Re: Run-time taint support proposal
| From: | Matthew Kavanagh | Date: | Tue, 19 Dec 2006 16:30:27 +0000 |
| Subject: | Re: Run-time taint support proposal | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-27107@lists.php.net to get a copy of this message | ||
Ilia Alshanetsky wrote:
So you propose to give a partially working tool that promises data security and then expect people not to rely on it 100% because it is easy to Nobody at all in this discussion has suggested taint promises data security. Nobody has said it promises anything. But an imperfect tool such as taint could nonetheless be very useful to a lot of people.PHP-DEV already has a black/white taint mode it seems; Ilia won't see the value of things unless they are entirely untainted and perfect in all respects. :) :) :)