php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #52821 Add function for replacing @, { and } for HTML output
Submitted: 2010-09-12 06:50 UTC Modified: 2010-09-12 23:23 UTC
From: f dot grutschus at lubyte dot de Assigned:
Status: Not a bug Package: Strings related
PHP Version: 5.3.3 OS: All
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If this is not your bug, you can add a comment by following this link.
If this is your bug, but you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: f dot grutschus at lubyte dot de
New email:
PHP Version: OS:

 

 [2010-09-12 06:50 UTC] f dot grutschus at lubyte dot de 
Description:
------------
Please add a function that replaces @, { and } to the HTML equivalents &#123, &#125, and &#64.

This would developers help to secure their applications from CSS data theft.

See http://www.owlfolio.org/htmletc/css-data-theft/ and http://websec.sv.cmu.edu/css/css.pdf.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2010-09-12 23:23 UTC] johannes@php.net
-Status: Open +Status: Bogus
 [2010-09-12 23:23 UTC] johannes@php.net 
The function exits. It i called str_replace.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Fri Apr 26 16:01:29 2024 UTC