Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

detect possible sql injections #155

Merged
merged 37 commits into from
Oct 6, 2022
Merged

detect possible sql injections #155

merged 37 commits into from
Oct 6, 2022

Commits on Oct 6, 2022

  1. detect possible sql injections

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    d005a0a View commit details
    Browse the repository at this point in the history

  2. Update expected.out

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    2e9b52b View commit details
    Browse the repository at this point in the history

  3. cs

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    396c40a View commit details
    Browse the repository at this point in the history

  4. fix expectations

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    091e3a1 View commit details
    Browse the repository at this point in the history

  5. more tests

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    92ddbf0 View commit details
    Browse the repository at this point in the history

  6. whitelist some api calls which can be used in sql expressions but are… 

    … considered safe
    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    385bf4e View commit details
    Browse the repository at this point in the history

  7. tests and fixes

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    6451bee View commit details
    Browse the repository at this point in the history

  8. Update RexSqlInjectionRule.php

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    3d95bb4 View commit details
    Browse the repository at this point in the history

  9. cover getArray(), getDbArray()

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    d517f23 View commit details
    Browse the repository at this point in the history

  10. support indirect analysis via variable

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    d87a6e6 View commit details
    Browse the repository at this point in the history

  11. support encapsed types

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    72419b7 View commit details
    Browse the repository at this point in the history

  12. added 'in' escaping method

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    d2eb801 View commit details
    Browse the repository at this point in the history

  13. added another test

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    3cee00e View commit details
    Browse the repository at this point in the history

  14. utilize @psalm-taint-escape sql

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    cc4e6df View commit details
    Browse the repository at this point in the history

  15. Revert "utilize @psalm-taint-escape sql" 

    This reverts commit 88da3f6.
    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    a16ca3f View commit details
    Browse the repository at this point in the history

  16. fix

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    381fffa View commit details
    Browse the repository at this point in the history

  17. Update RexSqlInjectionRule.php

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    8312e65 View commit details
    Browse the repository at this point in the history

  18. better method name

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    33c09fa View commit details
    Browse the repository at this point in the history

  19. added hint to the expression in question

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    eb86eb6 View commit details
    Browse the repository at this point in the history

  20. ignore queries from property-fetches

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    5f80a39 View commit details
    Browse the repository at this point in the history

  21. more precise error in deep-concat cases

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    6706ac9 View commit details
    Browse the repository at this point in the history

  22. better tip

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    d5e4e10 View commit details
    Browse the repository at this point in the history

  23. cs

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    7aa26a4 View commit details
    Browse the repository at this point in the history

  24. Update expected.out

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    edd4805 View commit details
    Browse the repository at this point in the history

  25. cover more rex_sql apis

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    fb905a6 View commit details
    Browse the repository at this point in the history

  26. Update RexSqlInjectionRule.php

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    09d6e94 View commit details
    Browse the repository at this point in the history

  27. more tests

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    a02f231 View commit details
    Browse the repository at this point in the history

  28. fix handling of encapsed values

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    c17aff8 View commit details
    Browse the repository at this point in the history

  29. re-organize tests

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    7f38abe View commit details
    Browse the repository at this point in the history

  30. support safe-implode() concat

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    ec8f80d View commit details
    Browse the repository at this point in the history

  31. cs

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    411d9b2 View commit details
    Browse the repository at this point in the history

  32. escapelikewildcards requires an additional escape

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    a35d609 View commit details
    Browse the repository at this point in the history

  33. better tip

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    0694f86 View commit details
    Browse the repository at this point in the history

  34. Update RexSqlInjectionRule.php

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    e5fb9ae View commit details
    Browse the repository at this point in the history

  35. fix

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    a268fc4 View commit details
    Browse the repository at this point in the history

  36. docs

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    abbc211 View commit details
    Browse the repository at this point in the history

  37. Update RexSqlInjectionRule.php

    @staabm
    staabm committed Oct 6, 2022
    Configuration menu
    Copy the full SHA
    48ae696 View commit details
    Browse the repository at this point in the history