Re: Deprecate short_open_tag ini directive?
| From: | Andrey Andreev | Date: | Mon, 25 Mar 2019 15:38:03 +0000 |
| Subject: | Re: Deprecate short_open_tag ini directive? | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-104938@lists.php.net to get a copy of this message | ||
Hi,
On Mon, Mar 25, 2019 at 5:16 PM Johannes Schlüter
<johannes@schlueters.de> wrote:
>
> On Mo, 2019-03-25 at 09:38 -0500, Sara Golemon wrote:
> >
> > As we stand now, code using short open tags works when those tags are
> > enabled. As we'd stand in the future, that code would not work.
> > That
> > level of BC break requires a strong justification.
>
> The code would not simply "not work" but even potentially leak to the
> client (as PHP would not treat it as code) which could leak credentials
> or other sensitive information.
>
> I still think that long-term goal should be that language behavior
> doesn't depend on ini configuration.
>
OK, so why not flip it and make it always available instead? I'm aware
of the potential XML conflict, but I've personally never seen it, so
to me that looks like the lesser evil compared to a massive BC break.
Cheers,
Andrey.