Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:72784
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.192.46 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <CAGa2bXanQ0Of6oLe2+qebZunopdzhfj+T+1QTY_LSkOjedvwkg@mail.gmail.com>
References: <CAGa2bXanQ0Of6oLe2+qebZunopdzhfj+T+1QTY_LSkOjedvwkg@mail.gmail.com>
Date: Mon, 24 Feb 2014 10:27:56 +0100
Message-ID: <CAH-PCH7rFLYqY-8yW5vR9VNuqqMz8vDwvBv=E9KtyZVTGtMhmg@mail.gmail.com>
To: Yasuo Ohgaki <yohgaki@ohgaki.net>
Cc: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a11c2ca883593e204f323962c
Subject: Re: [PHP-DEV] [VOTE] Improve HTML escape
From: tyra3l@gmail.com (Ferenc Kovacs)

--001a11c2ca883593e204f323962c
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Mon, Feb 17, 2014 at 5:10 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:

> Hi all,
>
> This RFC for improving HTML escape by confirming OWASP recommendation.
> PCI DSS suggests to follow their guidelines.
>
> https://wiki.php.net/rfc/secure-html-escape
>
> It makes escape OWASP recommended chars always.
> It simplifies coding a little, too.
>
> Thank you for voting!
>
> --
> Yasuo Ohgaki
> yohgaki@ohgaki.net
>


I've updated the voting end date to today from 22th, as the minimum voting
period required by the voting RFC is one week.

--=20
Ferenc Kov=C3=A1cs
@Tyr43l - http://tyrael.hu

--001a11c2ca883593e204f323962c--