search

mchibouni / owasp-esapi-php

Automatically exported from code.google.com/p/owasp-esapi-php
Other
0 stars 0 forks source link

Codec UTF-32 encoded string detection #26

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
-----Original Message-----
From: "Linden Darling" <Linden.Darling@jds.net.au>
Date: Thu, 5 Nov 2009 12:28:23
To: ESAPI for PHP development list<esapi-php@lists.owasp.org>
Subject: Re: [Esapi-php] getHexForNonAlphanumeric  -- redux

Codec normalizes to UTF-32 so that all string comparaisons occur at this
normalized level. After decoding/encoding the string should get converted
back to the encoding that it was originally supplied in.

I've encountered issues along the way regarding mb_detect_encoding
detecting the encoding of single characters, hence the fleshed out logic
surrounding detection of encoding.

There's also an issue if we pass a UTF-32 encoded string in the first
place, currently the code won't detect that and it will double-UTF-32
encode :o Have been considering allowing the User (of ESAPI) to be able to
state the initial encoding so as to avoid such issues...

- Linden

Original issue reported on code.google.com by mike.bob...@gmail.com on 5 Nov 2009 at 1:39

GoogleCodeExporter commented 9 years ago

Original comment by mike.bob...@gmail.com on 5 Nov 2009 at 1:40

GoogleCodeExporter commented 9 years ago 
De-allocating all defects to me.

Original comment by vande...@gmail.com on 14 Jul 2010 at 9:27

GoogleCodeExporter commented 9 years ago 
All these issues must be dealt with before 1.0. New issues will be on a case by 
case basis as to whether we hold up 1.0 or not.

Original comment by vande...@gmail.com on 17 Jun 2011 at 3:36