Suika

Results 11 issues of Suika

Almost any kind of injection, when surrounded by square brackets, can bypass the check. For example: ``` 1337 INTO OUTFILE ‘xxx’-- vs [1337 INTO OUTFILE ‘xxx’--] ``` makes its fingerprint...

```csv 2021/08/31 11:00:21 [error] 124259#0: *1 lua entry thread aborted: runtime error: /usr/local/restywaf/site/lualib/resty/waf.lua:258: attempt to call a nil value stack traceback: coroutine 0: /usr/local/restywaf/site/lualib/resty/waf.lua: in function '_process_rule' /usr/local/restywaf/site/lualib/resty/waf.lua:481: in function...

It causes problem in strict enviroment. Use it with openResty this would causes lot's of warning message; and in some custom enviroment it's impossible to write into `_G`.

As document says, we are not allowed to use any `ngx_lua` feature in `run_worker_thread` calls. I guess it's because thread has no request context to do those calls, but is...

Many (if not all) mainstream web servers, Apache(`mod_upload`) and Nginx(`upload module`) for instance are compatible to request use LF as line break: > https://github.com/Austinb/nginx-upload-module/blob/2.2/ngx_http_upload_module.c#L4123 > https://github.com/Austinb/nginx-upload-module/blob/2.2/ngx_http_upload_module.c#L4051 > http://apache.webthing.com/mod_upload/mod_upload.c L304 Would...

I found this essential for allowing space in words. I'm writting an CLI app which split word in a shell-like style, but word skipping only provide us with buildin options...

enhancement

It would be helpful for different components of helper, e.g. , completer and hinter, to share some information. Completer and hinter may both take item from a candidate list. Furthermore,...

enhancement

```rust impl src\main.rs:81:1 | 81 | impl Completer for T { | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ | = note: conflicting implementation in crate `rustyline`: - impl

help wanted

教程缺少点结构,没有多少信息帮助读者决定从哪里开始看。 很多读者有不同的知识背景。已经了解一些知识的人,比如之前用过 lua/用过 nginx,一些章节可能是可以跳过不看的;纯小白则完全不知道每个背景知识的章节和整体脉络的关系。