Changing an exposed filter to use check_plain() or filter_xss() I have a view with a search filter. I am using Acunetix scanner to scan for vulnerabilities, which reports me an issue about the search filter. How do I alter it to use check_plain(filter_xss($string)) or filter_xss(check_plain($string)) in view exposed forms (a block, in my case)?
You can write a form alter in your custom module. ie :

function mymodule_form_alter(&amp;$form, &amp;$form_state, $form_id) {
    if ($form_id == 'views_exposed_form') {
        $view = $form_state['view'];
        if ($view-&gt;name == 'my_view_machine_name' &amp;&amp; $view-&gt;current_display == 'display_name') {
            // alter your exposed form here
            $form['yourdata_item'] = check_plain(filter_xss($string));
        }
    }
}