mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-06 12:41:30 +00:00
revisit of Oracle error-based payloads (added replace for '@' as a problematic char for XMLType function)
This commit is contained in:
@@ -185,7 +185,7 @@ def __errorReplaceChars(value):
|
||||
retVal = value
|
||||
|
||||
if value:
|
||||
retVal = retVal.replace(kb.misc.space, " ").replace(kb.misc.dollar, "$")
|
||||
retVal = retVal.replace(kb.misc.space, " ").replace(kb.misc.dollar, "$").replace(kb.misc.at, "@")
|
||||
|
||||
return retVal
|
||||
|
||||
|
||||
Reference in New Issue
Block a user