#20310 [Opn->]: print_r should apply htmlspecialchars

From: Date: Fri, 08 Nov 2002 14:16:29 +0000
Subject: #20310 [Opn->]: print_r should apply htmlspecialchars
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-24343@lists.php.net to get a copy of this message
ID: 20310 Updated by: derick@php.net Reported By: Otto.Stolz@uni-konstanz.de -Status: Open +Status: Won\'t fix Bug Type: Variables related Operating System: SunOS PHP Version: 4.2.2 New Comment: print_r is just a debugging tool, I see no reason to have htmlspecialchars applied to it. Also, you can do this yourself quite easily by using output buffers if you _really_ need this. Derick Previous Comments: ------------------------------------------------------------------------ [2002-11-08 08:01:37] Otto.Stolz@uni-konstanz.de print_r writes directly to php://output, hence its output should comply with HTML syntax rules. However, print_r will issue non-compliant code, or generate spurious entities, whenever a variable contains an HTML special character. Hence, print_r should apply htmlspecialchars to all strings it is going to write to php://output. Try the demo at <http://www.rz.uni-konstanz.de/Antivirus/tests/print_r.php> with Netscape 6, or Opera 6, as IE 6 will not reveal all the surprises I've hidden therein ;-) The pertinent PHP source can be seen at <http://www.rz.uni-konstanz.de/Antivirus/tests/print_r.txt>. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=20310&edit=1

« previous php.bugs (#24343) next »