search

coverity / coverity-security-library

Coverity Security Library (CSL) is a lightweight set of escaping routines for fixing cross-site scripting (XSS), SQL injection, and other security defects in Java web applications.
http://security.coverity.com/document/2013/Mar/fixing-xss-a-practical-guide-for-developers.html
197 stars 40 forks source link

Add library support for different programming languages. #5

Open jpasski opened 11 years ago

jpasski commented 11 years ago

From some emails and in-person feedback, I've heard about the following requested languages:

This is a placeholder issue since these other languages probably should be in a different repository. Or, if they're all going to be here, then we'll need to re-organize this repository. I'm open to either since the end-user consumables probably won't be this source code. E.g., for Java it'll probably be Maven artifacts in Sonatype's Central.

neuroo commented 11 years ago

A JavaScript version would be helpful too (at least for our internal use)

CharlieEriksen commented 11 years ago

Is this something you guys at Coverity is planning on doing, or would you accept code from the community to polish and pull in?

Porting to C# is a small weekend project at worst. I'd happily take a stab at it, but no point if you guys are already working on it :)

neuroo commented 11 years ago

Hey Charlie, We're happy to accept any contribution to this project. For better separation between languages, I created a new repo (empty): https://github.com/coverity/coverity-security-library-.net That you can fork and make pull requests to.

Since we still want to maintain the same quality between each version of CSL, we'll have the same testing requirements.

CharlieEriksen commented 11 years ago

https://github.com/coverity/coverity-security-library-.net/pull/1

This is pretty much a straight port with a few changes. Mainly the lack of EL extensions, and I .NET-ified a few code patterns.