No point in unescaping the expression also in suffixQuery() also 'cause it will exit sqlmap if the parameter value is a string hence injection payload starts with single quote (')

This commit is contained in:
Bernardo Damele 2011-02-06 23:30:43 +00:00
parent 061f56daf9
commit bf5ca4bd9a

View File

@ -181,7 +181,6 @@ class Agent:
return self.payloadDirect(expression)
expression = self.cleanupPayload(expression)
expression = unescaper.unescape(expression)
if comment is not None:
expression += comment