use it only if page is stable

This commit is contained in:
Miroslav Stampar 2012-04-13 10:19:26 +00:00
parent 414c74b8aa
commit bbbcc95fe5

View File

@ -346,7 +346,7 @@ def checkSqlInjection(place, parameter, value):
injectable = True
if not injectable and not conf.string:
if not injectable and not conf.string and kb.pageStable:
trueSet = set(extractTextTagContent(truePage))
falseSet = set(extractTextTagContent(falsePage))
candidate = reduce(lambda x, y: x or (y.strip() if y.strip() in (kb.pageTemplate or "") and y.strip() not in falsePage else None), (trueSet - falseSet), None)