3 ms·
You could have a SQL library that defaults to inserting "OR 1=1" to every update query, which the SQL standard allows. I would blame the library.
by robertlagrant 4mo ago
You could have a SQL library that defaults to inserting "OR 1=1" to every update query, which the SQL standard allows. I would blame the library.
- inigyou 4mo agoThe SQL library is meant to run the query you give it.
- robertlagrant 4mo agoBut then "meant to" is doing the heavy lifting here. You could (and should) say that a JWT library is meant to default to secure.