Now, about taint mode, is it possible to leave the input filtering for
a second and explain me what else you like to do? How do you plan to
manage the contexts? Do you want this horrible mode 3? Or will you
I'm not sure what you mean by "contexts". I suppose by "mode 3" you mean mode in which tainted data output or passed to function which is not marked safe to accept tainted data causes error? Yes, I think I want it. However, if you use only filtered data, you have nothing to worry about and probably would never know about tainting. However, not many of existing application work like that, unfortunately.
argue about input filtering, sory taint mode until next year? :)
New year is in 12 days now, so I would not be surprised if the discussion continued beyond that date :)
--
Stanislav Malyshev, Zend Products Engineer
stas@zend.com http://www.zend.com/