Am 01.08.2016 um 10:23 schrieb Yasuo Ohgaki:
> P.S. It's possible to return array that contains offending values. It
> is not included since users can store whole offending input array.
> Whole input is more useful for attack analysis.

Actually I wanted to suggest exactly that for ppl. who want to give
Feedback to their users, what values failed to validate to the users.
Probably with a fourth optional param, like `$return_invalid = false`?
Of course logging is a different topic and should always use the whole
offending input array.

Regards,
  Christian Stadler


-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to