In the Zend_View Docs at (Version 1.10): http://framework.zend.com/manual/en/…

it says: "encoding: indicate the character encoding to use with htmlentities(), htmlspecialchars(), and other operations. Defaults to ISO-8859-1 (latin1). May be set via setEncoding() or the encoding option to the constructor. "

In the advisory at: http://framework.zend.com/security/advisory/…

it says: "The afore-mentioned [Zend_View] classes have been reworked to use a default character encoding of UTF-8...a decision was made to default to UTF-8 for the internal encoding mechanisms used by Zend_View. "

These two documents seem to be conflicting.

Although, looking into my Zend_View object (version 1.9.8) it appears that it does default to UTF-8 - so the Documentation for Zend View is more likely to be the wrong one.

 
abstract class Zend_View_Abstract implements Zend_View_Interface
{
    ...

    /**
     * Encoding to use in escaping mechanisms; defaults to utf-8
     * @var string
     */
    private $_encoding = 'UTF-8';

    ...