Corrected some 'Global HTTP Validation Rules' regular expressions which
contained invalid (double) escape sequences which effectively removed the
incorrectly escaped charcters from the pattern whilst also making the back
slash a legal character.  In patterns containing a forward slash the pattern
would be trucated at the forward slash which removed it and any subsequent
characters from the pattern.
I added encodeCharacter and decodeCharacter in VBScriptCodec.php
I updated the test suite expected results to match the J2EE behaviour (the use of chrw is not yet implemented in esapi-java 1.4).
Unzipped so can access online.
Removed double escaping from some more validation regular expressions.
Added a call to parent constructor (bugfix)
--> Couple of Authenticator tests before going to bed :)
Initial version of DefaultIntrusionDetector plus the addition of an Event class
to the IntrusionDetector interface file and two tests in IntrusionDetectorTest.
Changed Intrusion Event names from fully-qualified Java class names to PHP
class names.
( see https://lists.owasp.org/pipermail/esapi-php/2009-November/000334.html )
First substantial implementation of CSSCodec, with tests in CSSCodecTest.php. Added utility method Codec::isHexDigit().
MySQL Codec Added
Was missing parent::__construct();
Added declarations, getAlphabet(), getDecodabet(), encode3to4(...), unsignedRightShift(...) + alias urs(...). Started encodeObject(...) function and Base64InputStreamFilter class.
FileBasedAuthenticator's createUser() method implemented
Implemented encodeForSQL and testEncodeForSQL.
Some fixes to get it to build and for its tests to run.
First substantial implementation of OracleCodec, with tests in OracleCodecTest.php.
Corrected some mistakes in Class Event. Specifically:
o comparison of threshold interval with the time between the first and last of
threshold count events was wrong.
o public property Event->count is now incremented.
o use of $this.
Added a missing uppercase 'W' to $CHAR_ALPHANUMERICS
Modified addSecurityEvent() to align with the esapi4java 2.0 implementation.
Previous java implementations were not persisiting Intrusion Events.
User interface checkin