Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 207f63c

Browse files
committed
Prepare for UNION query tests at detection phase
1 parent d56f47d commit 207f63c

1 file changed

Lines changed: 39 additions & 5 deletions

File tree

xml/payloads.xml

Lines changed: 39 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1213,11 +1213,6 @@ Formats:
12131213
<!-- End of error-based tests - GROUP BY and ORDER BY clauses -->
12141214

12151215

1216-
<!-- UNION query tests -->
1217-
<!-- TODO: Think about proper structure for this -->
1218-
<!-- End of UNION query tests -->
1219-
1220-
12211216
<!-- Stacked queries tests -->
12221217
<test>
12231218
<title>MySQL &gt; 5.0.11 stacked queries</title>
@@ -1785,4 +1780,43 @@ Formats:
17851780
<!-- TODO: if possible, add payload for Microsoft Access and SAP MaxDB -->
17861781
<!-- End of OR time-based blind tests -->
17871782

1783+
<!-- UNION query tests -->
1784+
<!-- TODO: sure about all these clauses? Verify on every DBMS -->
1785+
<!--
1786+
<test>
1787+
<title>UNION query</title>
1788+
<stype>3</stype>
1789+
<level>1</level>
1790+
<risk>1</risk>
1791+
<clause>1,2,3,4,5</clause>
1792+
<where>1</where>
1793+
<vector>UNION ALL SELECT [UNION_STRING]</vector>
1794+
<request>
1795+
<payload>UNION ALL SELECT [UNION_TEST]</payload>
1796+
<comment></comment>
1797+
</request>
1798+
<response>
1799+
<grep>[DELIMITER_START](?P&lt;result&gt;.*?)[DELIMITER_STOP]</grep>
1800+
</response>
1801+
</test>
1802+
1803+
<test>
1804+
<title>Single-entry UNION query</title>
1805+
<stype>3</stype>
1806+
<level>1</level>
1807+
<risk>1</risk>
1808+
<clause>1,2,3,4,5</clause>
1809+
<where>2</where>
1810+
<vector>UNION ALL SELECT [UNION_STRING]</vector>
1811+
<request>
1812+
<payload>UNION ALL SELECT [UNION_TEST]</payload>
1813+
<comment></comment>
1814+
</request>
1815+
<response>
1816+
<grep>[DELIMITER_START](?P&lt;result&gt;.*?)[DELIMITER_STOP]</grep>
1817+
</response>
1818+
</test>
1819+
-->
1820+
<!-- End of UNION query tests -->
1821+
17881822
</root>

0 commit comments

Comments
 (0)