Hi all,
On Thu, Jan 16, 2014 at 8:50 AM, Yasuo Ohgaki <[email protected]> wrote:
> addslashes() could be vulnerable via char encoding based attacks.
> It is needed to decide what counter measure we adopt.
> This is RFC for this issue.
>
> https://wiki.php.net/multibyte_char_handling
>
> Please comment.
> Thank you.
>
I've revised the RFC a little and integrated with following RFC.
Alternative implementation of mbstring using ICU
https://wiki.php.net/rfc/altmbstring
RFC is changed to include mbstring-ng as a default compiled module.
It would be better for license wise. IMHO.
If there is no additional comment, I would like to start vote.
Regards,
--
Yasuo Ohgaki
[email protected]