Skip to content

字符串常量的属性value名字可以bail掉htmlspecialchars #60

@HerringtonDarkholme

Description

@HerringtonDarkholme
input @type="text" @name="hehe"

output

echo   '<input';                                                               // 1, 1 @ a.jedi
echo     ' type="';                                                            // 1, 7 @ a.jedi
echo     htmlspecialchars(('text'), 0x88);
echo     '"';
echo     ' name="';                                                            // 1, 20 @ a.jedi
echo     htmlspecialchars(('hehe'), 0x88);
echo     '"';
echo    '>';

让开发者去区分单双引号来性能优化简直蛋疼

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions