Re: [PHP-DEV] Security Audit Priorities

2023-09-30 Thread Dusk
On Sep 25, 2023, at 01:49, Derick Rethans wrote: > The Foundation is organising an external audit/security check of the PHP > source code. As part of that, we would like to identify the places in > the PHP source code where checking this will have the most impact. String parsing functions. Not

[PHP-DEV] Re: Security Audit Priorities

2023-09-30 Thread Pierre Joye
Hello, On Mon, Sep 25, 2023, 3:49 PM Derick Rethans wrote: > . > > Typical areas would be where user input can be (automatically read) > remotely, such as > our RFC 1867 HTTP header parser. But we are sure there are other > important areas as well, and we would like your input. > > So, if you

Re: [PHP-DEV] What should I do to create an RFC?

2023-09-30 Thread Saki Takamachi
> You should follow this one ^. It contains a step by step guide on what to do. > >> https://wiki.php.net/rfc/voting > > This document was an RFC on its own to establish the rules around voting. > Yes, you should ask for RFC karma. > I suppose your initial email is sufficient to get that. It

[PHP-DEV] XSLTProcessor max depth

2023-09-30 Thread Niels Dossche
Hi internals I'm looking to address https://bugs.php.net/bug.php?id=71571. TL;DR: XSL has a maximum recursion depth, and it may even depend on the distro/OS config. For complex inputs you may reach this limit, but PHP offers no way to change that limit. As we already have methods in

Re: [PHP-DEV] What should I do to create an RFC?

2023-09-30 Thread Niels Dossche
Hi Saki On 9/30/23 06:03, Saki Takamachi wrote: > Hi. > > I want to create an RFC. This is my first time. > > The next two pages each have sections on how to create RFCs. However, they > differ slightly in content. Which way should I use? > > https://wiki.php.net/rfc/howto You should follow

Re: [PHP-DEV] trim support for multibyte spaces

2023-09-30 Thread youkidearitai
2023年9月30日(土) 17:42 Saki Takamachi : > > > I also want to trim function of multibyte trim functions. > > > I think that in addition to mb_trim, > mb_ltrim and mb_rtrim are also necessary. > > Hi. > > Having a new option besides regex sounds like a good idea for me, as a user > of a language that

Re: [PHP-DEV] trim support for multibyte spaces

2023-09-30 Thread Saki Takamachi
> I also want to trim function of multibyte trim functions. > I think that in addition to mb_trim, mb_ltrim and mb_rtrim are also necessary. Hi. Having a new option besides regex sounds like a good idea for me, as a user of a language that benefits from `mb_trim()`. Perhaps users are more

Re: [PHP-DEV] [RFC] [Discussion] Rounding Integers as int

2023-09-30 Thread Marc Bennewitz
Hi Tim, On 29.09.23 17:28, Tim Düsterhus wrote: Hi On 9/26/23 12:39, Marc Bennewitz wrote: I'd like to put a new RFC under discussion: https://wiki.php.net/rfc/integer-rounding I find the proposal reasonable, but I don't like the deprecation proposal, because it does not allow me to opt