Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:102436 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 26720 invoked from network); 25 Jun 2018 18:50:45 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 25 Jun 2018 18:50:45 -0000 Authentication-Results: pb1.pair.com smtp.mail=smalyshev@gmail.com; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=smalyshev@gmail.com; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.83.51 as permitted sender) X-PHP-List-Original-Sender: smalyshev@gmail.com X-Host-Fingerprint: 74.125.83.51 mail-pg0-f51.google.com Received: from [74.125.83.51] ([74.125.83.51:36446] helo=mail-pg0-f51.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id BE/FB-50433-489313B5 for ; Mon, 25 Jun 2018 14:50:45 -0400 Received: by mail-pg0-f51.google.com with SMTP id m5-v6so6457791pgd.3 for ; Mon, 25 Jun 2018 11:50:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:openpgp:autocrypt:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=KlupNOmBzw2hdB5BbCJaYYqf5r2JtuD4vVZrl7MXqvI=; b=HIp+giVDqPn/7aydQncuRuaSq90BVLSqg87eLcO/IvHbtfW/vRWG26MmAXOEgLlLSG P4mudHPrAoELjGDWkuRyjPHOiyJN/7IruTu8XC7sNXmyJjcMVrrbh2rFHEEmeKcctMoe w+KZKb/erhShALQyVX9AfHrEKezy51gNHNQSSjScfgNBlYawdfVwBUHXbJlhrJejXC1r +Mu9h6QFG/ZnEg9w1H/6LFiMCKyGxJWM1EE7yztavSAW38Ifa5/LDbYkxh8xEhCX0pzi zy4MnjDQQQSiblDWYJX+s2S8XgNdYsCvmE1yLR4PXx0YsoG23ETVM9D8gk0VjMD2LH9g qIIg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:openpgp:autocrypt :message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=KlupNOmBzw2hdB5BbCJaYYqf5r2JtuD4vVZrl7MXqvI=; b=uKYkdiqMr0Cg2Ln5QwlnZ+Ir1oruU9kj2lU0WDJaaufJ8SrGlFoSZljuCxDTa4P+4M UhJTHH52CQMN/V0foBLOmrcQTZ6L2Pm0dW7sgPyV/mHDJA6YwstTYhbNK2MJ0txYMPJ/ DB7Tb1n+Iv1HhRS5iwIAwn7t8331zMoIGTYEpdD54/5PqZbw42qymHaR7W1uqXoo0M6V cwYuvEaQ9wlsnlQvg71bfUb9QUcYQpn/GHprxiFntVzNRMGrtfvl+72CwhMLJ5vJT30o bwRl6QWkeI7Sh4lctbivoEHRokCT44DFV4Bi5EyYiF/Np5M6zqkBFbyiB2A55Hjr2/9m H5zA== X-Gm-Message-State: APt69E2xmyCCNNCBcEiC8U6JQn/C5l41ul8SG0g8b+DERLkyo6WIAcAe g/UrNNGSpxrZJfCFVuf5AisemO8= X-Google-Smtp-Source: ADUXVKLVqBqgtjZvCUuYstqQQ/xZ6gHXqSAhie7Gs42tqg9Uh+Cd8bxFGC4LYkFKxAw/eoJNY+B5nQ== X-Received: by 2002:a63:314f:: with SMTP id x76-v6mr11560003pgx.373.1529952641254; Mon, 25 Jun 2018 11:50:41 -0700 (PDT) Received: from Stas-Pro-2021.local (c-24-4-176-254.hsd1.ca.comcast.net. [24.4.176.254]) by smtp.gmail.com with ESMTPSA id y22-v6sm11102314pfi.166.2018.06.25.11.50.39 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 25 Jun 2018 11:50:40 -0700 (PDT) To: "Christoph M. Becker" , Nikita Popov , PHP internals References: <521ae6bb-4771-86e0-2c35-23836fa74b6e@gmail.com> Openpgp: preference=signencrypt Autocrypt: addr=smalyshev@gmail.com; prefer-encrypt=mutual; keydata= xsJuBE9mqaARCACFSqcGmNunkjQQu3X+yXnTmFeEkvM4JXZTOBdR8aEevNGmmFEfyvjaDjWi 9hcwp4E/lYtC+P7VsVjM1OSX9eq0jC/lGL0ZyRXek+mNy0n5H1NSuTpf9Y18LMqhc4G+RU+L cNiZ9K0DJuOOvNLPxW7OHZguxb3wdKPXNVa2jyRfJAKm2uaJJMT1mTmFT9a0Q8SKr+mUrrJk uG0H2o6SzrKt8Wwoint1eh67zVsJaJtQFchnEZnlawIcqP2yC4nLGR3MkubowxoEBYCZet18 aHVVRbvpG2Qtob8Lu5xrsGbmXymTkHTdpvkfcJFADa8MzOL90zOxXwbGfbIZOlh5En8jAQCX lfnx2eQL3BSW/6XANa51dbWiEp1d1BAkpGKtZvlk0Qf+M9WAi+9aXMe3xP5krxtgnRNUf2WN 6Zdy2MxL1RRJCFbytLhl0ronC49BsGYVGshdEH8xhBbiIOJKuVZ/DTl9bEm7P9c7CC7iJyVC khUAhouH6xzZQNLR+RU+QebYzXypVfl99Qk7EdMmr/WAZCHLuvanyqepC5EBsa3VnAfQemSN oBeGBKWWLiOsPjvS72+y1z4RUMAfXHn4l/sFMt8zt7/74AmJPwZquV41p4mPO12V4+xPyc6R sB84sfsk2QVivU8w8AkvGQeYjXoz7Iwao95+fWteVzZ36KRQvUckP8pGjHlDXnHxJ0HI1I/k OBZSjwRwUf0dd73y6erPhbLk+gf+NdI3H9KGJBzG5/rVyWKwUeQ9d5ud4jTJRkQGvAP5pg76 vEa9dogbpe4W5Z+0BfbiJSnQmQWSHiZddj/t33ptbup44Ck6ZTgdlmFYMLF1hR47PIZTDKER EuKYGci/vq8snZvEJP9YCw/TtiHcMdrMKcY/+Lp8lQO0GHLPB9glVhnC0db6l1Xpg1CMI8/R ozBMcij30EgATggC/y2zbiqAFoS9FN9nXPbe4phStqABEyeZ+nXudt7PUYTjVgcrqo8bHZCi sBobWC7OnKyUzxVxzUeuPkIfmZuzkLaMw2McQdvwwsNvQ0DzaLP30c1Xsm/7EIYJcOWpzlVJ 5QrdmE0/Bc0yU3RhbmlzbGF2IE1hbHlzaGV2IChQSFAga2V5KSA8c21hbHlzaGV2QGdtYWls LmNvbT7CegQTEQgAIgUCT2aqtAIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQL3lW vF2gS12XMwD9HuRIolSwIK77u8EY461y2u6sbX36n5/uo/LDQuxoi3sA/0MvpnvzOhv9Iufv vsZEj3E7i3h+iD5648YMwfTFCij+zsFNBE9mqaAQCADfZPMpjZkkGZj3BY/7ApoLq4mwqzbh +CpLXwNn20tFNvSXfb8RdeXvVEb7Scx+W9qYpiaun2iXJgCVH8fgpZpR856ulT1q6uCG++CX ubEvip/eJkZl93/84h04KQJwsgOrAh0Om3OePRn8Pr+++0LNS0EL8uX/YHeTOGOnnmTqYTey SBVFdov6L4mepddfjekicKQqhL7mZh/xuq29JijT0uNNX8v4vDWQDu5dlAcdd+uB3gcXMD/P ginD11zp+6wtrWCm/+yBqpvDwXQX5PGUnwvbRfl7Ay3MmwmoXiecZMg0dwTSc7e0lhB4HGRH ZdBMJB4rHUVGdzqujK/ctOvrAAMFB/0Utb76Qe6sCMlHxVAmeE/fbo7Pi05btZ/x01r67dHf aMSP0riCKJ7M0OW+jAXtu9+z/BVnYisW67WWfxl2cS5tZDgiHgJARXWUOO72+sScHP8KQmTl 1z16gyKbwY3SmyBkwcpOL35nhUWNLy93syPoY6sZUTikr2bZYukHDQ33XBPs4e6MbWKfsa9q aVmnlOF3k5UqChjutfHaEa4Q7VP4wBIpphHBi9MI16oJIzzBPbGl2uoedjwiZ6QeQZnSuOVY ZxU2d3lRA8PrtfFN1VSlpEm/VcAvtieHUYWHN0wOu+cp3Slr5XJVNjTjJhl28SlinMME54mK AGf2Ldr/dRwXwmEEGBEIAAkFAk9mqaACGwwACgkQL3lWvF2gS126EQD/VVd3FgjLKglClRQP zdfU847tqDK4zJjbmRv5vLLwoE0A+wbrQs7jVGU3NrS0AIl5vUmewpp2BKzSkepy23nWmejw Message-ID: <5db212e8-b01d-3c36-9600-ae2d225086e7@gmail.com> Date: Mon, 25 Jun 2018 11:50:39 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:60.0) Gecko/20100101 Thunderbird/60.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] [RFC] Deprecations for PHP 7.3 From: smalyshev@gmail.com (Stanislav Malyshev) Hi! > There are multiple bug reports regarding strip_tags()'s broken behavior > on (slightly) malformed HTML, e.g. , > and , which > renders the function unusable on arbitrary user supplied input. I see a very corner-case issues that don't really make it "unusable" - in fact, in these examples it looks like it chooses the most safe approach. Which means it can't be used to fix broken HTML or parse Javascript scripts, but that's not the point of this function anyway. -- Stas Malyshev smalyshev@gmail.com