- One Goal: Context-Sensitive Auto-Sanitization for PHP
- We are building off of the work done by previous leaders in this field, including inspiration from a paper from Google and UC Berkeley. Languages like Java (Google Soy Templates), C (CTemplate), and Python (Django) and others have modules similar to PHP-CSAS for implementing auto-escaping for various template languages. Our goal is to bring the functionality of these languages into PHP.
The documentation is available in the wiki.
config.m4andconfig.w32: C config file for the CSAS extension.csas.c: C Source file for the extension.php_csas.h: C Header file for the extension.sanitizers/sanitizers.c: Sanitizers used by PHP-CSAS on unsafe input.sanitizers/sanitizers.h: C Header file for sanitizers.c.htmlparser/: Contains the HTML parsing code.