On Tue, Jun 23, 2026 at 9:49 AM Nicolas Grekas <[email protected]> wrote:
> > > Le mar. 23 juin 2026, 09:43, Sjoerd Langkemper <[email protected]> > a écrit : > >> On Tue, Jun 23, 2026, at 09:26, Nicolas Grekas wrote: >> >> Please don't, it's used in userland also. >> >> >> Thanks, that is interesting. Do you have more information about this? >> Where and how is it used? Do you have an example? >> >> Regards, >> >> Sjoerd Langkemper >> > > Sure, here is the pointer: > > https://github.com/symfony/symfony/blob/dce1b899ab0c0e4cef9159c083ef535387a8db12/src/Symfony/Component/HttpClient/Response/NativeResponse.php#L188 > Hi, Can we deprecate the filter only in php://filter URLs, and not in the function-based filter API? (like stream_filter_append) Legitimate cases use the function-based API, while adversarial ones use the URL-based API. Deprecating in the URL-based API only would address the issue without breaking legitimate code. Regards,
