On 3 July 2025 17:04:59 BST, Derick Rethans <der...@php.net> wrote:
>The intention behind the filter extension was that admins can set a 
>default filter for *all* data coming in through this `filter.default` 
>setting as a "safe" fallback. That could/should probably even be a 
>filter that just makes all data "☺" for example, to indicate you're 
>working with unsanitised data. (I don't think there is such a filter 
>though).

Perhaps the option should be something like "filter.mandatory=1", blanking or 
poisoning the superglobals and obliging users to go through filter_var?


Rowan Tommins
[IMSoP]

Reply via email to