Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:95532 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 52716 invoked from network); 1 Sep 2016 11:59:31 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 1 Sep 2016 11:59:31 -0000 Authentication-Results: pb1.pair.com header.from=lars@strojny.net; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=lars@strojny.net; spf=permerror; sender-id=unknown Received-SPF: error (pb1.pair.com: domain strojny.net from 46.4.40.248 cause and error) X-PHP-List-Original-Sender: lars@strojny.net X-Host-Fingerprint: 46.4.40.248 milch.schokokeks.org Received: from [46.4.40.248] ([46.4.40.248:36981] helo=milch.schokokeks.org) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 2D/50-47600-12818C75 for ; Thu, 01 Sep 2016 07:59:30 -0400 Received: from [192.168.2.140] ([::ffff:213.61.82.26]) (AUTH: PLAIN lars@schokokeks.org, TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA) by milch.schokokeks.org with ESMTPSA; Thu, 01 Sep 2016 13:59:25 +0200 id 0000000000000030.0000000057C8181D.00000845 Content-Type: multipart/signed; boundary="Apple-Mail=_A53800D8-0E75-4B22-97EA-FB70EDFFFC2F"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Pgp-Agent: GPGMail In-Reply-To: Date: Thu, 1 Sep 2016 13:59:24 +0200 Message-ID: <232F1604-2211-4351-B830-EDC958A25D6D@strojny.net> References: To: "internals@lists.php.net" X-Mailer: Apple Mail (2.3124) Subject: Re: [PHP-DEV] [RFC][VOTE] Add validation functions to filter module From: lars@strojny.net (Lars Strojny) --Apple-Mail=_A53800D8-0E75-4B22-97EA-FB70EDFFFC2F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Yasuo, > On 31 Aug 2016, at 21:45, Yasuo Ohgaki wrote: [...] > Thank you for voting! > The RFC is declined 1 vs 13 > A bit surprised this result. >=20 > I requested the reason of objection, but many of them does not = disclose why. [...] > lstrojny (lstrojny) [...] sorry for not chiming in earlier, but I indeed owe you an explanation. I = believe making ext/filter a part of PHP created more trouble than it = solved, even though I applaud it=E2=80=99s intention. Of course, = filtering and validation are necessary essentials of any secure web = application. I nevertheless strongly believe validation and filtering = must live in userland. Validation and filtering are often very much tied to the domain problem = a user of PHP is to solving and the change rate of the application will = be higher than the change rate of the language (hopefully). To give a = more concrete example: let=E2=80=99s say our problem is we want to = validate if a string is a valid domain because our business is = registering domains. Nowadays, top level domains are introduced quite = often and there is no way PHP could have a nice, up to date whitelist of = TLDs all of the time and as a domain registration business it=E2=80=99s = impossible for me to wait for the updated whitelist in PHP NEXT. = That=E2=80=99s why I believe this is something that belongs to userland = so the library that offers (domain) validation can follow a lifecycle = that fits the problem it is trying to solve. cu, Lars --Apple-Mail=_A53800D8-0E75-4B22-97EA-FB70EDFFFC2F Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIVAwUBV8gYHCQPF+sCY6wHAQh3iQ/+N8zWnj9p/z+otZ/QiJahGuSke0+dPBxM 4P0FRQdrcH8SNfGtF7Z0rYSbRkCQHcaULyzrszUlAyOXcQKVI8EcV+eK7bhAOLJ4 tRJiUKvx54plqS8HtucfszgmmD6mGEIrDDDral+r+u9A9yzA4yyJI1noSSOjzTLx rgFGgIyxFflVL6m8X1E02MJSPqikZ+4M3fxAw683SsDvw1QwVgbqlirxBiY+POyF dofh5u0sOtpuOMUAJG64ZhfGauApuFXlD/C+N4QkywW1SRXBfhYJgqEcUK1L0mEW S4OXacAFkPt9DiOTqc//7z3/DBU0juG3PQ+gAuBpA9PCwdVUIo7FoB6A6Ot2gLFS F5cTq/zUVJfv1iI3bo47BRbB7Ge40DshQUW0ZGWQb2Djv7vMlvW1Ars61HQOE8Ec ykeY7P7tBe7iHfCp8Pyt8Z1w+S3xyrOfjIAAL6Nc6Wa6w2tUMMN+MqdccHFDuXV8 jLdwtI0QjqSA+qHTPriLCe/A5+392kYPztDB1+UPGj6T2p5A5ODzmPn+LWIKCwKf rEZuBXq0v9s8V3r6zYstkS3qA9nTlQ7qe+5TgGCpdB7uGwsFTcwmz3kBRfZINdsX WJrI5V6CVbpYT1qQVepqGyfkBTjt2iJlLYdNdN90tK0RZr9L7xCsJWBuP/PmCCgn oRKpY9RxZEI= =Kucl -----END PGP SIGNATURE----- --Apple-Mail=_A53800D8-0E75-4B22-97EA-FB70EDFFFC2F--