mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-21 20:18:06 +02:00
8 lines
309 B
Text
8 lines
309 B
Text
|
|
// Phase 10 — SqlStub benign control.
|
||
|
|
//
|
||
|
|
// Same harness shape as `vuln.txt` but the recorded query does NOT
|
||
|
|
// contain the tautology. Oracle: `Oracle::StubEvent { kind:
|
||
|
|
// StubKind::Sql, needle: "OR 1=1" }` does *not* fire so the
|
||
|
|
// verdict stays `NotConfirmed`.
|
||
|
|
SELECT * FROM users WHERE name = 'alice';
|