Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use zen_internals sql tokenizer #213

Merged
merged 42 commits into from
Nov 26, 2024
Merged

Use zen_internals sql tokenizer #213

merged 42 commits into from
Nov 26, 2024

Conversation

bitterpanda63
Copy link
Contributor

No description provided.

Wout Feys added 15 commits September 24, 2024 15:44
Update __init__.py and remove old sql injection algo
a4bbddc
It's only up until 1 char user input
800a0ad
Better integer test using regex in sql_injection algo
14d82b4
Bugfix for should_return_early sql inj : .contains => in
97002ff
Add unit tests for should_return_early in sql_injection algo
5b14d89
Update good and bad sql commands to remove mails, invalid sql and "are"
3144aca
Move union i snot union test to IS_NOT_INJECTION
6d7de6b
Remove parameterization of "dangerous chars"
76320ea
foobar) foobar ) and eurofoobar are all examples of sql injections
4dd66f7
'123' as userinput should not be marked as an injection
5297560
Bugfix : Lower query and user input on python side before sending to …
8ade460 
…rust
Remove dialects and interchange them with an integer map
40f966a
Fix test_allow_escape_sequences by setting to not sql injection
88d7696
Change what is "invalid query" and what is not
b2c650e
Fix safely escaped test with backtick
aa0183e
@bitterpanda63 bitterpanda63 marked this pull request as ready for review September 27, 2024 14:11
willem-delbare
willem-delbare previously approved these changes Nov 5, 2024
View reviewed changes
@bitterpanda63 bitterpanda63 marked this pull request as draft November 14, 2024 09:00
@bitterpanda63 bitterpanda63 marked this pull request as ready for review November 26, 2024 09:23
@bitterpanda63 bitterpanda63 dismissed willem-delbare’s stale review November 26, 2024 09:24

PR has changed substantially

@bitterpanda63 bitterpanda63 changed the title Update sql injection algorithm to use Rust Tokenizer Use zen_internals sql tokenizer Nov 26, 2024
hansott
hansott reviewed Nov 26, 2024
View reviewed changes
Makefile Outdated Show resolved Hide resolved
@bitterpanda63 @hansott
Update Makefile
941b377 
Co-authored-by: Hans Ott <[email protected]>
@willem-delbare willem-delbare merged commit 22518e0 into main Nov 26, 2024
11 checks passed
@willem-delbare willem-delbare deleted the update-sql-injection-algo-to-tokenizer branch November 26, 2024 12:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@hansott hansott hansott approved these changes

@willem-delbare willem-delbare willem-delbare left review comments

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@bitterpanda63 @hansott @willem-delbare