Naughty Strings: A list of strings likely to cause issues as user-input data

Re:Naughty Strings: A list of strings likely to cause issues... by thomasahle on Sunday January 15, 2017 @03:54PM (#13406350)

This is a fun issue https://github.com/minimaxir/big-list-of-naughty-strings/iss...

[ Parent | on HN ]

Re:Naughty Strings: A list of strings likely to cause issues... by remolueoend on Sunday January 15, 2017 @05:24PM (#13406730)

a painted masterpiece on a bikeshed.

[ Parent | on HN ]

Re:Naughty Strings: A list of strings likely to cause issues... by vanderZwan on Tuesday January 17, 2017 @07:38AM (#13416934)

I dunno, I think this is a pretty good argument actually:

> I agree that another SQL injection should be included - not because the vulnerabilities exposed by this file should be tempered (as that would only be to assist a dangerous confusion of responsible practices), but because "DROP TABLES" is such a cliche in infosec that it's prone to be caught by extremely crude filters, naive to the degree that it's the only class of SQL injection they know to avoid.

[ Parent | on HN ]