Re: [Savannah-hackers] submission of Web Application Security Project (W.A.S.P.) - savannah.gnu.org

[Xavier Nicolovici]

Hi,

I'm evaluating the project you submitted for approval in Savannah.


> A package was submitted to savannah.gnu.org
> This mail was sent to address@hidden, address@hidden
> 
> 
> Josean <address@hidden> described the package as follows:
> License: lgpl
> Other License: 
> Package: Web Application Security Project (W.A.S.P.)
> System name: wasp
> Type: GNU
> 

Your project is not part of the GNU project, so we cannot
accept its current type.   We want to maintain the distinction between
'GNU' and 'non-GNU' projects. If your project is approved for inclusion
into Savannah, we will set its type to 'non-GNU'.

Whenever your project is accepted into the GNU project you may change
its type.  You can do this by asking us.

> Description:
> Web Security Library
> 
> After report too many security bugs to the correspondient authors of various 
> web projects I decide to create a library that have support for : 
> 
>       1.- Detect possible attacks (such as an IDS but at script level)
>       2.- Make MORE SECURE web applications (at the moment only with PHP)
>       3.- Functions to correctly SANITIZE strings
>       4.- Transparent encription
>       5.- Control by IP and MAC address
> 
> I create only the PHP version, but versions for Perl, Ruby, ASP.NET (Mono), 
> ASP and JSP will be created.
> 
> Other Software Required:
> PHP
> 
> Other Comments:
> I wrote the php library and I writing the correpondient libraries for Perl 
> and Ruby.
> 

Please reply and include an (temporary) URL pointing to the source
code. The description you gave when registering will not be read
by the general public. If you are still concerned with privacy,
however, you can forward the code to me by email
(address@hidden).

We wish to review your source code, even if it is not functional, to
catch potential legal issues early. 

For example, to release your program properly under the GPL you must
include a copyright notice and permission-to-copy statements at the
beginning of every file of source code.  This is explained in
http://www.gnu.org/licenses/gpl-howto.html.  Our review would help
catch potential omissions such as these.

Regards,

Xavier Nicolovici