The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Creative Commons Attribution Share Alike 4.0 International
7.1k
stars
1.31k
forks
source link
Add a note about the danger of tautologies #1028
Closed
kingthorin closed 1 year ago
What's the issue? SQLi tautologies can lead to undesired outcomes when testing, testers should be very careful how/where they're used.
How do we solve it? Add a note/warning to SQLi section(s) about the danger of
or 1=1
type tautologies.Background
https://twitter.com/0xTib3rius/status/1623734218302930946
https://twitter.com/garethheyes/status/1626572052139220993
https://github.com/search?q=repo%3AOWASP%2Fwstg%20%22or%201%3D1%22&type=code