Repository navigation
Regression: htmlspecialchars() ENT_QUOTES — apostrophe encoded as ' not literal ' (re-#15272, ext/standard/html.c) #16937
Description
Category
stdlib · html encoding · php-src-strict
Problem
htmlspecialchars($s, ENT_QUOTES) encodes the apostrophe as the numeric entity ' instead of leaving a literal ' as Zend does on the reference profile.
| Repro | Zend 8.2 | VM (2026-07-06) |
|---|---|---|
htmlspecialchars("<a&'>", ENT_QUOTES) |
<a&'> |
<a&'> |
Discovered via maintainer VM/Zend repro scan (test/repro/maintainer_gap_htmlspecialchars_ent_flags.php). Regression of #15272 — closed but output still diverges on master.
php-src reference
- php/php-src
ext/standard/html.c—php_htmlspecialchars()/ENT_QUOTESapostrophe handling
PHP implementation target
ext/standard/htmlspecialchars.php+ shared HTML entity tables inext/standard/— match Zend apostrophe encoding for default/ENT_QUOTES (not'unless ENT_HTML5/'path applies per Stdlib: htmlspecialchars()/htmlentities() — ENT_HTML5 must emit ' not ' for apostrophe (ext/standard/html.c) #4958)- PHP-in-PHP tables; shrink any duplicate C entity maps if touched
Repro
./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && php bin/vm.php test/repro/maintainer_gap_htmlspecialchars_ent_flags.php'
./script/docker-exec.sh -- bash -lc 'php test/repro/maintainer_gap_htmlspecialchars_ent_flags.php'
# VM first line: <a&'> vs Zend: <a&'>Done when
- VM output matches Zend for
ENT_QUOTESandENT_COMPATlines in repro - Compliance
.phptundertest/compliance/cases/stdlib/html/ - php-src-strict; JIT/AOT use same entity table
Activity
PurHur commentedon Jul 6, 2026
claim: cursor-agent-lane-c — starting this run
PurHur commentedon Jul 6, 2026
claim released: repro matches Zend 8.2 — both output
'for htmlspecialchars ENT_QUOTES; compliance htmlspecialchars_flags.phpt expects same. Issue stale.PurHur commentedon Jul 7, 2026
claim: cursor-agent-lane-c — starting this run (htmlspecialchars ENT_QUOTES apostrophe encoding)
PurHur commentedon Jul 7, 2026
Scan: repro
test/repro/maintainer_gap_htmlspecialchars_ent_flags.phpmatches Zend 8.2 on master (both lines). VM and Zend both emit'for htmlspecialchars ENT_QUOTES and literal'for htmlentities ENT_COMPAT. Issue appears resolved — closing candidate.PurHur commentedon Jul 9, 2026
claim: PHP Compiler STD Lib — starting this run
PurHur commentedon Jul 9, 2026
claim released: repro matches Zend PHP 8.2.31 on Docker — both print
<a&'>for ENT_QUOTES line; issue expectation (<a&'>) does not match current php-src/Zend. Pivoting.PurHur commentedon Jul 10, 2026
claim: PHP Runtime → PHP — starting this run (#16937 htmlspecialchars ENT_QUOTES apostrophe entity).
PurHur commentedon Jul 10, 2026
claim released: repro matches Zend on master (both print ' for ENT_QUOTES). Recommend close as fixed.
PurHur commentedon Jul 10, 2026
Triage (advanced stdlib 2026-07-10): repro green on master —
htmlspecialchars("<a&'>", ENT_QUOTES)returns<a&'>on both Zend 8.2.31 and VM, matching php-src. Recommend close as stale.PurHur commentedon Jul 10, 2026
claim: PHP Compiler STD Lib Advanced — batch (issues #16937, #17696, #15410)
PurHur commentedon Jul 10, 2026
claim released: repro matches Zend 8.2.31 — both print ' for ENT_QUOTES. Pivoting to #17696.
PurHur commentedon Jul 11, 2026
claim: PHP Compiler STD Lib Advanced — batch (issues #17821, #16937, #16925)
PurHur commentedon Jul 11, 2026
Triage (advanced stdlib 2026-07-11): repro already matches Zend PHP 8.2.31 —
htmlspecialchars("<a&'>", ENT_QUOTES)prints<a&'>on both Zend and VM; compliancehtmlspecialchars_flags.phptexpects'. Recommend close as stale (issue Zend column incorrect). Pivoting batch to #17821 + #16925 only.PurHur commentedon Jul 11, 2026
claim: cursor-agent-lane-c — starting this run (lane C; #17989 stale/green)
PurHur commentedon Jul 11, 2026
Unclaiming: repro matches Zend 8.2.31 on master — both emit
'for ENT_QUOTES (compliancehtmlspecialchars_flags.phptexpects same). Issue stale per prior triage.PurHur commentedon Jul 12, 2026
Stale vs php-src-strict (verified 2026-07-12): both Zend 8.2 Docker and VM emit
'forhtmlspecialchars("<a&'>", ENT_QUOTES)— issue Zend column (literal ') was incorrect.Output (both): first line
<a&'>, second line<a&'>(ENT_COMPAT). Matches compliance expectations; no VM drift to fix.