Skip to content
This repository has been archived by the owner on Nov 28, 2023. It is now read-only.

拼接SQL注入规则误报 #1412

Open
cyw3 opened this issue Jul 14, 2023 · 0 comments
Open

拼接SQL注入规则误报 #1412

cyw3 opened this issue Jul 14, 2023 · 0 comments

Comments

@cyw3
Copy link

cyw3 commented Jul 14, 2023

System and Python Environment

Item Tooltip Value
System uname -a
Python python -V
Cobra python cobra.py v2.0.0-alpha.5

Description

[Description of the bug or feature]

以下代码只是字符串之间的拼接换行,但是被识别为拼接SQL注入:

String sql = "select count(0) from test where id=? and "+
                     "account=?";

Steps to Reproduce

  1. [First Step]
  2. [Second Step]
  3. [and so on...]

Expected behavior: [What you expected to happen]

Actual behavior: [What actually happened]

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant