Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:130412 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by lists.php.net (Postfix) with ESMTPS id 0E3CF1A00BC for ; Sun, 22 Mar 2026 12:24:43 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1774182287; bh=i/j/CxCoEZzoJhF5Bds81VmTxcFtABaL3B4ROmICwGM=; h=References:In-Reply-To:From:Date:Subject:To:Cc:From; b=EKyagtZmlqietBu427Uaj/yAjloO2IVBX1DX10jUS7OH/uk1EGGWiQdhltMbjlGlm jK/En3ERy3Ps8nTuVs9rCtTXpWiGv1llkbg7hzh8kdg7IVjp0te9cBQsON3TaZQgyq LKwP83DgigOu5ry0c+AEySEtog6odxFEjHmEygwfLFXcDnF9ffMMPz6v/I4Uwt05xo fF5hxiMWhbY86Yja5EuEQPcXkqnYxeWNRZsnYT7OQPfxwkvE9hBCv+wgDCvtfUxuoV ToF3M7zJ2IF4hwcOiLuDHH3X4ZiKIfHOFwzZDf9LqLTD8/eVhD1edrJAu4gcPuv5uG SJDDbKZNqkZfA== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id AFF4B180062 for ; Sun, 22 Mar 2026 12:24:45 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-25) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=0.6 required=5.0 tests=ARC_SIGNED,ARC_VALID,BAYES_50, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,DMARC_PASS, FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2, SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=4.0.1 X-Spam-Virus: No X-Envelope-From: Received: from mail-lf1-f51.google.com (mail-lf1-f51.google.com [209.85.167.51]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Sun, 22 Mar 2026 12:24:45 +0000 (UTC) Received: by mail-lf1-f51.google.com with SMTP id 2adb3069b0e04-5a27eb8311bso2049964e87.1 for ; Sun, 22 Mar 2026 05:24:40 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1774182279; cv=none; d=google.com; s=arc-20240605; b=JxtbP96Wsj6uwc7fCcK3RiSmVMj0xTvma05fIcDJSLtR7DjRd9SmWHFuCWaWF5JJ56 hQgczyOyv1sAJo2YcywDmXqcU4j0SwfZsJoDTap8jNa2CpSBwWVdMU5wzzOIFkHE99QJ bsfbaBJiZ5e6sPCFMBf5R7cjuI7IwmhYIhvDx4pYHlb5GmdCmzaziOxUOm4oceetKaem 3Yar81SGiSqctBnK9BqWlajfbW2up7VMuz/FSItkudMGVQ+WHi0Qqy/Aw4IkreqdJurw SMRATM8SKED/9gtSj0H3fki/Jg+C6UICZ/QsEQygLGJDWNIF9r2QWQq6MtomppzqVeJa EAkA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=i/j/CxCoEZzoJhF5Bds81VmTxcFtABaL3B4ROmICwGM=; fh=sgE5uDfHI83odAcOafsYi45RMAWMGD/cZv4mWyzmNDg=; b=jZTLCR88ZK+nzzkv6nu/4FcJ9LsHaJigJWoc9J8rJfQ/wlrm9oTpF+Lvtx5zrcC8LV lbq+2ubByPZ0JDNU2tWg/05zBAb8MkAVYUuaf5go1xRHtLCw3afdvUaPbiSkF2K11Kqi DW+dqEQmS00ttICqJE0huznYtrMXXjlt6s9joJBlWJMCC1LMmiFigP5GZAICU7Egk25b j7BKd0/KUlOEvjTpt3ZHprtmc5e4UCTX5/r+tjGWvOzoNH+NNnFX1UtgqhsHwEwBompt UMTzi1nUXkDgZcT3TLW6bCLKBIB7TYHaHaOwyt2Vc4q6bq/IaNW6aKE1Bk0DFJjRkXmC DPkw==; darn=lists.php.net ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1774182279; x=1774787079; darn=lists.php.net; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=i/j/CxCoEZzoJhF5Bds81VmTxcFtABaL3B4ROmICwGM=; b=BxbSslE6h6Cf40XTFHroLqSPw66XtbZvfDjQ1EaGgKLRKsdA4nDjkKJhyg8I5kNnK/ 9JfzF+sktFyqE1mrxInSO17dL0LcNwgUTtVe7RTokFz7FPlQFLFTmFIwisFw9THS1gc/ I6rNnnpoh1FceWF38HBETTox80boKBtkXHrVsocn4rEIsyjz3D7qYCWajdhtx640PJ6s X8F5tH8/ctHWlLrL91JTnukQRHb4BSpRWGXebkCR9EdTCDVSGtotBk6ydlZl/Wq0Al0d CpOAQsWTk/2YK7gPAxXJsFFlGBQiaYECsUGED/wal0qQn0pQKxjLLxQZEGdEr3Ur6JZZ OWdw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1774182279; x=1774787079; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=i/j/CxCoEZzoJhF5Bds81VmTxcFtABaL3B4ROmICwGM=; b=YMZDuPAdZTgAj6axH0nxsE9wxgx9KGKoirldIS/Vg3qpRYgNN6RB02+Hkl00ffzy+5 7nvbIRHOLLFgblOjQs9/EGOPKTfC/V4Ex8kg6nlMkLrQC/+mtBeEhnBmgnXbq8K4ZWhB jF9HgfsBTJuaLkQykD6L13qDCq/QZTvw5mLT6MZLGdp5rZ9szXfEsz68oaexed7ioWeb dFZCngcFjABY+bz/sEKwFxM5MrIhTw0FZ0jTf61Srpp6ojkqHoXu6Mdfb8KJ+BQNeYsA AOQDmG4bVDxw5QnuReq1g+U6ARDN+Cf1zYGhlohSEKxEBiIFh3Yog0/PsHbzst4gNlF5 I4Ow== X-Gm-Message-State: AOJu0YxrOSIj0p+2GW7tJfe73vTEoLrzE2UevjXAlQPjFekzZXSc1JNT 1SAgNtgprCRjFyoHdtKatHjNssHvKZ7192nbnpkkLkqLsd62UcBpOfiYU2ymyFM4km8Y85vLzxN JwGvO5MYnQqDLIirbXyaZkSgPD8GGf3Gu7/mN X-Gm-Gg: ATEYQzxGQxl90/yDeq2FrYbhfa6X/cmLHn62zqw4ZLpMM+Ii6DopnmaJ2i5qCJGoyv+ 2UQfZ0zvdM0D3wYNYaF2CWzFQG5xK4chkK1y8LOHAXo8f+uXPcL9agiyhvN87iZ0x3aEmCmUSXJ /+oHxV6OGkO3Ueua3omibKQN5a9eI96cp8wSrCHuhEyE32h9tGNjggXHx/ivQfusgF4lA6qmVgw hjlv8WeuGAs+Uluz2G6edBota5URsGSSCo4izVu+e2BGBnyHGNt0vWnDsyFEzH258Vq8k251SMf 2LaX0Oh6j/RE2UuWMhNZl5Z3rOSdOPJ4ho4uMZmyeIKrC7R0u4IJXybi8ffUA9be4QlLMgWPJ8Y YuqPNr8grtbim/1pG50xNDrejn90o2eRUKsGC X-Received: by 2002:a05:6512:a82:b0:5a2:7931:6fb with SMTP id 2adb3069b0e04-5a285b81d54mr2847498e87.41.1774182278617; Sun, 22 Mar 2026 05:24:38 -0700 (PDT) Precedence: list list-help: list-unsubscribe: list-post: List-Id: x-ms-reactions: disallow MIME-Version: 1.0 References: <5791904e-343f-4125-aa58-93ea43adcc84@beccati.com> In-Reply-To: <5791904e-343f-4125-aa58-93ea43adcc84@beccati.com> Date: Sun, 22 Mar 2026 13:24:26 +0100 X-Gm-Features: AaiRm50ZG6x4gi8pZiD4ImaiNK-5em6jqya3dEyH5Mr6TRkPTfixMcUPz7kyow0 Message-ID: Subject: Re: [PHP-DEV] [RFC] [VOTE] Exempt input type and value validation from BC Break policy To: Matteo Beccati Cc: PHP internals , "Gina P. Banyard" Content-Type: multipart/alternative; boundary="0000000000007be025064d9c00aa" From: ocramius@gmail.com (Marco Pivetta) --0000000000007be025064d9c00aa Content-Type: text/plain; charset="UTF-8" Hey Gina, On Sat, 21 Mar 2026 at 20:26, Matteo Beccati wrote: > Hi Gina, > > Il 21/03/2026 12:22, Gina P. Banyard ha scritto: > > Hello internals, > > > > With a small delay due to unexpected circumstances I've started the vote > on the "Exempt input type and value validation from BC Break policy" policy > RFC. > > It will run from today the 2026-03-21 until the 2026-04-04 at 12:00 UTC. > > > > The RFC can be found at the following link: > https://wiki.php.net/rfc/policy-exempt-type-value-error-bc-policy > > I know the intention is good, but my fear is that the burden on third > party OSS developers could potentially be unbearable. That's the reason > I voted no. > > > Cheers > -- > Matteo Beccati > I'm having thoughts similar to Matteo's here, **but** since this is about restricting the amount of acceptable input (for correctness and security reasons), I think it balances out the risk, and I voted Yes. Marco Pivetta https://mastodon.social/@ocramius https://ocramius.github.io/ --0000000000007be025064d9c00aa Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hey Gina,

On Sat, 21 Mar 2026 at 20:26, Matteo Beccati <php@beccati.com> wrote:
Hi Gina,

Il 21/03/2026 12:22, Gina P. Banyard ha scritto:
> Hello internals,
>
> With a small delay due to unexpected circumstances I've started th= e vote on the "Exempt input type and value validation from BC Break po= licy" policy RFC.
> It will run from today the 2026-03-21 until the 2026-04-04 at 12:00 UT= C.
>
> The RFC can be found at the following link: https://wiki.php.net/rfc/policy-exempt-type-value-error-bc-po= licy

I know the intention is good, but my fear is that the burden on third
party OSS developers could potentially be unbearable. That's the reason=
I voted no.


Cheers
--
Matteo Beccati

I'm having thoughts = similar to Matteo's here, **but** since this is about restricting the a= mount of acceptable input (for correctness and security reasons), I think i= t balances out the risk, and I voted Yes.=C2=A0

--0000000000007be025064d9c00aa--