Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:94590
Return-Path: <michael.vostrikov@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 71809 invoked from network); 20 Jul 2016 17:02:48 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 20 Jul 2016 17:02:48 -0000
Authentication-Results: pb1.pair.com smtp.mail=michael.vostrikov@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=michael.vostrikov@gmail.com; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.220.180 as permitted sender)
X-PHP-List-Original-Sender: michael.vostrikov@gmail.com
X-Host-Fingerprint: 209.85.220.180 mail-qk0-f180.google.com  
Received: from [209.85.220.180] ([209.85.220.180:34388] helo=mail-qk0-f180.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id A9/00-52781-7BEAF875 for <internals@lists.php.net>; Wed, 20 Jul 2016 13:02:47 -0400
Received: by mail-qk0-f180.google.com with SMTP id o67so50952710qke.1
        for <internals@lists.php.net>; Wed, 20 Jul 2016 10:02:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
        bh=ur3iq03DVjRFePeSIbsAuQ92GS0QivLIfspxu5ss5ko=;
        b=f6ysbCfLUrMcg4xW+7T5+E3wjddoWxpemUE2YxZO6tRgq/Det6Vg/nRqy0O9DghuH0
         P2kPAjmz8s/x6A3hZam8cxtyolWKNbBE6UqgOxGAcnLVpMXmXrQI353QU6UuyLTIog49
         XjR84AmfF3u78E355vt425ZrkjZbHwBYvfjoNU0GvJD8GSUreh7m2XWZJliBZyUyitEy
         ec9QSUK5t1QlPJYhRFUSEi80KGFOOskYePw7mYySazQmSw6d1bUTbepPoZIZtVBvKdZi
         0D9Ee5F4DAgqXF8t2d5bVG0NCGUAMnYy5ewbffXEI9EsdfPR6WRAcpCdPyFLPZTFojs6
         jT9A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20130820;
        h=x-gm-message-state:mime-version:in-reply-to:references:from:date
         :message-id:subject:to;
        bh=ur3iq03DVjRFePeSIbsAuQ92GS0QivLIfspxu5ss5ko=;
        b=Y5Em5JYccTTjpH9bPnYZCupNBTYWqzBQywmBG4nk8+xOuk7zgwsXqRAIo9pFZ1Bnf3
         txkX9AFYrFr1laxlKpsNt/R1u/Di/LP6oVNhGYIb0Spz6I4Baf3Dzo1r0dIon7qyRJik
         1F8HpC107HTzwElMPPuX+TGnwpr8IzIgW2hgqwpRO9uDmnwrfO1Qb63O9IHHNDpXQoVy
         xLmW9ZQUh+W3E3tan+By8A6lWjhXXwP9+6uChHZ9zaW8qcfXC319NNkB/iOhE+igzZhk
         rXnGnkwyDl6wQm5Da1iGVv3KogbKvqcNTcSc2jCz6JqwvMDFLJhJw6jgbE2nyb7DNp61
         FxFA==
X-Gm-Message-State: ALyK8tKR6Clv0zi+sJf07bZgNW5f4gJNcoo0yY/Ss0ugxyGVruty0O2v7C+Q/Jkckba4gQU8hZDkPLwrcHGnkw==
X-Received: by 10.55.74.138 with SMTP id x132mr63091026qka.26.1469034164569;
 Wed, 20 Jul 2016 10:02:44 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.55.189.135 with HTTP; Wed, 20 Jul 2016 10:02:43 -0700 (PDT)
In-Reply-To: <CABdc3WoyJUGSE688S2A_wh064bgmdkPMKgRM31T56pex5Xry+w@mail.gmail.com>
References: <CAEDdnaWVYbh=t1-bvDh9fixCoC7Be4asoEus=dRhGggx_9VLNg@mail.gmail.com>
 <CADqTB_ikRepsbO_9vhw568=SaypdPh-z+FzOEr4yji1LibVbjQ@mail.gmail.com>
 <CAEDdnaVtb8eboyNpr8CjzysHvKiG26bHPy7eiH76PVMPrYNW+A@mail.gmail.com>
 <CADqTB_jV9-SQmLknWoXx_uC5ThHynSfqcTdUC+E2TwirOpXR8g@mail.gmail.com>
 <CAOsHV+ujFjKP8AL+R171pFTPnwfN2nC7_TViD=qZtOVGEDyebA@mail.gmail.com>
 <CAEDdnaVFzxq5PEXMAkuAYWg9zeL4yWz2pLpv6RyCcB-rvZJ_RA@mail.gmail.com>
 <CAEDdnaUJ4y_1+hVY6cguRivZnvQTCt0=rhVz=nJSPkqJ7aASuA@mail.gmail.com>
 <CAEDdnaV_awP5g4Ee-acVxd7+LYWot2K0-ZEUbWCzc6me5vAFmw@mail.gmail.com> <CABdc3WoyJUGSE688S2A_wh064bgmdkPMKgRM31T56pex5Xry+w@mail.gmail.com>
Date: Wed, 20 Jul 2016 22:02:43 +0500
Message-ID: <CAEDdnaVqzP6oOjcQWWNGenYHgJtNDvCgi_J-y-fsr_bFv3FW9g@mail.gmail.com>
To: PHP Internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a114a82f88ad2300538142b40
Subject: Re: [PHP-DEV] [RFC] New operator for context-dependent escaping
From: michael.vostrikov@gmail.com (Michael Vostrikov)

--001a114a82f88ad2300538142b40
Content-Type: text/plain; charset=UTF-8

> You are creating weird most of time unneded quite complex syntax. Just
use escaping functions or any other escaper or just simply template engine
as most of people does!

I explained the reasons for implementing this operator in previous
discussion and in the "Problem description" section of the RFC. There are
many applications without template engine. 90% of output data in this
applications are from database and should be HTML-escaped. This is not a
"most of time unneeded" case. The number of similar discussion shows that
the problem really exists.

--001a114a82f88ad2300538142b40--