#20310 [Opn->]: print_r should apply htmlspecialchars
| From: | derick@php.net | Date: | Fri, 08 Nov 2002 14:16:29 +0000 |
| Subject: | #20310 [Opn->]: print_r should apply htmlspecialchars | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-24343@lists.php.net to get a copy of this message | ||
ID: 20310
Updated by: derick@php.net
Reported By: Otto.Stolz@uni-konstanz.de
-Status: Open
+Status: Won\'t fix
Bug Type: Variables related
Operating System: SunOS
PHP Version: 4.2.2
New Comment:
print_r is just a debugging tool, I see no reason to have
htmlspecialchars applied to it. Also, you can do this yourself quite
easily by using output buffers if you _really_ need this.
Derick
Previous Comments:
------------------------------------------------------------------------
[2002-11-08 08:01:37] Otto.Stolz@uni-konstanz.de
print_r writes directly to php://output, hence
its output should comply with HTML syntax rules.
However, print_r will issue non-compliant code,
or generate spurious entities, whenever a
variable contains an HTML special character.
Hence, print_r should apply htmlspecialchars to
all strings it is going to write to php://output.
Try the demo at
<http://www.rz.uni-konstanz.de/Antivirus/tests/print_r.php>
with Netscape 6, or Opera 6, as IE 6 will not reveal
all the surprises I've hidden therein ;-)
The pertinent PHP source can be seen at
<http://www.rz.uni-konstanz.de/Antivirus/tests/print_r.txt>.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=20310&edit=1