mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-06 12:41:30 +00:00
added BULK to EXCLUDE_UNESCAPE and preventing crashes when output=[]
This commit is contained in:
@@ -251,4 +251,4 @@ URI_INJECTION_MARK_CHAR = '*'
|
||||
MYSQL_ERROR_TRIM_LENGTH = 100
|
||||
|
||||
# Do not unescape the injected statement if it contains any of the following SQL words
|
||||
EXCLUDE_UNESCAPE = ("WAITFOR DELAY ", " INTO DUMPFILE ", " INTO OUTFILE ", "CREATE ")
|
||||
EXCLUDE_UNESCAPE = ("WAITFOR DELAY ", " INTO DUMPFILE ", " INTO OUTFILE ", "CREATE ", "BULK ")
|
||||
|
||||
Reference in New Issue
Block a user