PhpDev.App
willdurand/JsonpCallbackValidator

willdurand/JsonpCallbackValidator

Stars: 653

Forks: 11

Pull Requests: 10

Issues: 2

Watchers: 6

Last Updated: 2023-07-29 16:52:43

JSONP callback validator.

License: MIT License

Languages: PHP

JsonpCallbackValidator

GitHub Actions Total Downloads Latest Stable Version

JsonpCallbackValidator allows you to validate a JSONP callback in order to prevent XSS attacks.

Usage

$validator = new \JsonpCallbackValidator();

$validator->validate("JSONP.callback");
// returns `true`

$validator->validate("(function xss(x){evil()})");
// returns `false`

Or as a static method:

\JsonpCallbackValidator::validate("JSONP.callback");
// returns `true`

\JsonpCallbackValidator::validate("(function xss(x){evil()})");
// returns `false`

Installation

The recommended way to install JsonpCallbackValidator is through Composer:

$ composer require willdurand/jsonp-callback-validator

Unit Tests

Setup the test suite using Composer:

$ composer install

Run it using PHPUnit:

$ ./vendor/bin/simple-phpunit

Contributing

See CONTRIBUTING file.

Credits

License

JsonpCallbackValidator is released under the MIT License. See the bundled LICENSE file for details.

OPEN ISSUES

See all