You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I think we should reconsider the number of single quotes.
In the example below, since we don't write single quotes in the query because it's a static placeholder, the attacker would start with
I'm trying to write two single quotes, but when I show it escaped with .simulate(), there are a lot of single quotes and it's hard to see.
I think we should reconsider the number of single quotes.
In the example below, since we don't write single quotes in the query because it's a static placeholder, the attacker would start with
I'm trying to write two single quotes, but when I show it escaped with
.simulate()
, there are a lot of single quotes and it's hard to see.ConcatSQL/README.md
Lines 47 to 50 in f5fa442
Since the sentence assumed by the attacker is
"passwd='"
+"' or 1=1; --"
+"';"
.The text was updated successfully, but these errors were encountered: