Re: XML_Feed_Parser and HTML security
| From: | Martin Jansen | Date: | Wed, 16 Aug 2006 18:27:18 +0000 |
| Subject: | Re: XML_Feed_Parser and HTML security | ||
| References: | 1 2 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-43711@lists.php.net to get a copy of this message | ||
On Wed Aug 16, 2006 at 11:3937AM -0400, Arnaud Limbourg wrote:
> What about filtering html and give methods to access the raw input ?
>
> It makes the package relatively safe to use and different methods make
> it clear that it is the unfiltered content being accessed without the
> need to see if a parameter is set to true or false.
This sounds like the best compromise to me.
- Martin