Re: [PHP-DEV] pcre: shouldn't pass BAD_ESCAPE_IS_LITERAL by default

2019-02-08 Thread Nikita Popov
On Fri, Feb 8, 2019 at 11:57 AM Sjon Hortensius wrote: > Hi internals, > > PHP enables bad_escape_is_literal by default when using pcre methods - this > results in invalid escape-patterns (such as \i) being interpreted as a > literal `i`. This option is documented in pcre as "a dangerous option.

[PHP-DEV] pcre: shouldn't pass BAD_ESCAPE_IS_LITERAL by default

2019-02-08 Thread Sjon Hortensius
Hi internals, PHP enables bad_escape_is_literal by default when using pcre methods - this results in invalid escape-patterns (such as \i) being interpreted as a literal `i`. This option is documented in pcre as "a dangerous option. Use with care" - and the pcre author raised concern about PHP enab