Re: [RFC] New operator for context-dependent escaping
| From: | Michael Vostrikov | Date: | Sun, 17 Jul 2016 11:08:13 +0000 |
| Subject: | Re: [RFC] New operator for context-dependent escaping | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-94529@lists.php.net to get a copy of this message | ||
>
> Context should be defined where the variable is printed. Otherwise you
> move the variable from HTML text to an attribute or add it somewhere else
> and the context doesn't match anymore.
>
Well, maybe, but HTML is external context and it can be combined with other
contexts depending on task. We can not know all possible tasks. Single
variable is just more flexible.