Zend Framework

Stream wrapper should be disabled by default

Details

  • Type: Bug Bug
  • Status: Resolved Resolved
  • Priority: Major Major
  • Resolution: Fixed
  • Affects Version/s: None
  • Fix Version/s: 1.6.0
  • Component/s: Zend_View
  • Labels:
    None
  • Fix Version Priority:
    Must Have

Description

The new implementation of Zend_View in 1.6.0 provides a stream wrapper that can be used when short tags are disabled. This needs to be disabled by default as it:

  • degrades performance
  • causes issues with suhosin (user stream wrappers are considered attack vectors by suhosin)
    When disabling, the stream wrapper should also be documented with examples of how to enable it, a note about issues with suhosin, and a note about performance degradation.

Activity

Hide
Matthew Weier O'Phinney added a comment -

Fixed and documented in trunk and 1.6 release branch.

Show
Matthew Weier O'Phinney added a comment - Fixed and documented in trunk and 1.6 release branch.
Hide
Wil Sinclair added a comment -

Updating for the 1.6.0 release.

Show
Wil Sinclair added a comment - Updating for the 1.6.0 release.

People

Vote (4)
Watch (2)

Dates

  • Created:
    Updated:
    Resolved:

Time Tracking

Estimated:
20m
Original Estimate - 20 minutes
Remaining:
20m
Remaining Estimate - 20 minutes
Logged:
Not Specified
Time Spent - Not Specified