php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #52821 Add function for replacing @, { and } for HTML output
Submitted: 2010-09-12 06:50 UTC Modified: 2010-09-12 23:23 UTC
From: f dot grutschus at lubyte dot de Assigned:
Status: Not a bug Package: Strings related
PHP Version: 5.3.3 OS: All
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: f dot grutschus at lubyte dot de
New email:
PHP Version: OS:

 

 [2010-09-12 06:50 UTC] f dot grutschus at lubyte dot de 
Description:
------------
Please add a function that replaces @, { and } to the HTML equivalents &#123, &#125, and &#64.

This would developers help to secure their applications from CSS data theft.

See http://www.owlfolio.org/htmletc/css-data-theft/ and http://websec.sv.cmu.edu/css/css.pdf.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2010-09-12 23:23 UTC] johannes@php.net
-Status: Open +Status: Bogus
 [2010-09-12 23:23 UTC] johannes@php.net 
The function exits. It i called str_replace.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Thu Jul 03 13:01:33 2025 UTC