Add more test samples

DataDog · Aug 13, 2024 · 342a630 · 342a630
1 parent 9058c1f
commit 342a630
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/tests/condition/shi_detector_test.cpp b/tests/condition/shi_detector_test.cpp
@@ -68,6 +68,8 @@ TEST(TestSHIDetector, ExecutablesAndRedirections)
         {"ls 2> file; echo hello", "2> file"},
         {"ls &> file; echo hello", "&> file"},
         {"$(<file) -l", "$(<file) -l"},
+        {"ls injection ls; injection ls", "injection ls"},
+        {"ls $(<file) -l ; $(<file) -l", "$(<file) -l"},
     };
 
     for (const auto &[resource, param] : samples) {

diff --git a/tests/condition/sqli_detector_test.cpp b/tests/condition/sqli_detector_test.cpp
@@ -233,6 +233,13 @@ TEST_P(DialectTestFixture, Tautologies)
             "SELECT x FROM t WHERE id = ? or (?) = (?)", "(1) = ('1')"},
         {R"(SELECT * FROM ships WHERE name LIKE '%neb%' OR 1=1)",
             R"(SELECT * FROM ships WHERE name LIKE ? OR ?=?)", R"(neb%' OR 1=1)"},
+        {
+            R"(-- 'something' OR 1=1; --
+            SELECT * FROM table WHERE id='' OR 1=1; --)",
+            R"(-- 'something' OR 1=1; --
+            SELECT * FROM table WHERE id=? OR ?=?; --)",
+            "' OR 1=1; --",
+        },
     };
 
     for (const auto &[statement, obfuscated, input] : samples) {