create-prisma-php-app 2.0.0-beta.11 → 2.0.0-beta.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/src/Lib/Validator.php +13 -7
- package/package.json +1 -1
|
@@ -22,19 +22,25 @@ final class Validator
|
|
|
22
22
|
/**
|
|
23
23
|
* Validate and sanitize a string.
|
|
24
24
|
*
|
|
25
|
-
* This function converts the input to a string, trims any leading or trailing
|
|
26
|
-
* whitespace, and converts special characters to HTML entities to
|
|
27
|
-
* XSS attacks. If the input is null, an empty string is returned.
|
|
25
|
+
* This function converts the input to a string, trims any leading or trailing
|
|
26
|
+
* whitespace, and optionally converts special characters to HTML entities to
|
|
27
|
+
* prevent XSS attacks. If the input is null, an empty string is returned.
|
|
28
28
|
*
|
|
29
29
|
* @param mixed $value The value to validate and sanitize. This can be of any type.
|
|
30
|
-
* @
|
|
30
|
+
* @param bool $escapeHtml Whether to escape special characters as HTML entities.
|
|
31
|
+
* Defaults to true. Set to false when handling database
|
|
32
|
+
* queries or other non-HTML contexts.
|
|
33
|
+
* @return string The sanitized string. If the input is not a string or null,
|
|
34
|
+
* it is converted to its string representation before sanitization.
|
|
35
|
+
* If the input is null, an empty string is returned.
|
|
31
36
|
*/
|
|
32
|
-
public static function string($value): string
|
|
37
|
+
public static function string($value, bool $escapeHtml = true): string
|
|
33
38
|
{
|
|
34
39
|
// Convert the value to a string if it's not null
|
|
35
40
|
$stringValue = $value !== null ? (string)$value : '';
|
|
36
|
-
|
|
37
|
-
|
|
41
|
+
|
|
42
|
+
// If escaping is enabled, apply htmlspecialchars; otherwise, just trim
|
|
43
|
+
return $escapeHtml ? htmlspecialchars(trim($stringValue), ENT_QUOTES, 'UTF-8') : trim($stringValue);
|
|
38
44
|
}
|
|
39
45
|
|
|
40
46
|
/**
|