Skip to content

Commit d493aeb

Browse files
committed
Restrict backslash escape test to MySQL dialect
Backslash escapes are MySQL-specific, so the unterminated string caused by a trailing backslash only fails tokenization in MySQL.
1 parent cd9547e commit d493aeb

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

aikido_zen/vulnerabilities/sql_injection/init_test.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -388,7 +388,7 @@ def test_lowercased_input_sql_injection():
388388

389389
def test_block_invalid_sql_queries():
390390
# These are invalid queries (e.g. unterminated strings) that fail tokenization
391-
is_sql_injection("SELECT * FROM users WHERE id = 'users\\'", "users\\")
391+
is_sql_injection("SELECT * FROM users WHERE id = 'users\\'", "users\\", "mysql")
392392
is_sql_injection(
393393
"SELECT * FROM comments WHERE comment = 'I'm writting you'", "I'm writting you"
394394
)

0 commit comments

Comments
 (0)