Re: Re: Run-time taint support proposal

From: Date: Sat, 16 Dec 2006 02:29:35 +0000
Subject: Re: Re: Run-time taint support proposal
References: 1  Groups: php.internals 
Request: Send a blank email to internals+get-27031@lists.php.net to get a copy of this message
Jordan Moore wrote:
So, what if an ISP (webhost) enables taint functionality, and a developer uses a PHP library that uses custom filter functions for filtering data. Will this developer see messages displayed on his PHP application even though filtering is being done?
Correctly implemented filtering library would untaint the data, of course. One of the TODOs might be providing API making easier to write such library. -- Stanislav Malyshev, Zend Products Engineer stas@zend.com http://www.zend.com/

« previous php.internals (#27031) next »