On 3 July 2025 17:04:59 BST, Derick Rethans <der...@php.net> wrote: >The intention behind the filter extension was that admins can set a >default filter for *all* data coming in through this `filter.default` >setting as a "safe" fallback. That could/should probably even be a >filter that just makes all data "☺" for example, to indicate you're >working with unsanitised data. (I don't think there is such a filter >though).
Perhaps the option should be something like "filter.mandatory=1", blanking or poisoning the superglobals and obliging users to go through filter_var? Rowan Tommins [IMSoP]