Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:63130
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.83.42 as permitted sender)
MIME-Version: 1.0
Sender: sebastian.krebs.berlin@gmail.com
In-Reply-To: <CAO1hux9+4QK2sVX9+4110ksa9qDpUpfDhFJvyzkXcBHrFoFWvg@mail.gmail.com>
References: <CAO1hux8mmUsy4badiNjxTGMubaduD1gkgbw4ZK1Me_MwGwLybA@mail.gmail.com>
	<CALtuQzC4e2Sn_BHinFAPdVrz8Oc_d6wCqTr=AscMChH29NSENw@mail.gmail.com>
	<CAO1hux9+4QK2sVX9+4110ksa9qDpUpfDhFJvyzkXcBHrFoFWvg@mail.gmail.com>
Date: Wed, 19 Sep 2012 10:11:07 +0200
Message-ID: <CALtuQzAVGOV1DqtAuwFuLNG4SGut6ZsiEvchhuizOte9jHiNig@mail.gmail.com>
To: Tomas Creemers <tomas.creemers@gmail.com>
Cc: internals@lists.php.net
Content-Type: multipart/alternative; boundary=047d7b343b2085311404ca098c9b
Subject: Re: [PHP-DEV] Re: RFC: Implementing a core anti-XSS escaping class
From: krebs.seb@gmail.com (Sebastian Krebs)

--047d7b343b2085311404ca098c9b
Content-Type: text/plain; charset=ISO-8859-1

2012/9/19 Tomas Creemers <tomas.creemers@gmail.com>

> On Wed, Sep 19, 2012 at 8:34 AM, Sebastian Krebs <krebs.seb@gmail.com>
> wrote:
> >
> >
> > 2012/9/19 Tomas Creemers <tomas.creemers@gmail.com>
> >>
> >> Hi all,
> >>
> >>
> >>
> >> If this is going to be implemented as a class, what is the advantage
> >> of instantiation for this? Unless I'm missing it, I would propose that
> >> the functions are made static.
> >>
> [snip]
> >>
> >> Regards,
> >>
> >> Tomas
> >
> >
> > Hi,
> >
> > I guess the reason is the same like the one, why you just should avoid
> > static methods at all. But only one example: Try to extend the class and
> > then _always_ use the extended one ;)
> >
> > Regards,
> > Sebastian
>
>
> Isn't that what late static binding is for? It enables the use of the
> extending class (if any) from the base class.
>

late static binding is for runtime-resolvement of the class _within_ the
class. If you spread the (external) call "FooEscaper::escapeJs()" all over
you code, you'll have much fun changing every occurence of "FooEscaper"
once you extend it.

Regards,
Sebastian


>
> I really don't see what class instantiation would add to this design
> (if it's going to be a class at all). It doesn't have
> instance-specific state.


>
> Regards,
> Tomas
>



-- 
github.com/KingCrunch

--047d7b343b2085311404ca098c9b--