Skip to content

[pull] master from php:master#530

Merged
pull[bot] merged 15 commits intoturkdevops:masterfrom
php:master
Nov 12, 2025
Merged

[pull] master from php:master#530
pull[bot] merged 15 commits intoturkdevops:masterfrom
php:master

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented Nov 12, 2025

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

ndossche and others added 15 commits November 11, 2025 22:47
…ial characters in attributes when passing data to callback (#20453)

We would need to escape the attributes, but there's no builtin method
that we can call in libxml2 to do so in a way consistent with the
attribute escape rules and expat.
In fact, expat just repeats the input, while we reconstruct it.
To fix the issue, and fix consistency with expat, we repeat the input as
well. This works by seeking to the start and end of the tag and passing
it to the default handler. This is fine for the parser because the
parser used in ext/xml is always in non-progressive mode, so we have
access to the entire input buffer.
* PHP-8.3:
  Fix GH-20439: xml_set_default_handler() does not properly handle special characters in attributes when passing data to callback (#20453)
* PHP-8.4:
  Fix GH-20439: xml_set_default_handler() does not properly handle special characters in attributes when passing data to callback (#20453)
* PHP-8.5:
  Fix GH-20439: xml_set_default_handler() does not properly handle special characters in attributes when passing data to callback (#20453)
* PHP-8.4:
  xml: Fix unused variable warning
* PHP-8.5:
  xml: Fix unused variable warning
…ler (#18932)" (#20455)

This partially reverts commit d8577d9, and
reverts parts of 07f1cfd.
* PHP-8.5:
  Revert "Deprecate returning non-string values from a user output handler (#18932)" (#20455)
* PHP-8.3:
  Correctly handle extra named args for magic call in debug_backtrace_get_args()
* PHP-8.4:
  Correctly handle extra named args for magic call in debug_backtrace_get_args()
* PHP-8.5:
  Correctly handle extra named args for magic call in debug_backtrace_get_args()
@pull pull bot locked and limited conversation to collaborators Nov 12, 2025
@pull pull bot added the ⤵️ pull label Nov 12, 2025
@pull pull bot merged commit ad35ef3 into turkdevops:master Nov 12, 2025
1 of 2 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants