				if ( empty( $url ) || wp_kses_bad_protocol( $url, $allowed_protocols ) !== $url ) {
					$found = false;
					break;
				} else {
					// Remove the whole `url(*)` bit that was matched above from the CSS.
					$css_test_string = str_replace( $url_match, '', $css_test_string );
				}
			}
		}

		if ( $found && $gradient_attr ) {
			$css_value = trim( $parts[1] );
			if ( preg_match( '/^(repeating-)?(linear|radial|conic)-gradient\(([^()]|rgb[a]?\([^()]*\))*\)$/', $css_value ) ) {
				// Remove the whole `gradient` bit that was matched above from the CSS.
				$css_test_string = str_replace( $css_value, '', $css_test_string );
			}
		}

		if ( $found ) {
			/*
			 * Allow CSS functions like var(), calc(), etc. by removing them from the test string.
			 * Nested functions and parentheses are also removed, so long as the parentheses are balanced.
			 */
			$css_test_string = preg_replace(
				'/\b(?:var|calc|min|max|minmax|clamp)(\((?:[^()]|(?1))*\))/',
				'',
				$css_test_string
			);

			/*
			 * Disallow CSS containing \ ( & } = or comments, except for within url(), var(), calc(), etc.
			 * which were removed from the test string above.
			 */
			$allow_css = ! preg_match( '%[\\\(&=}]|/\*%', $css_test_string );

			/**
			 * Filters the check for unsafe CSS in `safecss_filter_attr`.
			 *
			 * Enables developers to determine whether a section of CSS should be allowed or discarded.
			 * By default, the value will be false if the part contains \ ( & } = or comments.
			 * Return true to allow the CSS part to be included in the output.
			 *
			 * @since 5.5.0
			 *
			 * @param bool   $allow_css       Whether the CSS in the test string is considered safe.
			 * @param string $css_test_string The CSS string to test.
			 */
			$allow_css = apply_filters( 'safecss_filter_attr_allow_css', $allow_css, $css_test_string );

			// Only add the CSS part if it passes the regex check.
			if ( $allow_css ) {
				if ( '' !== $css ) {
					$css .= ';';
				}

				$css .= $css_item;
			}
		}
	}

	return $css;
}

/**
 * Helper function to add global attributes to a tag in the allowed HTML list.
 *
 * @since 3.5.0
 * @since 5.0.0 Added support for `data-*` wildcard attributes.
 * @since 6.0.0 Added `dir`, `lang`, and `xml:lang` to global attributes.
 *
 * @access private
 * @ignore
 *
 * @param array $value An array of attributes.
 * @return array The array of attributes with global attributes added.
 */
function _wp_add_global_attributes( $value ) {
	$global_attributes = array(
		'aria-describedby' => true,
		'aria-details'     => true,
		'aria-label'       => true,
		'aria-labelledby'  => true,
		'aria-hidden'      => true,
		'class'            => true,
		'data-*'           => true,
		'dir'              => true,
		'id'               => true,
		'lang'             => true,
		'style'            => true,
		'title'            => true,
		'role'             => true,
		'xml:lang'         => true,
	);

	if ( true === $value ) {
		$value = array();
	}

	if ( is_array( $value ) ) {
		return array_merge( $value, $global_attributes );
	}

	return $value;
}

/**
 * Helper function to check if this is a safe PDF URL.
 *
 * @since 5.9.0
 * @access private
 * @ignore
 *
 * @param string $url The URL to check.
 * @return bool True if the URL is safe, false otherwise.
 */
function _wp_kses_allow_pdf_objects( $url ) {
	// We're not interested in URLs that contain query strings or fragments.
	if ( str_contains( $url, '?' ) || str_contains( $url, '#' ) ) {
		return false;
	}

	// If it doesn't have a PDF extension, it's not safe.
	if ( ! str_ends_with( $url, '.pdf' ) ) {
		return false;
	}

	// If the URL host matches the current site's media URL, it's safe.
	$upload_info = wp_upload_dir( null, false );
	$parsed_url  = wp_parse_url( $upload_info['url'] );
	$upload_host = isset( $parsed_url['host'] ) ? $parsed_url['host'] : '';
	$upload_port = isset( $parsed_url['port'] ) ? ':' . $parsed_url['port'] : '';

	if ( str_starts_with( $url, "http://$upload_host$upload_port/" )
		|| str_starts_with( $url, "https://$upload_host$upload_port/" )
	) {
		return true;
	}

	return false;
}

Reproduction Hermes Evelyne Iii 29 Bags\n<\/p>\n

From what I know, now, a new Hermes Evelyne TPM prices just over $2,000\u2014though I\u2019m not fully certain. It\u2019s amazing what this bag will hold, and it\u2019s very deceiving because it appears so tiny. You\u2019ll also hear them referred to as Evelyne 16, Evelyne 29, Evelyne 33, and Evelyne 40\u2014the numbers show the width of the bag in centimeters. Oh, and wishing you all a very Merry Christmas ahead of time!\n<\/p>\n

The manufacturer has employed high quality uncooked materials and hardware for crafting this bag and hence the bag assures great looks and durable building. All hardware is made from steel and the bag material is cowhide rendered in EP palm sample with the inside lining accomplished in sheepskin. While this bag precisely mimics the looks of Hermes Kelly bag, it is practically inconceivable to tell the distinction between the 2 if you place the original and the dupe together. This Kelly shoulder bag is made from beaded material in knitting pattern. The closure is cover kind and the bag is tough and sturdy in make.\n<\/p>\n

Everything from the soft pebbled leather-based to the gold-toned hardware provides this purse the identical look because the Picotin. At an analogous dimension to the first dupe talked about on this list, this bag is the right small accent for tackling no matter your week brings within the ultimate stylish type. Also produced from faux leather, this bag is another dupe that does a great job of channeling the style of the Herm\u00e8s Kelly at a a lot lower price point. Sturdy and well-made, this bag is certainly value looking into if you\u2019re looking to develop your handbag collection. Before we dive headfirst into the pool of Herm\u00e8s dupes, let\u2019s discuss technique. Finding a dupe that\u2019s value trying out needs to examine some \u201cquality-control\u201d boxes!\n<\/p>\n

This store requires javascript to be enabled for some features to work appropriately. Could you please broaden on what you imply by \u201cThere is no Paris\u201d? Do you imply there is not a \u201cHermes, Made in Paris\u201d stamp on the bag? Unfortunately, we require more info to provide a date and value for the bag.\n<\/p>\n

Replica Herm\u00e8s baggage may provide an identical look at a fraction of the value. Still, they lack the funding value, quality craftsmanship, and resale potential that include genuine Herm\u00e8s bags. Even if the bag seems decent in pictures, the actual value exhibits up in customs seizures, non-refundable losses, and reputational harm.\n<\/p>\n

Waiting lists can stretch on for years, and there\u2019s no assure of eventually getting the exact design or material you need. High-quality Herm\u00e8s replicas are meticulously crafted to imitate the design, texture, and even the minutiae like stitching and hardware of genuine Herm\u00e8s baggage. When it comes to buying reproduction Hermes baggage, it is essential to choose a trusted supply like TheCovetedLuxury. With eight years of expertise in the business, they have established a popularity for offering impeccable replicas that rival the genuine Hermes baggage in quality. The Coveted Luxury prides itself on attention to element, utilizing premium materials, and replicating the craftsmanship of the originals. Their dedication to buyer satisfaction and affordability units them aside in the replica market.\n<\/p>\n

It has a pleasant shine and top quality reminiscent of the beauty of authentic Hermes baggage. It is a silver-colored accent that’s iconic for these extremely sought after Birkin Togo purses from TheCovetedLuxury. The Sac Bijou Birkin is the most expensive and unique Herm\u00e8s bag ever produced. Priced at $2 million and released as part of the Herm\u00e8s Haute Bijouterie Collection in 2012, this bag is a testament to the luxurious brand\u2019s commitment to craftsmanship and exclusivity. Designed by Pierre Hardy, the Sac Bijou Birkin is more than only a handbag; it\u2019s a fusion of high style and jewelry.\n<\/p>\n

The glazing on genuine Hermes baggage is usually thin, with a slight brushed texture, and thru the coating, you possibly can even see the reduce marks of the leather-based. Also, when you look closely at the blind stamp on the sangles, the faux has it stamped too deeply, prefer it was accomplished by a machine. The font and spacing of the engraving may differ, however faux bags can\u2019t match the precise lettering of genuine Herm\u00e8s baggage. Most recently produced Herm\u00e8s Birkin and Kelly bags are lined with chevre or goatskin. It\u2019s a barely textured, really tough leather-based with a bit of shine. Additionally, on a genuine Herm\u00e8s bag, the clochette must be crafted from a single piece of leather folded in half and stitched collectively, not from two separate items.\n<\/p>\n

The background colors might have been in black, navy or purple with a white font or white with a dark font. Interestingly, should you depend the spokes within the wheel you\u2019ll get the number six, whereas the printed stamp on tie has 5 spokes. That\u2019s also a good way to determine if there\u2019s a faux as a end result of fakers usually don\u2019t take observe of those small details. Usually, when writing a dupe article, we’ll include a bunch of various lookalikes. As we scoured the web for copycat Herm\u00e8s Avalon Pillows, the merchandise were not dwelling as much as our standards. There had been slim pickings to start with, and the ones we discovered had been either the wrong colour or the incorrect texture.\n<\/p>\n

From the intensive array of floral perfumes, I only picked some notable dupes that actually did a fantastic job of mimicking this appealing composition. This is essentially the most enticing and pleasant scent that I\u2019ve tried thus far, but its efficiency is basically disheartening. If you\u2019re trying to get pleasure from the same attractive aroma for an extended interval, I advocate exploring the alternatives I\u2019ve described within the following phase. In 1984, the Birkin bag was put into production, using the actress\u2019s name Jane Birkin who impressed t..\n<\/p>\n

Funnily, followers dubbed the enamel bracelet the Clic Clac due to the sound the bracelet makes when it\u2019s taken on or off. On a extra severe note, the Hermes H bracelet prominently choices the signature H as its clasp High Quality Replica Hermes Replica Hermes Constance, flanked on either side by coloured enamel. Depending on their condition, materials, shade and other particulars, the value of an Herm\u00e8s Birkin bag ranges from $10,000 to as a lot as $450,000. But price just isn’t the only barrier to obtaining the long-lasting accessory named after late British-French singer-actress Jane Birkin, who died last week at age 76 at her residence in Paris. “I determined to make the ‘Birkin’ as a surprise for her as a outcome of it looks like essentially the most doable designer bag to make and I was looking for my subsequent DIY project.”\n<\/p>\n

Although I\u2019ve introduced you with some great alternate options to the Hermes belt, you proceed to could be thinking about shopping for the actual one! Thus, let me clarify somewhat bit more concerning the Hermes belt and its specs. Now, the second batch of Hermes belt dupes is quite totally different.\n<\/p>\n

Inspired by icon, Grace Kelly of Monaco, the Herm\u00e8s Kelly is amongst the most desired purses in the.. Hermes are one of the few manufacturers (that I know of) who have their own scarf factory. Not solely do they print and assemble their very own scarves, but additionally they loom the silk hermeshandbagsell<\/em><\/strong><\/a>, which is why Hermes have the thickest, heaviest silk twill on the market. Authentic Hermes scarves will have a visual texture, pretend Hermes scarves could have a flatter, smoother and shinier texture.\n<\/p>\n

Sway introduced his blueprints to a neighborhood leather-based store and then picked out croc-embossed calfskin and cowhide for his model of the bag. “Herm\u00e8s was a model that my mom and friends love they usually always talk about Birkins,” Kim informed CBS MoneyWatch. “But it was kind of a joke that I would have one as a end result of I knew it was so costly and coveted.” Garden Party has always been a prime choose of celebs from the Hermes. The one you see within the image has all the options and looks sported by Hermes Constance bag and therefore you will not tell the distinction. The first outstanding aspect of this bag is the trustworthy replica of the \u2018H\u2019 clasp of Hermes Constance in all its originality.\n<\/p>\n

The center line ought to have a pattern number followed by the initials of the Artist. So in case your stamp didn\u2019t have the copyright image, your pattern mark ought to solely have two traces. Thereafter, Hermes added a third line to a sample mark which reads 100 percent soie which suggests silk in French.\n<\/p>\n

Purchasing from reputable sources that respect legal standards and mental property rights is crucial to ensure that these copy baggage are both ethically sourced and sold. Owning considered one of these bags can elevate any trend ensemble, adding a contact of luxury and sophistication that Hermes is known for, at a more accessible worth point. With so many replicas in the marketplace, it might be difficult to differentiate between the true deal and a fake. In this text, we\u2019ll data you thru the strategy of determining a duplicate Hermes from the genuine. The genuine blankets have very sharp and precise strains for the small print of the plaid, the background of the horse replica baggage, etc.\n<\/p>\n

Hermes makes use of Togo, Epsom, Clemence, Swift, Crocodile, and Ostrich leathers to produce their luggage. These authentic leathers have appearances and feel particular to each sort. Most of the reproduction vendors choose to make use of low-quality leathers to minimize back price and that ends in dwindled seems and appearances of the article. If you are considering buying a Hermes replica, select a vendor who has its customers\u2019 trust for utilizing the greatest quality leather from the identical tannery as the unique Hermes products.\n<\/p>\n

When purchasing a reproduction Hermes bag, one key side to keep in mind is the scale and proportions. Original Hermes bags are identified for his or her meticulous consideration to detail – precise measurements contribute to their iconic designs. To consider a replica’s high quality, take a while measuring it in opposition to specifications offered by Hermes. A high-quality duplicate should intently resemble these specifications so as to replicate precisely the original bag’s design and proportions. This bag from Daesin has some very similar Birkin bag options \u2014 making it probably the greatest Hermes reproduction purses. The square-shaped structure mirrors the signature silhouette of the Birkin.\n<\/p>\n

If unique purses designers didn\u2019t cost the extreme costs for his or her genuine product within the first place, then there could be no pretend market. Hope you are having a fantastic summer time.Today I decided to speak to you about Herm\u00e8s Oran sandals. You have seen nearly all the bloggers and everyone who loves style sporting Herm\u00e8s Oran sandals. Oran, named after a city by the seaside in Algeria, was born in 1997.\n<\/p>\n

Since I got to match the authentic and the reproduction right next to each other, this half is simple to see. For the sake of a little experiment, I purchased one other H blanket from PH. So, in whole, I ordered three fake Hermes blankets. I additionally reached out to Hannah (PH) since they specialize in Hermes products.\n<\/p>\n

This includes a beautiful crocodile Rose Mexico Shiny Porosus Crocodile Birkin 35 GHW. However, lately (alongside the rise of social media), Herm\u00e8s has undeniably become extra mainstream. The Birkin bag, specifically, has evolved right into a cultural icon as it represents the epitome of designer luggage and signifies both monetary and fashion sophistication. With my in depth buying experience, I have created this complete information to assist you in figuring out the key elements to consider when choosing one.\n<\/p>\n

The Saffiano shape of the satchel provides elegant appears to the product. This Hermes dupe has a large interior pocket that you need to use to hold your private belongings similar to your telephone or a small tablet. But the one thing I really beloved about this bag is that it comes with a matching clutch purse that you can use to retailer your money and cards safely.\n<\/p>\n

Key choices of a genuine Herm\u00e8s bag\u2019s model are its completely centered position on the plate and the font of the emblem itself. Herm\u00e8s luggage use real, high-quality leather-based, which could come in numerous leather-based variants. Wang discovered a web-based ecosystem of duplicate purses that paralleled luxurious manufacturers, making counterfeit items easily accessible.\n<\/p>\n

It is out there in 4 gorgeous colors but this green is the best of all. If this isn’t the proper summer season bag to carry to the beach or on an off-the-cuff day trip, I don\u2019t know what’s. I imply, look how cute the lock particulars and rattan + leather fusion.\n<\/p>\n

These sandals are primary sufficient to put on with informal clothes but add pizzazz to any outfit since they can be dressed up or down. With literally 2,000 folks raving about it and already in love with it, I can almost guarantee that you won\u2019t be dissatisfied with this deal. It\u2019s worth each penny and assured to earn you some serious compliments. Both blankets have the same variety of iconic H\u2019s, and they\u2019re created from a luxurious cashmere and wool blend that\u2019ll keep you heat and comfy.\n<\/p>\n

Despite controversial beliefs, authentic Herm\u00e8s bags aren\u2019t PERFECT. I am especially pleased with the craftsmanship, the handles really feel strong and cozy to carry. If you see pearling on your faux Birkin then the pearling is a 10. One draw back is that their website only exhibits the Birkin and Kelly. You need to inquire about ordering other bags, but they actually make many styles.\n<\/p>\n

These scarf alternatives capture the luxurious look and flexibility of the Herm\u00e8s silk scarf with a beautiful, intricate sample that mirrors the luxurious brand. While the patterns themselves are entirely totally different, the color schemes discovered on these dupes characteristic related colors and intricate designs that work towards a really similar look. Herm\u00e8s represents more than simply luxury, promoting a philosophy of fashion that prioritizes timeless design over passing trends. Like we see in lots of different luxurious, high-end manufacturers, each bit is crafted expertly with the intent to final via years and generations. Well, they’re hand crafted utilizing the finest high quality leather and are normally produced in very restricted numbers. For these causes, they’re highly-sought after by the elite few which may afford this luxurious merchandise.\n<\/p>\n

Therefore, the stitches are tighter and the craftsman must take additional care because they are visible. The edges of the Sellier bag are sharper, and its structure has a lot more rigidity than its counterpart, having the power to stand upright instead of slouching. Considering the Everyday Metal Bracelet\u2019s reasonably priced price level, you\u2019ll be amazed by how durable the push-clasp hinge closure is.\n<\/p>\n

All merchandise undergo a triple high quality examine to ensure flawless delivery. The distinction is striking in relation to the supplies used. The two leathers differ significantly\u2014the real leather showcases a refined, velvety smooth surface with a barely darker shade, while the imitation leather has a textured appearance. And to level out off that aforementioned scarf detailing, enter the River Island Brown Scarf Mini Tote Cross Body Bag. The brown faux leather paired with the vintage gold detailing and scarf results in a bag we would assume is much more expensive, not to mention \u00a336.\n<\/p>\n

We have already talked about that the supplies that Hermes makes use of to make their baggage are of superb high quality. They have been designed and constructed to final and likely even flip right into a family heirloom. With eight years of experience in the business, they’ve established a recognition for providing impeccable replicas that rival the authentic Hermes baggage in quality. The Coveted Luxury prides itself on consideration to component Hermes Replica Bags, utilizing premium provides, and replicating the craftsmanship of the originals. This is the place probably the greatest Hermes H bracelet dupe is on the market in as a necessary different.\n<\/p>\n

On top of that, we\u2019ll show you how Hermes ties modified throughout the a long time so you can at all times easily spot the genuine product and go away behind the pretend. Of course, we also level you in the best path where you can find genuine used Hermes ties. Buy and sell in a single place and get the identical nice buyer expertise each time. Check out our on-line reviews to see what other prospects consider us. Of all Herm\u00e8s jewelry, the most counterfeited pieces are the Clic Clac H and leather-based Collier de Chien bracelets. Below are our prime tips on tips on how to distinguish commonly counterfeited Herm\u00e8s jewelry.\n<\/p>\n

Beside the actual sandals boxing footage I\u2019m displaying you the distinction between a real and a pretend logo Herm\u00e8s on the dust bag. The Hermes Birkin 25cm bag is ideal for the petite or those who just don’t need to tote around lots of objects. Mint Velvet has a quantity of nice dupes for some of the finest designer items, so we\u2019re not shocked to see this beautiful pair of cutout sandals that look identical to the Oran pair from Hermes. Most sellers don\u2019t provide them routinely, so make positive to let the vendor know you need them whenever you place your order. Or, if you\u2019re like me and luxuriate in purchasing extensively by method of the seller\u2019s web site and album catalogs, I typically resolve on the style I need through searching.\n<\/p>\n

However, underneath is a chart offering a typical thought of bag prices based mostly on out there knowledge as of January 2022. Their high quality, their wonderful leathers, and certain, the status they symbolize. Given that the superior stitching methods of Herm\u00e8s are a severe a half of its attraction, the Birkin uses a specific two-needle hand-stitching technique called the saddle stitch. Even for pre-owned luggage, the metallic hardware usually reveals no excessive put on or unnatural shine. Herm\u00e8s craftsmanship ensures that the steel accessories protect their top of the range over time, with little to no lack of luster or damage.\n<\/p>\n

They\u2019re an excellent comparable type, but not the most identical Hermes dupes, if that\u2019s what you\u2019re going for. Additionally, the metal on a real Herm\u00e8s zipper could be more of a matte finish as oppose to a shiny metal. The zipper on a real Herm\u00e8s can be simple to use and shouldn’t require an extreme quantity of pulling to open to shut. The zipper itself ought to stay parallel to the zipper line at all times. If the zipper hangs at a ninety degree angle from the zipper line or flops down, that could possibly be a signal of a pretend.\n<\/p>\n

He deconstructs designer purses and comes up with his own value estimates. When purchasing an Hermes Evelyne, it\u2019s essential to do your research and examine the bag carefully before making any selections. Keep in mind that some replicas may be very convincing, so it\u2019s important to pay attention to details similar to leather-based quality Birkin Replica Hermes<\/em><\/strong><\/a>, stitching, hardware, stamping, and accessories that come with the bag. By following these guidelines, you\u2019ll be higher equipped to differentiate between a real Hermes Evelyne and a fake one. She echoed a variety of women I spoke with who think authentic customers are those getting performed.\n<\/p>\n

For Ms Flowdea, though, there’s nothing like the genuine product. But with little enforcement by authorities to focus on the counterfeit bag traders, the business will probably continue to thrive in Indonesia. “What we are able to do once we encounter fake goods is, we will take notice and then contact the model proprietor \u2014 if they don’t like their good being copied then they can come to our workplace and file a report.” Despite the growing demand for luxurious items in South-East Asia, the manufacturing still largely takes place in China. An official working in Jakarta was additionally under scrutiny for the bag his spouse was showing off on social media, prompting the city’s appearing governor to declare it a superfake. Over the past few months, a quantity of Indonesian officials or their relations have been noticed with luxury items, sparking an outcry about the wealth of powerful political households.\n<\/p>\n

On a tie, it should say Hermes Paris all in caps and have a copyright symbol. Hermes ties which may be older than that won\u2019t have it so don\u2019t be afraid when you don\u2019t discover the c, it can nonetheless be a genuine Hermes tie. Always verify to see that the stamp was printed on at the tie and not sewn on or glued on as a end result of those can be hallmarks of a pretend. These are these little sewings on both finish of the fold that keep the tie from unfolding. For printed Hermes twill ties, these little tie tacks are usually in a color very close to the background colour of the silk. On the other hand, pretend Hermes ties often use only a black color and their tacks are additionally much thicker.\n<\/p>\n

“I’ve been accumulating baggage for 15 years. I have sturdy feelings about them. I know if issues are off.” The Surabaya-based businesswoman mentioned she began accumulating Herm\u00e8s bags after tiring of investing her wealth in property and sports cars. A crocodile-skin Kelly \u2014 probably the most coveted and rarest of all Kelly baggage \u2014 can simply price $100,000. The superfakes may be a severe investment, however they still cost 10 per cent of their real counterpart. The superfake revolution has sparked a debate in regards to the ethics of counterfeit items, as properly as raising questions on what precisely we’re paying for after we spend hundreds on a scrap of leather-based. Either method, only you would possibly be more probably to know the truth about your purse’s origins.\n<\/p>\n

In the front heart is the Herm\u00e8s “Le Duc” logo surrounded by two circles. If there’s one circle, or if the Le Duc is too dark or off-center, the dustbag is probably going pretend. Individual craftsmen make these luggage, so the stitching is imperfect.\n<\/p>\n

Real Hermes bags are produced from high-quality leather-based that feels supple and easy to the touch. Pay special attention to the consistency and high quality of the hardware on a Herm\u00e8s bag. Genuine Herm\u00e8s hardware, crafted from high-grade metals, should really feel substantial and keep uniformity in shade and texture all through the bag. The hardware, together with zippers, ought to function smoothly with out indicators of tarnishing or put on.\n<\/p>\n

Priced at $115, this real cowhide leather-based bag appears like the true deal and is price treating yourself to. The SHEIN Crocodile Embossed Bag is available in plenty of modern colors to search out your perfect match. One of the best components of this Radziwill Petit Double Bag is the removable and adjustable strap that permits you to convert it from a purse to a shoulder or messenger bag. It is manufactured from resistant leather of excellent quality that enables the bag to remain agency on its own.\n<\/p>\n

If you observe the advice in the information above you will gain an excellent indication of whether or not your Hermes bag is real or not. However, as counterfeit productions become more advanced it could be tough to know for positive until you purchase the services of an professional. Should you want to sell or consign your bag, we offer a full authenticity check for all Hermes luggage offered via our platform. However, if you don’t want to sell your bag we recommend bringing it into a Hermes boutique and inquiring in regards to the authenticity of the Hermes bag. Unfortunately, it’s inconceivable to guarantee the authenticity of a bag by wanting a photos alone. We extremely advocate that you simply only purchase Hermes bags from respected sellers who have a historical past of selling genuine and authentic purses.\n<\/p>\n

Free delivery worldwide and there is not any extra payment through the transport. Dupe tradition entails discovering a less expensive model of a extremely desirable item, like the Walmart Birkin. Dupes usually are not particularly designed to replicate the posh gadgets.\n<\/p>\n

Usually, I\u2019ve all the time appreciated colorful luggage from a distance, but I hardly ever obtained one for myself. I had the concept that colourful bags weren\u2019t as versatile as the basic darkish ones. Using the hallmarks we outlined, you’ll increase your chances dramatically to get a real Hermes tie even when you buy it classic or used. That being mentioned, the safest way to get a genuine Hermes product is to purchase directly from their web site or from one of their shops. Now there\u2019s one element in Hermes tie that at all times exhibits you it\u2019s a faux and that\u2019s when the tip liner has a woven Hermes emblem or any sort of printed Hermes logo on the tip liner.\n<\/p>\n

So, a bag from 2021 might not have a lock that was made in 2021. Usually, the lock is produced either earlier than or at the identical time as the bag. Each Birkin bag comes with its personal lock and key and so they ought to match the end of your bag\u2019s hardware. There\u2019s simply something particular in regards to the smell and feel of an actual Herm\u00e8s Birkin bag. The actual Hermes Birkin has a sleek curve, whereas the Birkin dupe often appears bigger and has sharper shapes. The Birkin bag has a trapezoid form, it\u2019s pretty inflexible, so it retains its shape even when there\u2019s nothing in it.\n<\/p>\n

Gifting a designer bag or one of the best pockets is one way to impress your girl on any occasion. But should you really wish to go all out for Christmas, Valentine\u2019s Day or a particular anniversary, there\u2019s nothing better than the coveted Hermes Birkin Bag. Zippers on the inside of Herm\u00e8s baggage include a distinct design factor. However, older fashions of Herm\u00e8s bags might solely have a neat sq. on the end of the zipper.\n<\/p>\n

Herm\u00e8s is not a model to chop corners, so once they produce their enamel bracelets like the Clic Clac, they set a single, stable piece of enamel into the metallic framework. It\u2019s a costlier and labor intensive course of than the counterfeit method which merely involves pouring resin into the framework. The largest clue in deciphering an actual Herm\u00e8s bangle are within the softly rounded edges of the enamel. Fake Herm\u00e8s bracelets are inclined to run smaller than authentic pieces. Cross-reference the scale with these listed on Herm\u00e8s\u2019 website. Because bogus bangles are made of far less expensive supplies (like plastic or resin), forgeries are noticeably lighter.\n<\/p>\n

But some Chinese TikTokers have gone additional and claimed they make the high-end goods that luxurious brands just slap their labels onto. I actually love how the rich burgundy and the impartial linen colors complement one another. I got this attractive black Gucci Jackie final May, and after utilizing it for nearly a 12 months I even have a really good grasp on the standard of this bag.\n<\/p>\n

On Thursday, TikToker Jessi My posted a video of her holding what appeared like two Herm\u00e8s Birkin baggage. The Hadyn Sandals are a wonderful Hermes various as a end result of they look much like the unique Oran Sandals but worth a fraction of the value. These stylish slide slip-ons are a splurge at $200 however are made from high-quality leather that protects towards placed on and tear. \u2705The authentic Herm\u00e8s metal emblem have to be clearly engraved, and the edges and indentation of the font must be clear, shiny, and finely polished.\n<\/p>\n

Owning a high-quality reproduction Hermes bag is usually a practical and accessible method to get pleasure from luxurious style without the exorbitant price ticket. Remember, fashion is not defined by the label in your bag but by your private type and confidence. With the proper knowledge and discernment, you can bask in luxurious on a budget.\n<\/p>\n

I\u2019m Timothy and welcome to my web site, Best Chinese Products. If you are here, then you might be probably involved to know extra about who we’re and what we do at Best Chinese. I\u2019ve been a product sourcer from China for greater than 5 years now and I\u2019ve been helping manufacturers decide and choose products for their necessities. Hermes Constance is one of the most beloved baggage from Hermes that follows a outstanding type and utility aspects. While you will want to shell out a fortune to procure this type statement, you’ll find a way to land on a Hermes Constance look alike bag with a small funding.\n<\/p>\n

One of the most important purple flags to determine a faux Hermes Birkin bag is an authenticity tag, Herm\u00e8s doesn\u2019t concern an authenticity card. If you buy by means of our hyperlinks, the USA Today Network may earn a commission. Herme\u0300s Birkin baggage start at spherical $10,000, with uncommon fashions fetching upwards of $500,000.\n<\/p>\n

On the opposite hand, the Kelly bag was made well-known by none apart from Grace Kelly. It\u2019s known for its refined silhouette and understated elegance, making it a flexible accessory for any occasion. This model does a fantastic job of providing durable supplies and a snug match that\u2019s easy to walk in, beyond, of course, the beautiful coveted look of Herm\u00e8s.\n<\/p>\n

Customer service rep Lily has great insights into their bag alternatives (not essentially the priciest ones). I\u2019ve gotten 2 Kellys, 4 Birkins, 1 Constance, 1 Evelyne, 1 Garden Party, and three wallets from them. Honestly, they\u2019ve by no means let me down, and my bags at all times get plenty of compliments.\n<\/p>\n

I\u2019ve seen numerous Reddit threads with Hermes look alikes and even without the logo, these look legit Hermes. The leather-based feels soft and of high quality, and resembles the leather of real Herm\u00e8s bags. Hermes Heaven really sources their leather-based from the same supplier because the authentic Herm\u00e8s model. Copies of the luxurious trade’s most sought-after purses from French trend home Herm\u00e8s start above $1,000 and stretch as a lot as $10,000 for a reproduction of a Kelly crocodile-skin bag. The story goes that Jane Birkin had an opportunity encounter with Herm\u00e8s CEO, Jean-Louis Dumas, on a flight. During the flight, she expressed her battle to find a practical yet trendy purse.\n<\/p>\n

Resale data from Rebag signifies that in style types from brands such as Louis Vuitton, Chanel, and Hermes are being resold second-hand for prices larger than their original buy worth. Luxury brands are maintaining their goods exclusive and their prices excessive. Department of Justice smuggling millions of counterfeit luxurious items into the U.S.A. from China. The seized objects included pretend Louis Vuitton and Tory Burch purses, Michael Kors wallets, Hermes belts, and Chanel perfume.\n<\/p>\n

They also supply different Herm\u00e8s-related items, like shoes, residence goods, and scarves. When you buy a duplicate, you\u2019re not just saving money\u2014you may be supporting an underground economy that thrives on exploitation. We are also loving this Manhattan tote by YSL, which is designed with an analogous buckle mechanism to the Hermes one.\n<\/p>\n

Get the most popular, highest high quality & inexpensive bag dupes of the week delivered to your inbox for FREE. Zipping a Birkin should be a luxurious expertise, whether or not it\u2019s classic or was crafted in 2023. The zipper should never catch or feel stiff if you open or shut it. It is regularly used for travel or enterprise, because it presents enough space for larger essentials like a laptop or a light-weight change of garments. The Birkin 35 was the first Birkin bag size, introduced in 1984.\n<\/p>\n

Do you have an article that may be of interest to other purse lovers? On the faux Birkin bag right here the square is merely too massive and the embossing is simply too deep while on the authentic Birkin it is crisp and neat. And, of course, the sloppy stitching in the proper image definitely offers away the faux. A genuine zipper on Birkin ought to have the name \u201cHerm\u00e8s\u201d engraved on the metal puller. There is also one peculiarity regarding Hermes zipper pullers that may allow you to spot a faux.\n<\/p>\n

Another drawback arising with pretend Hermes baggage is that they are turning into more subtle. As more and more faux luggage flood the market, the flexibility to identify the distinction between them as authentic Hermes luggage turns into harder. However, there are always tells in pretend bags that can be noticed if you understand what you might be in search of. There are additionally pink alternatives of the Hermes bracelet for just below $20! Again, you’ve the choice to go for gold, rose gold or silver design. Personally, I would like to see these bracelets in person as the pink looks very brilliant.\n<\/p>\n

The compartments inside are enough for essentials like your telephone, compact, and pockets, making it a sensible but fashionable choice. The seams are impeccably done, with neat, tight stitching that lies flush against the leather-based, reinforcing the bag\u2019s construction whereas additionally enhancing its visible appeal. The corners of the bag are crisp, clean, and geometrically precise. There\u2019s no awkward bulging or sagging; the bag\u2019s construction ensures it stands as a proud rectangle whether or not it\u2019s full or empty. The flap closure is secured with Herm\u00e8s\u2019 iconic \u201cH\u201d clasp, a masterpiece of design and functionality, which supplies an extra layer of security while adding a distinct design element. The bag\u2019s flap design and Herm\u00e8s\u2019 iconic \u2018H\u2019 clasp make it immediately recognizable, adding a contact of elegance to your ensemble.\n<\/p>\n

And should you don\u2019t believe me, verify the nice evaluations (and reviewer pictures)! Buyers have loved every thing about this purse, from the vibrant colours to the soft vegan leather. Hermes evelyne duplicate Always an ongoing effort because we have so many areas across the North Shore to deal with, stated Brian Hutchinson, the district fire chief.\n<\/p>\n

More than some other Herm\u00e8s piece out there, the Herm\u00e8s Birkin Bag is a symbol of luxurious and exclusivity, standing as certainly one of Herm\u00e8s\u2019 most iconic creations of all time. You get the birkin look without making an attempt too exhausting to mimic the original and nonetheless feels distinctive. One verified purchaser mentioned, “Beautiful quality and dimension is ideal to suit a telephone.” Aside from all the cool issues that come with proudly owning a birkin, they have an insane retail value and most of the time unimaginable to buy in retailer as a outcome of it is “ready listing”. 1) The packaging should include an orange box with the company\u2019s brand printed on it clearly, and a black ribbon tied on it, which once more ought to bear the company\u2019s emblem. The packaging ought to have a nice and high-quality appearance.\n<\/p>\n

Currently, our authentication service is simply available for baggage listed on our site for sale and for baggage which we’ve consigned. If you are interested in promoting or consigning your bag with us, we will authenticate it before listing it on the site and once more utilizing a second professional upon a successful purchase of the bag. If you would like more data, please message us using the form on the \u201cContact Us\u201d page. Many fake Hermes Birkin and Kelly bags include these orange plastic bank cards that say \u201cHermes\u201d on them.\n<\/p>\n

No other travel bag on the planet is as exquisite as this handcrafted Replica Herm\u00e8s Birkin 50 bag. Herm\u00e8s replica bags are affordable alternatives to their genuine counterparts, permitting a wider range of shoppers to experience the posh without breaking the financial institution. This actually is a belt that could be worn anywhere by anybody and is a flexible design in traditional black and gold. Whether you are buying this belt for your self or as a gift it can only be described as a cut price. We advise you get yours shortly as that is positive to be a well-liked item. There are few more glamorous and chic style manufacturers than Hermes.\n<\/p>\n

Hermes leather-based products are made with a special type of stitching often recognized as saddle stitching, which originated from their historical past of handcrafted equestrian leather-based gear. Saddle stitching entails utilizing two separate needles to create two traces of stitches in a single line of holes, leading to a clean and agency look. Yes, Hermes provides a selection of gold bangles and leather-based bracelets for women and men. Bracelets are the right crowning glory to any outfit, and Hermes offers some attractive choices that provide the perfect quantity of sophistication, whether layered or styled alone.\n<\/p>\n

Pair with blue denims and a casual white shirt for an elevated on an everyday basis look. All other colours have offered out, however luckily this basic black tote is still in stock. Take a take a look at the best Herm\u00e8s Birkin Bag dupes that we might discover. They is not going to only upgrade your wardrobe, but they’ll additionally save you a fortune. You can even pair them along with your favorite Herm\u00e8s sandal dupes as discovered by Frankie Bridge. These slides are an excellent choice for achieving that coveted Herm\u00e8s aesthetic at a fraction of the price.\n<\/p>\n

Presently, I don\u2019t shop on Ioffer, Aliexpress, or social media as a outcome of I even have been burned by way of them (as have a lot of different blog readers) and they are actually hit and miss. Having an authentic piece only actually provides social worth, and going for these copies means you get to carry onto a fashionable staple and nonetheless have some spare cash for additional wardrobe additions. Another added bonus is that it comes with a mud bag that will assist you preserve the standard of your purse.\n<\/p>\n

The rise of the superfake signifies that in Australia and overseas, businesses have emerged to assist patrons attempt to verify that their bag purchases aren’t replicas. The market options on the United States government’s list of “infamous markets” for counterfeit merchandise. Superfakes are often handmade, use costlier materials and are troublesome to tell other than the pricey originals.\n<\/p>\n

Now given this data, it might be unsurprising to you that you simply cannot simply waltz into a Herm\u00e8s boutique and purchase certainly one of their coveted Birkin or Kelly bags. These iconic luggage aren’t merely offered on demand, and require a client to have a history at an area boutique before they’re eventually provided the opportunity to purchase a bag. Stay ahead of the style sport and be part of my weblog subscription to unlock exclusive bag evaluations, fashion tendencies, and more. Super responsive and had several profitable purchases that arrived secure and sound, good boutique packaging (dust bag, booklet, flower, box, and buying bag). For occasion, when my sister really needed that red fake Miu Miu, Lily didn\u2019t recommend it. She straightforwardly talked about the colour discrepancy problem with that bag and advised I go for the black one instead.\n<\/p>\n

This is the model new mantra for getting spherical on foot, by bicycle, or on the wing (Herm\u00e8s style!), with the fashionable world inviting us to journey ever lighter. Secondly, the lock particulars and the overall design look a lot just like the Hermes bag, even when it is not. Lastly, the leather-based high quality is what I name \u2018omg fairly.\u2019 Super delicate and sturdy. We\u2019ve concluded that purchasing a duplicate Hermes bag from Thecovertedluxury is the most effective various for you. It\u2019s as a finish results of you’ll get a similar-to-the-original luxurious-looking purse for a fraction of the value. It is the most practical possibility with out sacrificing sort in each buy.\n<\/p>\n

Bags of the French fashion house Hermes can be rightfully thought-about essentially the most recognizable. These famous and opulent baggage are carried by celebrities, A-listers, and heroines of television sequence. I have a Herm\u00e9s clutch and I don\u2019t know whether it is real or fake. We advise you use the information above to authenticate your Hermes clutch. Inspect all areas of the bag intently and if you remain uncertain concerning the bag\u2019s authenticity you can convey it into a Hermes boutique and ask the workers to examine the bag for you.\n<\/p>\n

On a fake Herm\u00e8s, the vital thing might be protruding of the bottom of the clochette ever so slightly and will not totally slot in fully hid. Additionally, the clochette on a real Herm\u00e8s bag must be made of one piece of leather-based folded in half and stitched, not two pieces. Each bag is hand-crafted by professional artisans totally trained in constructing luxurious items; specifically Herm\u00e8s items. When inspecting the stitching on a Herm\u00e8s bag you are going to look for the signature saddle stitching that is customary to their handbags. You would count on a luxury merchandise such as a Herm\u00e8s to have completely flawless stitching; this isn’t the case.\n<\/p>\n

Top tier replica dealers normally have workshops which are similar to that of Herm\u00e8s itself. It is inside these workshops that baggage are made, and timing sensible it can take up to two months (in my experience) for a bag to be completed. Of course different factors can influence timing (e.g. whether you’re buying during a extra busy or less busy period). While a genuine Herm\u00e8s bag might be considered an funding, its high upfront value and the uncertainty of resale value can be off-putting.\n<\/p>\n

Key options of a genuine Herm\u00e8s bag\u2019s emblem are its perfectly centered place on the plate and the font of the brand itself. Herm\u00e8s baggage use real, high-quality leather, which can come in numerous leather variants. Some Herm\u00e8s bags are made with calf and buffalo leather-based, whereas the more exotic items are designed utilizing crocodile, alligator, and ostrich leather-based.\n<\/p>\n

Made from faux leather, these sandals embody a really delicate heel, as well as a delicate insole platform to make strolling that rather more comfortable. Especially when speaking about Herm\u00e8s dupes, the value shall be a tiny fraction of the unique, meaning it might be price investing slightly extra for the look you are after. The iconic Birkin bag has been a hot matter of dialogue for the last 4 years.Whether it is because of its insane resale value or its role as a status image, people can’t stop talking about it. 4) Herm\u00e8s H buckles additionally come in numerous sizes, starting from 13mm to 42mm. Many faux buckles shall be outsized and flashy, so make sure your buckle is certainly one of Herm\u00e8s’ reliable sizes.\n<\/p>\n

Incoming First Lady Melania Trump, for instance, is well-known for her love of luxurious fashion, and Herme\u0300s Birkin bags are a staple in her wardrobe. If your Evelyne bag comes with its authentic box and dust bag, you’ll be able to utilize this packaging to double-check the bag’s authenticity. 2\uff09On the faux bag, the font used for the long-lasting imprint is visibly bigger and faded.\n<\/p>\n

When your finger runs along with the emblem, it ought to feel outstanding on the leather-based and never pressed down into it. The Hermes font have to be even, constantly spaced, and completely centered \u2013 there should be no single visual blunder. Be extra cautious when a bag has the letter \u2018L\u2019 stamped in a square.\n<\/p>\n

“Even though they are 1-to-1 replicas, some things had been nonetheless off, and I found them,” she mentioned. Last year, she ordered four Herm\u00e8s luggage from a well-known influencer for a complete of $130,000, only to be suspicious when she unwrapped them. And that is provided that you are invited by the model to make the acquisition. The Hermes Garden Party Tote is a staple for many and one of Hermes\u2019 most popular luggage due to its re.. Even TV character Bethenny Frankel (@bethennyfrankel) weighed in on TikTok, calling the dupe “fascinating” and praising it for giving people the prospect to hitch the Herm\u00e8s hype “fair and sq..”\n<\/p>\n

The puller ought to never hang down at a ninety levels angle, it must be aligned with the zipper always. I acquired this bag as a present and consider its real Hermes bag however I\u2019m still not sure. I went to a Hermes retailer and asked if they could examine for me but their policy states they aren\u2019t allowed to examine. We consider luxurious ought to be accessible, and our special promotions make it simpler than ever so that you simply can enhance your wardrobe effortlessly. Our Hermes Kelly replica offer you the posh you desire at prices that won\u2019t break the financial institution, allowing you to indulge without compromise.<\/p>\n","protected":false},"excerpt":{"rendered":"

Reproduction Hermes Evelyne Iii 29 Bags From what I know, now, a new Hermes Evelyne TPM prices just over $2,000\u2014though I\u2019m not fully certain. It\u2019s amazing what this bag will hold, and it\u2019s very deceiving because it appears so tiny. You\u2019ll also hear them referred to as Evelyne 16, Evelyne 29, Evelyne 33, and Evelyne…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/mcpv.demarco.ddnsfree.com\/index.php\/wp-json\/wp\/v2\/posts\/3566"}],"collection":[{"href":"https:\/\/mcpv.demarco.ddnsfree.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mcpv.demarco.ddnsfree.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mcpv.demarco.ddnsfree.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mcpv.demarco.ddnsfree.com\/index.php\/wp-json\/wp\/v2\/comments?post=3566"}],"version-history":[{"count":1,"href":"https:\/\/mcpv.demarco.ddnsfree.com\/index.php\/wp-json\/wp\/v2\/posts\/3566\/revisions"}],"predecessor-version":[{"id":3567,"href":"https:\/\/mcpv.demarco.ddnsfree.com\/index.php\/wp-json\/wp\/v2\/posts\/3566\/revisions\/3567"}],"wp:attachment":[{"href":"https:\/\/mcpv.demarco.ddnsfree.com\/index.php\/wp-json\/wp\/v2\/media?parent=3566"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mcpv.demarco.ddnsfree.com\/index.php\/wp-json\/wp\/v2\/categories?post=3566"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mcpv.demarco.ddnsfree.com\/index.php\/wp-json\/wp\/v2\/tags?post=3566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}