openstack
/
syntribos
Code Issues Proposed changes

Removing overlapping payload/failure key 

One of the payloads in the LDAP fuzz strings can trigger false
positives with the command injection test, due to an overlap between
the payload and the failure keys of the command injection test.

Tried introducing a unittest to prevent this, but utilizing payloads
files in unittests is too tricky at this point.

Change-Id: I8ea1782d008438876fbd77dbacfdffb2f3b70ae2
This commit is contained in:
Charles Neill 2016-08-31 17:14:38 -05:00
parent e9df59d322
commit faffc44a55
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
data/ldap.txt
View File

@ -23,4 +23,3 @@ x' or name()='username' or 'x'='y
*()|&'
admin*
admin*)((|userpassword=*)
*)(uid=*))(|(uid=*