Bug #71577 [NEW]: filter_var / FILTER_SANITIZE_FULL_SPECIAL_CHARS differs from htmlspecialchars

From: stheine at arcor dot de Operating system: Linux PHP version: 5.6.18 Package: Filter related Bug Type: Bug Bug description:filter_var / FILTER_SANITIZE_FULL_SPECIAL_CHARS differs from htmlspecialchars Description: ------------ documentation ( http://php.net/manual/en/filter.filters.sanitize.php ) states: filter_var, option FILTER_SANITIZE_FULL_SPECIAL_CHARS: Equivalent to calling htmlspecialchars() with ENT_QUOTES set. but in reality, the two differ. the FILTER_SANITIZE_FULL_SPECIAL_CHARS is missing the FILTER_FLAG_ENCODE_AMP flag (which is not even documented for that filter) to actually be equivalent to htmlspecialchars() as documented. Test script: --------------- $STRING = "1 2"; echo htmlspecialchars($STRING, ENT_QUOTES)."\n". filter_var($STRING, FILTER_SANITIZE_FULL_SPECIAL_CHARS)."\n"; 1 2 1 2 Expected result: ---------------- following the documentation, I expect filter_var("1 2", FILTER_SANITIZE_FULL_SPECIAL_CHARS) to return 1 2 Actual result: -------------- 1 2 -- Edit bug report at https://bugs.php.net/bug.php?id=71577&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=71577&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=71577&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=71577&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=71577&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=71577&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=71577&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=71577&r=needscript Try newer version: https://bugs.php.net/fix.php?id=71577&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=71577&r=support Expected behavior: https://bugs.php.net/fix.php?id=71577&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=71577&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=71577&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=71577&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=71577&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=71577&r=dst IIS Stability: https://bugs.php.net/fix.php?id=71577&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=71577&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=71577&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=71577&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=71577&r=mysqlcfg