Re: [RFC] Multibyte char handling
| From: | Yasuo Ohgaki | Date: | Thu, 23 Jan 2014 04:39:42 +0000 |
| Subject: | Re: [RFC] Multibyte char handling | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-71421@lists.php.net to get a copy of this message | ||
Hi all,
On Thu, Jan 16, 2014 at 8:50 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> addslashes() could be vulnerable via char encoding based attacks.
> It is needed to decide what counter measure we adopt.
> This is RFC for this issue.
>
> https://wiki.php.net/multibyte_char_handling
>
> Please comment.
> Thank you.
>
I've revised the RFC a little and integrated with following RFC.
Alternative implementation of mbstring using ICU
https://wiki.php.net/rfc/altmbstring
RFC is changed to include mbstring-ng as a default compiled module.
It would be better for license wise. IMHO.
If there is no additional comment, I would like to start vote.
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net