Is htmlentities() sufficient for creating xml-safe values?

by

htmlentities() is not a guaranteed way to build legal XML.

Use htmlspecialchars() instead of htmlentities() if this is all you are worried about. If you have encoding mismatches between the representation of your data and the encoding of your XML document, htmlentities() may serve to work around/cover them up (it will bloat your XML size in doing so). I believe it’s better to get your encodings consistent and just use htmlspecialchars().

Also, be aware that if you pump the return value of htmlspecialchars() inside XML attributes delimited with single quotes, you will need to pass the ENT_QUOTES flag as well so that any single quotes in your source string are properly encoded as well. I suggest doing this anyway, as it makes your code immune to bugs resulting from someone using single quotes for XML attributes in the future.

Edit: To clarify:

htmlentities() will convert a number of non-ANSI characters (I assume this is what you mean by UTF-8 data) to entities (which are represented with just ANSI characters). However, it cannot do so for any characters which do not have a corresponding entity, and so cannot guarantee that its return value consists only of ANSI characters. That’s why I ‘m suggesting to not use it.

If encoding is a possible issue, handle it explicitly (e.g. with iconv()).

Edit 2: Improved answer taking into account Josh Davis’s comment belowis .

More Related Contents:

  1. PHP Object as XML Document
  2. Loop dirs and write xml of content files in php [closed]
  3. How to echo every var more than $var? [closed]
  4. How to convert array to SimpleXML
  5. How do you parse and process HTML/XML in PHP?
  6. How to convert XML into array in PHP?
  7. Selecting a css class with xpath
  8. How to use XMLReader in PHP?
  9. How do you parse and process HTML/XML in PHP?
  10. SimpleXML and print_r() – why is this empty?
  11. How to extract a node attribute from XML using PHP’s DOM Parser
  12. Is there any way to convert json to xml in PHP?
  13. How to check if string is a valid XML element name?
  14. Fix malformed XML in PHP before processing using DOMDocument functions
  15. Accessing @attribute from SimpleXML
  16. Best way to process large XML in PHP [duplicate]
  17. Updating XML node with PHP
  18. What is the fastest XML parser in PHP?
  19. PHP – Processing Invalid XML
  20. XML Parse Error – Extra content at the end of the document
  21. CakePHP Xml utility library triggers DOMDocument warning
  22. Using SimpleXML to create an XML object from scratch
  23. Get MySQL database output via PHP to XML
  24. How to setup a cron job in Magento module?
  25. converting SOAP XML response to a PHP object or array
  26. Saving file using curl and PHP
  27. How to import XML string in a php DOMDocument
  28. PHP XML inserting element after (or before) another element
  29. Sending XML data using HTTP POST with PHP
  30. How to get values inside using php DOM?

Leave a Comment