Re: [PHP-DEV] Security Audit Priorities

2023-09-30 Thread Dusk
On Sep 25, 2023, at 01:49, Derick Rethans wrote: > The Foundation is organising an external audit/security check of the PHP > source code. As part of that, we would like to identify the places in > the PHP source code where checking this will have the most impact. String parsing functions. Not

[PHP-DEV] Re: Security Audit Priorities

2023-09-30 Thread Pierre Joye
Hello, On Mon, Sep 25, 2023, 3:49 PM Derick Rethans wrote: > . > > Typical areas would be where user input can be (automatically read) > remotely, such as > our RFC 1867 HTTP header parser. But we are sure there are other > important areas as well, and we would like your input. > > So, if you ca

Re: [PHP-DEV] What should I do to create an RFC?

2023-09-30 Thread Saki Takamachi
> You should follow this one ^. It contains a step by step guide on what to do. > >> https://wiki.php.net/rfc/voting > > This document was an RFC on its own to establish the rules around voting. > Yes, you should ask for RFC karma. > I suppose your initial email is sufficient to get that. It may

[PHP-DEV] XSLTProcessor max depth

2023-09-30 Thread Niels Dossche
Hi internals I'm looking to address https://bugs.php.net/bug.php?id=71571. TL;DR: XSL has a maximum recursion depth, and it may even depend on the distro/OS config. For complex inputs you may reach this limit, but PHP offers no way to change that limit. As we already have methods in XSLTProcess

Re: [PHP-DEV] What should I do to create an RFC?

2023-09-30 Thread Niels Dossche
Hi Saki On 9/30/23 06:03, Saki Takamachi wrote: > Hi. > > I want to create an RFC. This is my first time. > > The next two pages each have sections on how to create RFCs. However, they > differ slightly in content. Which way should I use? > > https://wiki.php.net/rfc/howto You should follow t

Re: [PHP-DEV] trim support for multibyte spaces

2023-09-30 Thread youkidearitai
2023年9月30日(土) 17:42 Saki Takamachi : > > > I also want to trim function of multibyte trim functions. > > > I think that in addition to mb_trim, > mb_ltrim and mb_rtrim are also necessary. > > Hi. > > Having a new option besides regex sounds like a good idea for me, as a user > of a language that b

Re: [PHP-DEV] trim support for multibyte spaces

2023-09-30 Thread Saki Takamachi
> I also want to trim function of multibyte trim functions. > I think that in addition to mb_trim, mb_ltrim and mb_rtrim are also necessary. Hi. Having a new option besides regex sounds like a good idea for me, as a user of a language that benefits from `mb_trim()`. Perhaps users are more intu