Re: [PHP-DEV] cvs: /php3 mod_php3.c From: rasmus <email protected>
Date: 01/29/00

> RL>> /* Assume output will be HTML. Individual scripts may change this
> RL>> further down the line */
> RL>> - r->content_type = "text/html";
> RL>> + r->content_type = "text/html;charset=iso-8859-1";
>
> Unless I'm missing something, this means all PHP scripts output will be
> iso-8859-1 by default? Isn't this bad? This will surely badly break many
> non-iso-8859-1 pages, made on PHP, because there's absolutely no way on
> Netscape to show other charset if Netscape sees charset in the header. And
> putting custom header in every script is a headache. I understand that
> this is not our problrm, but Netscape's, but I don't see why there's a
> need to introduce such a change?

We may need an ini setting for the default charset, but not specifying a
charset is a security issue. Like I said, I can't explain further right
now. This will all come out next week in a bunch of advisories.

-Rasmus 

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>