Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func IsSQLi ¶
IsSQLi returns true if the input is SQLi. It also returns the fingerprint of the SQL injection as a string.
func IsXSS ¶
IsXSS returns true if the input string contains XSS.
Five HTML5 parse contexts are tried. The DataState context requires '<' to produce any tag tokens, so it is skipped when '<' is absent — saving one full state-machine pass for the common case of clean input. The four attribute-value contexts can detect injection without '<' (e.g. onerror=...) and always run.
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.