Re: Run-time taint support proposal
| From: | Richard Lynch | Date: | Sat, 16 Dec 2006 01:19:15 +0000 |
| Subject: | Re: Run-time taint support proposal | ||
| References: | 1 | Groups: | php.internals php.internals |
| Request: | Send a blank email to internals+get-27022@lists.php.net to get a copy of this message | ||
On Fri, December 15, 2006 4:31 pm, Wietse Venema wrote:
> Even if some taint check is to restrictive at some point in time,
> the programmer can always overcome it with an explicit action.
Would that require some sort of bogus string non-manipulation, or do
you foresee a "untaint" function which does nothing but mark it
untainted, or are you thinking a new operator?...
I think we've run out of ASCII symbols for operators, actually, so
don't pick that one. :-)
--
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some starving artist.
http://cdbaby.com/browse/from/lynch
Yeah, I get a buck. So?