[TYPO3-core] RFC #9778: Improvement of removeXSS

Oliver Hader oliver at typo3.org
Wed Nov 12 13:03:29 CET 2008


Hi Steffen,

Steffen Kamper schrieb:
> Hi,
> 
> here is an updated version from David Slayback fixing a minor bug.
> 
> So this one needs one core +1 to get submitted.
> 
> Again, i know that it's not perfect and more enhancements will follow,
> but i think it's important to have a working base as the current version
> isn't.

I've updated the patch and created a bug entry for it that collects the
affected issues (#9778).

The disposal of the constructor "RemoveXSS" in a static context seems
strange to me. The only possibility would be this:
| $removeXSS = new RemoveXSS($content);
| $content = $removeXSS->RemoveXSS($content);
Thus, I defined this as deprecated and as wrapper for the new static
function RemoveXSS:process().

I'd like to commit this for TYPO3 4.3-alpha1 if nobody objects.

olly
-- 
Oliver Hader
TYPO3 4.3 Release Manager
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0009778_v3.patch
Type: text/x-diff
Size: 11679 bytes
Desc: not available
Url : http://lists.netfielders.de/pipermail/typo3-team-core/attachments/20081112/4ed97e98/attachment.patch 


More information about the TYPO3-team-core mailing list