symfony/yaml
Yaml
This project is a PHP library that serves as a configuration file processor, providing a bridge to translate human-readable YAML text into native PHP arrays and objects. It functions as both a parser for converting YAML content into application-ready data structures and a serializer for transforming PHP data back into formatted YAML strings.
The library includes security protections designed to prevent memory exhaustion and stack overflow attacks when processing untrusted documents. It ensures structural integrity through syntax validation and provides a command-line utility to check files for errors and deprecations with text or JSON output.
The system supports custom tag handling for value transformation, binary data processing, and configurable data dumping for multi-line blocks and numeric keys. It also manages application settings and parameters through its parsing and serialization capabilities.
Features
- Configuration File Processors - Serves as a bridge that translates human-readable YAML files into application-ready PHP data structures.
- YAML Content Parsers - Converts YAML strings and files into native PHP structures with support for date and binary data.
- YAML Parsers - Provides a comprehensive library for parsing YAML text into native PHP arrays and objects.
- YAML Data Serialization - Converts PHP arrays and objects into formatted YAML strings for data exchange and storage.
- Language-Native Mappings - Transforms YAML structured text directly into native PHP associative arrays and objects.
- Parsing Depth Limits - Enforces maximum nesting levels during parsing to prevent stack overflow and resource exhaustion attacks.
- YAML Parser Hardening - Provides hardening measures to prevent resource exhaustion and DoS attacks when processing untrusted YAML documents.
- YAML Serializers - Implements serialization logic to transform PHP data structures into formatted YAML documents.
- YAML Data Dumpers - Converts PHP arrays and objects into YAML strings with configurable formatting for blocks and numeric keys.
- Recursive Descent Parsers - Uses a recursive descent parsing engine to translate YAML token streams into nested data hierarchies.
- Application Configuration Management - Facilitates the management of application settings and parameters via YAML reading and writing.
- General YAML Syntax Validation - Checks YAML files for structural errors and deprecations to ensure valid formatting.
- General YAML Syntax Validators - Includes a command-line utility to validate YAML files for syntax errors and deprecations.
- YAML Tag Customization - Provides registration and customization of custom YAML tags to map specific value objects during parsing and serialization.
- Circular Dependency Detectors - Implements reference tracking to block circular dependencies that would otherwise cause memory exhaustion.
- Markup State Machines - Employs a deterministic state machine to tokenize raw input strings for syntax analysis.
