Req #62574 [Com]: New operator for htmlspecialchars
Edit report at https://bugs.php.net/bug.php?id=62574&edit=1
ID: 62574
Comment by: ajf at ajf dot me
Reported by: thbley at gmail dot com
Summary: New operator for htmlspecialchars
Status: Open
Type: Feature/Change Request
Package: *General Issues
PHP Version: Irrelevant
Block user comment: N
Private report: N
New Comment:
@dagguh: What? I'm just suggesting exporting variables into the global namespace, and escaping
them in the process, for templating purposes.
Previous Comments:
------------------------------------------------------------------------
[2012-10-26 19:07:08] dagguh at gmail dot com
This is valid.
@ajf:
You should never dop anything "ahead-of-time" in programming. You shoudl escape a
variable right before passing it to en environment, that requires this form of
escaping
------------------------------------------------------------------------
[2012-09-04 18:15:37] ajf at ajf dot me
(I'm all for this though, I'm just pointing out other options)
------------------------------------------------------------------------
[2012-09-04 18:06:32] ajf at ajf dot me
You can escape things ahead-of-time, you know. In fact, I have a feeling you
could use foreach to traverse the symtable and escape everything. (don't do that
though, that's a horrendous idea)
------------------------------------------------------------------------
[2012-07-16 04:07:43] thbley at gmail dot com
Description:
------------
old:
<?php
echo htmlspecialchars($str, ENT_QUOTES);
<?= htmlspecialchars($str, ENT_QUOTES) ?>
new:
echo <$str>;
<?= <$str> ?>
or:
<?+ $str ?>
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=62574&edit=1
Thread (10 messages)