[xdebug-general] Re: Fw: Re: Xdebug Eval is dangerous

Dave Kelsey wrote:
>
> Darien, that is certainly an interesting idea, but I don't want to be
> dependent on a php extension as it may not be available on some php
> implementations, but thanks for the suggestion.
Hrm. Well, it could be a purely optional step in guarding against unsafe
breakpoint expressions: The checkEval function could just test the
return of extension_loaded('tokenizer') and if it's not loaded, return
early without errors.

While the tokenizer extension is standard on PHP.net 4.3.0+, this would
allow it to degrade gracefully even if used against another
implementation e.g. Quercus.

Of course, it may be possible for Xdebug to implement something similar
with the tokenizer library, but I have no experience interacting with it
except through it's exposed PHP functions.

-- 
Darien Hager
Developer
Etelos, Inc.
darien[@]etelos.com 
http://www.etelos.com
"Revolutionizing the way applications are developed, distributed and consumed."
[Burdensome Boilerplate]
This e-mail message, including attachments, may contain confidential information for the sole use of the intended recipient(s). If you are not the intended recipient, then this is notice that any use, disclosure, dissemination, distribution or copying is strictly prohibited. If you have received this message in error please contact the sender by reply mail and destroy all copies of the original message.