diff --git a/lib/core/settings.py b/lib/core/settings.py index 677e06239..bea34fb41 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -251,4 +251,4 @@ URI_INJECTION_MARK_CHAR = '*' MYSQL_ERROR_TRIM_LENGTH = 100 # -EXCLUDE_UNESCAPE = ("WAITFOR DELAY ", " INTO DUMPFILE ") +EXCLUDE_UNESCAPE = ("WAITFOR DELAY ", " INTO DUMPFILE ", " INTO OUTFILE ")