Re: RFC about automatic template escaping
| From: | Tom Worster | Date: | Mon, 21 Mar 2016 19:43:03 +0000 |
| Subject: | Re: RFC about automatic template escaping | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-91823@lists.php.net to get a copy of this message | ||
Hi Daniel,
When I write scripts that need to behave the same independently of the value of mbstring.func_overload then I have to remember to be careful with the functions it affects. It's a drag. I resent having to write things like mb_strlen($str, '8bit') to get a byte-count knowing that the scripts would be cleaner and easier to understand if I could dictate the value of mbstring.func_overload (or if it had never been invented).
Would your proposal have any sort of similar effect? I mean, would it complicate the task of HTML-escaping output when the scripts need to work the same regardless of the '__auto_escape' ini setting?
Tom