Re: taint as a first-class feature for php 7.1
| From: | Stanislav Malyshev | Date: | Thu, 19 Nov 2015 15:59:07 +0000 |
| Subject: | Re: taint as a first-class feature for php 7.1 | ||
| References: | 1 2 3 4 5 6 7 8 9 10 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-89280@lists.php.net to get a copy of this message | ||
Hi!
> I’m requesting that the functions taint() and untaint() as well as
> the ability to log taint information be available in the standard
> interpreter without extensions.
Given that this feature has performance implications, and not
universally needed, I don't think this would be a good idea. If your
package needs it, PHP has many ways of dependency handling. A lot of
vital and widely used functionality is implemented as extensions (such
as DB connections, sessions, regular expressions, etc). So there's no
reason taint couldn't follow the same road.
--
Stas Malyshev
smalyshev@gmail.com