, %, #, $, etc...) */ return ((preg_match('/^[0-9a-z\.\-_]+$/ui', $fileName) && $type == 'strict') || (!strpos($fileName, './') && $type == 'noDotSlash') && $onlyAllowedChars) ? $origFileName : false; } public static function noXSS($content, $safeHtmlAllowed = false) { return $safeHtmlAllowed ? strip_tags($content, '

') : htmlspecialchars($content, ENT_QUOTES, 'UTF-8'); } }