4 ms·
I wonder if it's possible to just go byte by byte, and try to parse the statement as valid SQL? If you use the same parser, or a compatible parser, to the backe
by staticassertion 6y ago
I wonder if it's possible to just go byte by byte, and try to parse the statement as valid SQL? If you use the same parser, or a compatible parser, to the backend DB you'd at least catch any valid SQL statements?
- Bnshsysjab 6y agoWhat if the payload is ‘a,b’ which renders as Select a, b from foo;