Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:94521 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 38059 invoked from network); 16 Jul 2016 16:51:23 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 16 Jul 2016 16:51:23 -0000 Authentication-Results: pb1.pair.com header.from=michael.vostrikov@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=michael.vostrikov@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.220.171 as permitted sender) X-PHP-List-Original-Sender: michael.vostrikov@gmail.com X-Host-Fingerprint: 209.85.220.171 mail-qk0-f171.google.com Received: from [209.85.220.171] ([209.85.220.171:34249] helo=mail-qk0-f171.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 8A/B0-31884-A066A875 for ; Sat, 16 Jul 2016 12:51:22 -0400 Received: by mail-qk0-f171.google.com with SMTP id o67so126641734qke.1 for ; Sat, 16 Jul 2016 09:51:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=cKU3/7IMhdY7z0mOZ9Uzq02aE7mk7v1z0XZdIrp/5hw=; b=ZyJlcwdKpSDOU9FIly3BRrk/FqMaTaZGuRFf14v39wJz4xTNzEGAq+2IeP31TjZSp7 QpQIkckHKiGQCNUsaJd7viaugHfLc5RuhbpfxMYLcbuEE5EaaBXnnw1X0ux1P7Y5mAHB 2dMwFcvSHvO/sxi4/YDnhQgUSk1WQjrlvP+++ZG6w/mQib6ynIVMnggBQlqXKkaHmo7m RGKz05XCWGnSFOSi/WEB5eDX1JCgGjziksppL2NAKZsxBsZJG27MQqmz3lrdycAjSXeS 1Rdt0QUozMadgUXlwuhmuwM/Errb3X0t48xuEf4xfaJacW5T6VWdYg7iJwzzUw/bzFUK EtSw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=cKU3/7IMhdY7z0mOZ9Uzq02aE7mk7v1z0XZdIrp/5hw=; b=PaxrQMn/ihrBJ/nhEHKVuE5htcGyIxY83SCHG7LD4rAHV0fA4T8GJhHDCv3eABbG1Z fx1Yvz+KGwMaZ+Ax0jBcj2ayeUq13RXBOCB/wKb7yobrdzdAk+AwzUvPDrGpMjClc9lg f4UmnE5/AcYl6nQ3qrHVnoI3Anxkx75rf6tjIcMMZYyijJksN/T3a8XOa24lDXUWaJAg rrpaSFgmDWyiOtp1OplCyX5ksbV1J/B6CeiEJgeV2HxTuWjY6JYG5fqrcrAB/sTrCiRc luLGPnamVJg7DyhRqKoc7BUIzbdCkQHz3T+R241Jy5WyBlpfEim56I++3HidQlEY0yul JxDw== X-Gm-Message-State: ALyK8tKqhB17wBv5caFOxGMzFIANLgPAm/OjaPq46uV8Xl6FrQLLScF26eyJQ3diEfSfG1LMm++5r/F1dy8ZWQ== X-Received: by 10.55.162.78 with SMTP id l75mr33230325qke.5.1468687879761; Sat, 16 Jul 2016 09:51:19 -0700 (PDT) MIME-Version: 1.0 Received: by 10.55.189.135 with HTTP; Sat, 16 Jul 2016 09:51:19 -0700 (PDT) In-Reply-To: <20160716163526.5B7331A8069C@dd1730.kasserver.com> References: <20160716163526.5B7331A8069C@dd1730.kasserver.com> Date: Sat, 16 Jul 2016 21:51:19 +0500 Message-ID: To: Thomas Bley Cc: PHP Internals Content-Type: multipart/alternative; boundary=001a114fcae85bf6d70537c38b0d Subject: Re: [PHP-DEV] [RFC] New operator for context-dependent escaping From: michael.vostrikov@gmail.com (Michael Vostrikov) --001a114fcae85bf6d70537c38b0d Content-Type: text/plain; charset=UTF-8 > if I see it correctly, this is just a framework for defining callbacks to a escaping operator, without a implementation of "html" and "js"? > Not sure if this helps. There is a default escaping for HTML. If there is no registered handler for 'html' context, it calls htmlspecialchars($str, ENT_QUOTES | ENT_SUBSTITUTE). --001a114fcae85bf6d70537c38b0d--