Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:63065 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 47885 invoked from network); 18 Sep 2012 16:24:11 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 18 Sep 2012 16:24:11 -0000 Authentication-Results: pb1.pair.com smtp.mail=mike503@gmail.com; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=mike503@gmail.com; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.214.170 as permitted sender) X-PHP-List-Original-Sender: mike503@gmail.com X-Host-Fingerprint: 209.85.214.170 mail-ob0-f170.google.com Received: from [209.85.214.170] ([209.85.214.170:55690] helo=mail-ob0-f170.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 8E/7E-07072-B20A8505 for ; Tue, 18 Sep 2012 12:24:11 -0400 Received: by obbwc18 with SMTP id wc18so29196obb.29 for ; Tue, 18 Sep 2012 09:24:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=references:in-reply-to:mime-version:content-transfer-encoding :content-type:message-id:cc:x-mailer:from:subject:date:to; bh=JnKdKBzIHIJIvL4zMBtrg9P19kJvPagWd9nsq4P4ZQo=; b=jRLcF9e8o9muDL5dH1LYsPG8WBFUuN1v4ZBZIngMPK1BuFEzsW9Y1HELtkCvj/Slqs Ch8ShvDa2skHeDnwMh7hnad/rtSr0G3ctiL5i70vhWFUZYYCC9yzD6zCVFthCJ1lhqmB qIWnuMu2PsA7zxrC1eZFeODoXCwZr/QoVW7AS3Z4l9cxF0uX7u8STmZiTQUieUquqYhm A8G0NOrcR3aiGAgTKa+L8FtMlHRuxCCra74UfM+9O2F2ki3vF1CckHupNDIdZP8UiBGw J13nfqZVoeqzoyk4SJL3XRcPnd+h8CI+0yxTfgiC3lwqPrmL+7obx9+DKfPjt9Pvgw2R GdeA== Received: by 10.60.172.42 with SMTP id az10mr706722oec.1.1347985449257; Tue, 18 Sep 2012 09:24:09 -0700 (PDT) Received: from [192.168.1.152] (static-50-53-5-173.bvtn.or.frontiernet.net. [50.53.5.173]) by mx.google.com with ESMTPS id o4sm3951oef.11.2012.09.18.09.24.06 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 18 Sep 2012 09:24:08 -0700 (PDT) References: In-Reply-To: Mime-Version: 1.0 (1.0) Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Message-ID: <5A97EAA1-AA43-45E4-AA2A-1441F7B08E37@gmail.com> Cc: =?utf-8?Q?P=C3=A1draic_Brady?= , PHP Internals List X-Mailer: iPhone Mail (9B206) Date: Tue, 18 Sep 2012 09:24:04 -0700 To: Paul Dragoonis Subject: Re: [PHP-DEV] RFC: Implementing a core anti-XSS escaping class From: mike503@gmail.com (Michael Shadle) On Sep 18, 2012, at 5:00 AM, Paul Dragoonis wrote: > Yep, I see where my suggestion for filter_var() isn't relevant. >=20 > I use symfony2's ecaper in the PPI\Templating\ component, and really like i= t. > Zend2's also seems pretty good. >=20 > It'd be nice to have this available as a ./ext/spl/ class or an > independent extension (really needed for 1 class?). >=20 > Cheers, > Paul. Please provide it as a procedural extension as well like filter is. I don't c= are if there is an OO counterpart, but I detest OO and don't want to see bas= ic php things being introduced now (if accepted) only as OO. It feels like P= HP is losing its roots...=