Re: [RFC] Escaping RFC for PHP Core - Updates?
> It looks nicer than Escaper::escapeJs(), Escaper::escapeHtml(), etc.
>
> Any comments?
Please, don't go down this route. You do not want one class to escape all
kinds of data; delegate each type of escaping to its own class:
JavaScriptEscaper->escape();
PhpEscaper->escape();
HtmlEscaper->escape();
HtmlAttributeEscaper->escape();
I should not have to defend this but I am willing to explain in more detail
if someone would like me to.
Thread (13 messages)