[PEPr] Comment on RFC::EvalForbiddance
| From: | Sean Coates | Date: | Mon, 22 Aug 2005 19:02:46 +0000 |
| Subject: | [PEPr] Comment on RFC::EvalForbiddance | ||
| References: | 1 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-39496@lists.php.net to get a copy of this message | ||
Sean Coates (http://pear.php.net/user/sean) has commented on the proposal for RFC::EvalForbiddance.
Comment:
Pierre's point about other injection points needs to be considered. In
addition to the mentioned preg 'e' modifier, we should also keep close
tabs on create_function() -- there are probably others, too.
S
Proposal information:
http://pear.php.net/pepr/pepr-proposal-show.php?id=288
--
Sent by PEPr, the automatic proposal system at http://pear.php.net