Re: [RFC] New operator for context-dependent escaping
| From: | Marcio Almada | Date: | Mon, 18 Jul 2016 21:05:06 +0000 |
| Subject: | Re: [RFC] New operator for context-dependent escaping | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-94568@lists.php.net to get a copy of this message | ||
2016-07-18 16:29 GMT-04:00 Dan Ackroyd <danack@basereality.com>:
> On 17 July 2016 at 04:49, Michael Vostrikov <michael.vostrikov@gmail.com>
> wrote:
>
> > If some library really need to replace existing handler of application,
> it can call unregisterHandler() directly.
>
> But then there is no way to restore the previous handler.
>
> > usually we don't need multiple handlers for certain context.
>
> Stuff that is added to the core needs to cover all use-cases, not just
> the typical ones.
>
In what real world case multiple escape handlers for the same context would
be a thing? I only see multiple handlers for the same context as risky
since double escaping can, in some contexts, lead to security issues.
>
> > I tried not to invent new mechanisms of usage.
>
> Then please copy the set_error_handler behaviour.
>
>
100% agree with that.
cheers
> Dan
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>