diff options
author | Ilia Alshanetsky <iliaa@php.net> | 2007-04-25 18:22:43 +0000 |
---|---|---|
committer | Ilia Alshanetsky <iliaa@php.net> | 2007-04-25 18:22:43 +0000 |
commit | 6a6ae2f713fa7cd189da4ad483df7a3671ccc032 (patch) | |
tree | 76887ca76783575326483ad758228974361ce07e /TODO-PHP5 | |
parent | 4bd17132b1d123d00d8a0db2c0b57c28710a50d2 (diff) | |
download | php-git-6a6ae2f713fa7cd189da4ad483df7a3671ccc032.tar.gz |
Update TODO: filter extension was added
Diffstat (limited to 'TODO-PHP5')
-rw-r--r-- | TODO-PHP5 | 20 |
1 files changed, 0 insertions, 20 deletions
@@ -48,26 +48,6 @@ Responsibility: Shane Caraveo & each sapi module owner Timeframe: ? (but shouldn't be much effort, most modules are probably ok) -Component: Input Filtering - - Implement a SAPI input filter hook that will get called - just before registering a variable in the - treat_data/post_handler hooks. (done) - - Make sure this is also done in mbstring (done) - - Provide access functions, or perhaps a new - $_RAW_GET/POST/Cookie set of superglobals to get at the - unfiltered data - - Provide a .ini directive which allows people to set their - input filter to one of the built-in strip_tags, - htmlspecialchars or whatever other internal function might - be useful here. - - (The main benefit of this is to make it easier for people - to solve the XSS problem once and for all without having - to go through every line of their code and adding input - validation/filtering everywhere) -Responsibility: Rasmus -Timeframe: Yesterday - - Component: RPC Abstraction Layer Porting java, com, dotnet, xmlrpc, corba, soap and python, srm (are there more ?) to work with the new oo api and preferably |