Re: [tlug] Do you whitelist or blacklist utf-8?

["Stephen J. Turnbull" <stephen@example.com>]

Nikolay Elenkov writes:

 > You've probably already seen the other replies, but the
 > number of PHP vulnerabilities was overwhelming a few years back.
 > I don't really follow any more, so maybe things have gotten better over 
 > time, but I kind of doubt i.

I've seen claims that the major rewrite around PHP 5 *really* cleaned
things up.  I have no reason to doubt that, although I'm not close
enough to PHP to testify in favor, either.