Re: APR::Request::Param charset and UTF-8 flag

Joe Schaefer <[email protected]> Fri, 08 Jun 2007 10:33:33 -0400

Newsgroups	gmane.comp.apache.apreq
Message-ID	<[email protected]>

John ORourke <[email protected]> writes:

> I'm trying to use APR::Request::Param->charset(8) but it doesn't seem to be
> setting perl's UTF-8 flag as the documentation says it should.

Check the docs again- first you have to disable tainting by calling 

  $param->is_tainted(0);

for the utf-8 flag to be set on the $param.  It's a security risk
to set the charset to utf8 without first validating the input-
iow you should at least check that the reported charset is either 
0 or 8 before simply resetting it to 8.

-- 
Joe Schaefer