client9 / libinjection

SQL / SQLI tokenizer parser analyzer
Other
1k stars 274 forks source link

handling ASP %encoding problems #48

Open client9 opened 11 years ago

client9 commented 11 years ago

ASP removes the "%" from query arguments when it's not a url escape sequence.

i.e.

u%nion --> union

Not clear what the right layer is here (or should handle this).