2017 © Pedro Peláez
 

library confusables

This library is an implementation of the skeleton function described in the Confusion Detection section of the Unicode Security Mechanisms technical standard.

image

toxygene/confusables

This library is an implementation of the skeleton function described in the Confusion Detection section of the Unicode Security Mechanisms technical standard.

  • Friday, March 2, 2018
  • by toxygene
  • Repository
  • 1 Watchers
  • 1 Stars
  • 9 Installations
  • PHP
  • 0 Dependents
  • 0 Suggesters
  • 0 Forks
  • 0 Open issues
  • 9 Versions
  • 0 % Grown

The README.md

Unicode Confusables

This library is an implementation of the skeleton function described in the Confusion Detection section of the Unicode Security Mechanisms technical standard., (*1)

Because Unicode contains such a large number of characters and incorporates the varied writing systems of the world, incorrect usage can expose programs or systems to possible security attacks., (*2)

- http://unicode.org/reports/tr39/, (*3)

Description

The skeleton function deconstructs complex Unicode graphemes into a string that can be used to detect if other strings are visually similar (aka confusable)., (*4)

Usage

(Re) Building the Class File

The Confusable class file is generated by bin/build-confusables. That build script will automatically be called by composer on install/update., (*5)

The reason the class file is built dynamically is two fold: - The confusables.txt file is quite large (~120k). Caching them locally is an improvement, but it still requires a disk read and parsing. - Injecting the confusables rules into the PHP file it can be stored in PHP byte-code caches., (*6)

Should the Unicode confusables.txt file be updated, developers can rerun the build script at any time, even via a cronjob., (*7)

API

skeleton(string $a): string

Create the skeleton of a string., (*8)

Storing this value in the database will give developers a way of doing a visual uniqueness check against existing identifiers., (*9)

isConfusable(string $a, string $b): bool

Check if two strings are confusable for each other., (*10)

Under the hood, this is implemented as skeleton(A) == skeleton(B)., (*11)

Warning

Casefolding is not part of the skeleton algorithm. If the requirements of your application include casefolding identifiers, it is your responsibility to supply the strings in the correct case to the skeleton function., (*12)

The Versions

02/03 2018

dev-develop

dev-develop

This library is an implementation of the skeleton function described in the Confusion Detection section of the Unicode Security Mechanisms technical standard.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Justin Hendrickson

02/03 2018

dev-master

9999999-dev

This library is an implementation of the skeleton function described in the Confusion Detection section of the Unicode Security Mechanisms technical standard.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Justin Hendrickson

02/03 2018

0.7

0.7.0.0

This library is an implementation of the skeleton function described in the Confusion Detection section of the Unicode Security Mechanisms technical standard.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Justin Hendrickson

02/03 2018

0.6

0.6.0.0

This library is an implementation of the skeleton function described in the Confusion Detection section of the Unicode Security Mechanisms technical standard.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Justin Hendrickson

02/03 2018

0.5

0.5.0.0

This library is an implementation of the skeleton function described in the Confusion Detection section of the Unicode Security Mechanisms technical standard.

  Sources   Download

MIT

The Requires

 

The Development Requires

by Justin Hendrickson

02/03 2018

0.4

0.4.0.0

  Sources   Download

MIT

The Requires

 

The Development Requires

by Justin Hendrickson

02/03 2018

0.3

0.3.0.0

  Sources   Download

MIT

The Requires

 

The Development Requires

by Justin Hendrickson

01/03 2018

0.2

0.2.0.0

  Sources   Download

MIT

The Requires

 

The Development Requires

by Justin Hendrickson

22/02 2018

0.1

0.1.0.0

  Sources   Download

MIT

The Requires

 

The Development Requires

by Justin Hendrickson