Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:27020 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 40059 invoked by uid 1010); 16 Dec 2006 01:12:31 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 40044 invoked from network); 16 Dec 2006 01:12:31 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 16 Dec 2006 01:12:31 -0000 Authentication-Results: pb1.pair.com header.from=jordanryanmoore@gmail.com; sender-id=pass; domainkeys=good Authentication-Results: pb1.pair.com smtp.mail=jordanryanmoore@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 66.249.92.168 as permitted sender) DomainKey-Status: good X-DomainKeys: Ecelerity dk_validate implementing draft-delany-domainkeys-base-01 X-PHP-List-Original-Sender: jordanryanmoore@gmail.com X-Host-Fingerprint: 66.249.92.168 ug-out-1314.google.com Linux 2.4/2.6 Received: from [66.249.92.168] ([66.249.92.168:50740] helo=ug-out-1314.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 0F/6A-10210-FF743854 for ; Fri, 15 Dec 2006 20:12:31 -0500 Received: by ug-out-1314.google.com with SMTP id 71so1079952ugh for ; Fri, 15 Dec 2006 17:12:31 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=MscytVwrnG/UOd+ho+DQx+TLRtjEqvdlZv1R3DKnFAmremHoP5/J2hjrwX0KLn4EeTIiGvWvGa0jE3pRfJK+lC0i7w0YXwK/+7oTENaLoMGzVjkpGXM5BPBg+bFFHk3tKNxUS0M1eW6I1oahex0ZswPB8SNWPAaUSpkc+GgQbt8= Received: by 10.67.119.9 with SMTP id w9mr882878ugm.1166231550816; Fri, 15 Dec 2006 17:12:30 -0800 (PST) Received: by 10.66.220.20 with HTTP; Fri, 15 Dec 2006 17:12:30 -0800 (PST) Message-ID: <61504d990612151712o622d26b7ta43d9bb74dd12c6d@mail.gmail.com> Date: Fri, 15 Dec 2006 17:12:30 -0800 To: internals@lists.php.net MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Subject: Re: Run-time taint support proposal From: jordanryanmoore@gmail.com ("Jordan Moore") So, what if an ISP (webhost) enables taint functionality, and a developer uses a PHP library that uses custom filter functions for filtering data. Will this developer see messages displayed on his PHP application even though filtering is being done? Jordan