6.0.0-beta1
▾
Tasks
New Task
Search
Photos
Wiki
▾
Tickets
New Ticket
Search
dev.horde.org
Toggle Alerts Log
Help
9/10/25
H
istory
A
ttachments
C
omment
W
atch
Download
Comment on [#11943] Horde-Text-Filter use preg_replace with eval
*
Your Email Address
*
Spam protection
Enter the letters below:
\ /.__ . .\ /.__ >< [__)|_/ >< [__) / \[__)| \/ \|
Comment
> Horde/Text/Filter/Emails.php and Horde/Text/Filter/Linkurls.php uses > preg_replace with /e modifier (PREG_REPLACE_EVAL) > > From PHP documentation : > "Use of this modifier is discouraged, as it can easily introduce > security vulnerabilite" > "This feature has been DEPRECATED as of PHP 5.5.0. Relying on this > feature is highly discouraged" > > So with PHP 5.5, Horde_Text_Filter test suite fails with > preg_replace(): The /e modifier is deprecated, use > preg_replace_callback instead > > The attached patch use preg_replace_callback instead, with an > anonymous function (supported since php 5.3.0). > > I understand than php 5.5 is not yet supported, but as this fix > doesn't change the requirement and is still compatible with previous > php version, I hope you will consider it.
Attachment
Watch this ticket
N
ew Ticket
M
y Tickets
S
earch
Q
uery Builder
R
eports
Saved Queries
Open Bugs
Bugs waiting for Feedback
Open Bugs in Releases
Open Enhancements
Enhancements waiting for Feedback
Bugs with Patches
Enhancements with Patches
Release Showstoppers
Stalled Tickets
New Tickets
Horde 5 Showstoppers