Timeline for Is single quote filtering nonsense?
Current License: CC BY-SA 4.0
21 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 31, 2023 at 4:14 | comment | added | AaronLS | Kind of like when our narrative fields could never have the word "update" followed at any point by the word "where", otherwise the security software would cause the request to timeout and we'd spend weeks troubleshooting trying to figure out why a small fraction of requests were failing for specific users before I discovered the pattern. Preventing SQL injection is not something that's done in half measures. This smells of someone running security scanners without understanding the fundamentals of SQL injection attacks. | |
| Feb 14, 2019 at 9:02 | comment | added | Storm Muller | I agree with your logic. I would have them try to execute a sql injection attack on a UAT/QA environment. Also they need to understand that user input is not dangerous, it's how it's processed that makes it potentially dangerous. | |
| Feb 14, 2019 at 8:56 | comment | added | Storm Muller | I would be concerned if your pent testers think that preventing the user from submitting an apostrophe will somehow prevent sql injection attacks... | |
| Feb 12, 2019 at 14:05 | answer | added | ANone | timeline score: 1 | |
| S Feb 9, 2019 at 11:39 | history | mod moved comments to chat | |||
| S Feb 9, 2019 at 11:39 | comment | added | Rory Alsop♦ | Comments are not for extended discussion; this conversation has been moved to chat. | |
| Feb 8, 2019 at 23:44 | answer | added | Schwern | timeline score: 15 | |
| Feb 5, 2019 at 10:14 | answer | added | Jason Leaman | timeline score: 5 | |
| Feb 5, 2019 at 9:38 | answer | added | Christoph Burschka | timeline score: 30 | |
| Feb 5, 2019 at 3:22 | answer | added | Dewi Morgan | timeline score: -7 | |
| Feb 4, 2019 at 22:51 | answer | added | Joshua | timeline score: 19 | |
| Feb 4, 2019 at 15:50 | history | edited | Anders | CC BY-SA 4.0 |
deleted 15 characters in body; edited title
|
| Feb 4, 2019 at 15:27 | answer | added | MrNiceGuy | timeline score: 1 | |
| Feb 4, 2019 at 15:20 | answer | added | Erik A | timeline score: 9 | |
| Feb 4, 2019 at 15:00 | history | tweeted | twitter.com/StackSecurity/status/1092437768654016512 | ||
| Feb 4, 2019 at 13:59 | vote | accept | Peter Walser | ||
| Feb 4, 2019 at 13:41 | answer | added | DarkMatter | timeline score: 13 | |
| Feb 4, 2019 at 13:38 | answer | added | user81469 | timeline score: 8 | |
| Feb 4, 2019 at 13:38 | answer | added | Sjoerd | timeline score: 322 | |
| Feb 4, 2019 at 13:38 | answer | added | Tobi Nary | timeline score: 6 | |
| Feb 4, 2019 at 13:28 | history | asked | Peter Walser | CC BY-SA 4.0 |