Skip to content
This repository was archived by the owner on Nov 28, 2023. It is now read-only.
This repository was archived by the owner on Nov 28, 2023. It is now read-only.

拼接SQL注入规则误报 #1412

@cyw3

Description

@cyw3

System and Python Environment

Item Tooltip Value
System uname -a
Python python -V
Cobra python cobra.py v2.0.0-alpha.5

Description

[Description of the bug or feature]

以下代码只是字符串之间的拼接换行,但是被识别为拼接SQL注入:

String sql = "select count(0) from test where id=? and "+
                     "account=?";

Steps to Reproduce

  1. [First Step]
  2. [Second Step]
  3. [and so on...]

Expected behavior: [What you expected to happen]

Actual behavior: [What actually happened]

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions