wp_is_local_html_output()WP 5.7.0

Checks whether a given HTML string is likely an output from this WordPress site.

This function attempts to check for various common WordPress patterns whether they are included in the HTML string. Since any of these actions may be disabled through third-party code, this function may also return null to indicate that it was not possible to determine ownership.

Internal function — this function is designed to be used by the kernel itself. It is not recommended to use this function in your code.

No Hooks.

Return

true|false|null. True/false for whether HTML was generated by this site, null if unable to determine.

Usage

wp_is_local_html_output( $html );
$html(string) (required)
Full HTML output string, e.g. from a HTTP response.

Changelog

Since 5.7.0 Introduced.

wp_is_local_html_output() code WP 6.4.3

function wp_is_local_html_output( $html ) {
	// 1. Check if HTML includes the site's Really Simple Discovery link.
	if ( has_action( 'wp_head', 'rsd_link' ) ) {
		$pattern = preg_replace( '#^https?:(?=//)#', '', esc_url( site_url( 'xmlrpc.php?rsd', 'rpc' ) ) ); // See rsd_link().
		return str_contains( $html, $pattern );
	}

	// 2. Check if HTML includes the site's REST API link.
	if ( has_action( 'wp_head', 'rest_output_link_wp_head' ) ) {
		// Try both HTTPS and HTTP since the URL depends on context.
		$pattern = preg_replace( '#^https?:(?=//)#', '', esc_url( get_rest_url() ) ); // See rest_output_link_wp_head().
		return str_contains( $html, $pattern );
	}

	// Otherwise the result cannot be determined.
	return null;
}