diff --git a/tamper/unstripkeywords.py b/tamper/unstripkeywords.py index 394a4fe96..426992241 100644 --- a/tamper/unstripkeywords.py +++ b/tamper/unstripkeywords.py @@ -21,6 +21,9 @@ def tamper(payload, **kwargs): """ Transforms keywords ('SELECT') so they are valid when stripped once ('SELSELECTECT') + Keywords can be set with 'UNSTRIP_KEYWORDS' environment variable: + $ export UNSTRIP_KEYWORDS=select,union + Tested against: * MySQL 5.7