Index: includes/common.inc
===================================================================
RCS file: /cvs/drupal/drupal/includes/common.inc,v
retrieving revision 1.1148
diff -u -p -r1.1148 common.inc
--- includes/common.inc	22 Apr 2010 08:18:56 -0000	1.1148
+++ includes/common.inc	23 Apr 2010 13:45:23 -0000
@@ -2144,6 +2144,9 @@ function drupal_attributes(array $attrib
  *   the URL from $path and $options, the resulting URL is passed through
  *   check_plain() before it is inserted into the HTML anchor tag, to ensure
  *   well-formed HTML. See url() for more information and notes.
+ *   This function is not responsible for stripping bad protocols from URLs
+ *   that come from user input. You should use check_url() function in that
+ *   case.
  * @param array $options
  *   An associative array of additional options, with the following elements:
  *   - 'attributes': An associative array of HTML attributes to apply to the