Skip to content

Commit 8ffabb0

Browse files
committed
Add unicode test cases
1 parent 1f5c362 commit 8ffabb0

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

aikido_zen/vulnerabilities/sql_injection/init_test.py

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -264,6 +264,17 @@ def test_user_input_is_multiline():
264264
is_not_sql_injection("SELECT * FROM users WHERE id = 'a\nb\nc';", "a\nb\nc")
265265

266266

267+
def test_user_input_contains_unsafe_unicode():
268+
is_sql_injection(
269+
"SELECT * FROM users WHERE id = 'a \udce9'\nOR 1=1#'",
270+
"a \udce9'\nOR 1=1#",
271+
"generic",
272+
)
273+
is_not_sql_injection(
274+
"SELECT * FROM users WHERE id = 'a\udce9\nb\nc';", "a\udce9\nb\nc"
275+
)
276+
277+
267278
def test_user_input_is_longer_than_query():
268279
is_not_sql_injection("SELECT * FROM users", "SELECT * FROM users WHERE id = 'a'")
269280

0 commit comments

Comments
 (0)