[RFC] [VOTE] is_literal
| From: | Craig Francis | Date: | Mon, 05 Jul 2021 18:14:45 +0000 |
| Subject: | [RFC] [VOTE] is_literal | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-115306@lists.php.net to get a copy of this message | ||
Hi Internals,
I have opened voting on https://wiki.php.net/rfc/is_literal for the
is-literal function.
The vote closes 2021-07-19
The proposal is to add the function is_literal(), a simple way to identify
if a string was written by a developer, removing the risk of a variable
containing an Injection Vulnerability.
This implementation is for literal strings ONLY (after discussion over
allowing integers) and, thanks to the amazing work of Joe Watkins, now
works fully with compiler optimisations, interned strings etc.
Craig