Re: utf-8 filenames in phar files.
| From: | Stas Malyshev | Date: | Tue, 22 Apr 2014 08:48:16 +0000 |
| Subject: | Re: utf-8 filenames in phar files. | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-73763@lists.php.net to get a copy of this message | ||
Hi!
> e.g. Old browsers had _many_ security issues with ill-formed strings.
> One valid example I can think of right now is filter evasion.
> Another is DoS. Browsers may refuse to render page at all when there is
> ill-formed
> strings. e.g. Recent Chrome. Yet another is injections. i.e If user
> assumes path name
> encoding is UTF-8 and didn't escape, their program could be vulnerable
> to injections.
I'm sure these are serious issues, but I'm not sure - how do they relate
to the phar fix we're talking about?
--
Stanislav Malyshev, Software Architect
SugarCRM: http://www.sugarcrm.com/
(408)454-6900 ext. 227