https://github.com/baidu-security/openrasp-v8
Google V8 with OpenRASP builtins
https://github.com/baidu-security/openrasp-v8
go java javasc javascript openrasp php plugin v8
Last synced: 22 days ago
JSON representation
Google V8 with OpenRASP builtins
- Host: GitHub
- URL: https://github.com/baidu-security/openrasp-v8
- Owner: baidu-security
- License: apache-2.0
- Created: 2019-02-25T11:11:10.000Z (almost 7 years ago)
- Default Branch: master
- Last Pushed: 2021-04-26T19:40:02.000Z (almost 5 years ago)
- Last Synced: 2024-06-18T23:02:47.316Z (over 1 year ago)
- Topics: go, java, javasc, javascript, openrasp, php, plugin, v8
- Language: C++
- Size: 2.44 MB
- Stars: 53
- Watchers: 5
- Forks: 33
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# openrasp-v8
Google V8 JavaScript engine with OpenRASP builtins, and bridges that are used to embed V8 within languages which are supported by [OpenRASP](https://github.com/baidu/openrasp).
Currently supported languages:
- PHP
- Java
- Go
## Features
### OpenRASP attack detect engine in JavaScript
Full JavaScript runtime context of OpenRASP attack detect engine, with simple C++ interfaces and helpers.
Integrating openrasp-v8 in other languages only need several lines.
### Lexical analyzer
Flex lexical analyzer is embeded in openrasp-v8 to tokenize sql and command strings. Just call `RASP.sql_tokenize` or `RASP.cmd_tokenize`
### HTTP request
The http request method is `RASP.request`. It accepts a configure object and returns a promise. Just like the axios.
### Platform independent
You can build and use it on different OS types, different OS versions and different OS archs.
For convenience of build, we have built some third-party libraries to static libraries:
- Linux x64
- Linux x86
- Linux musl
- OSX x64
- Windows x64
- Windows x86
For compatibility of Linux, most libraries will be staticly linked into openrasp-v8, even libc++. You can even use centos6 sysroot to force linker to link old version glibc.
### Support multiple languages
We will continuely add more languages to our support list.
The language support briges are not just some C++ ports, but also the language specified native interfaces. Such as jni fo Java and cgo for Go.
## Build
We use CMake to generate the files needed by your build tool (GNU make, Visual Studio, Ninja, etc.) for building openrasp-v8 and its language ports.
For example:
```shell
mkdir build
cd build
cmake -DENABLE_LANGUAGES=all ..
make
make test
```
The openrasp-v8 specified cmake variables:
- ENABLE_LANGUAGES
Cmake list of languages to build, or all for building all (base, php, java, go)
- BUILD_TESTING
Boolean option for whether the tests will be built
- BUILD_COVERAGE
Boolean option for whether the coverage will be built