Re: RFC: Implementing a core anti-XSS escaping class
| From: | Michael Shadle | Date: | Tue, 18 Sep 2012 16:24:04 +0000 |
| Subject: | Re: RFC: Implementing a core anti-XSS escaping class | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-63065@lists.php.net to get a copy of this message | ||
On Sep 18, 2012, at 5:00 AM, Paul Dragoonis <dragoonis@gmail.com> wrote:
> Yep, I see where my suggestion for filter_var() isn't relevant.
>
> I use symfony2's ecaper in the PPI\Templating\ component, and really like it.
> Zend2's also seems pretty good.
>
> It'd be nice to have this available as a ./ext/spl/ class or an
> independent extension (really needed for 1 class?).
>
> Cheers,
> Paul.
Please provide it as a procedural extension as well like filter is. I don't care if there is an
OO counterpart, but I detest OO and don't want to see basic php things being introduced now (if
accepted) only as OO. It feels like PHP is losing its roots...