sqli: false positive

[syinwu]

[fzipi]

@syinwu Do you have an idea how to fix this one? Can you push a test case so we can start figuring out the fix?

[k4n5ha0]

input := "6--GI3o7s-PK0PTgKT9SQux8HSpwcmcjYBhvktBJ_ww="

so deny.fix it ,is very hard

[fzipi]

Sorry, I might not have understood this last comment. So you are saying "this is very hard to solve"? And the test case is your input above?

[k4n5ha0]

Sorry, I might not have understood this last comment. So you are saying "this is very hard to solve"? And the test case is your input above?

yes，it's hard to fix.because -- maybe userinput or hackinput.
like value "6--GI3o7s-PK0PTgKT9SQux8HSpwcmcjYBhvktBJ_ww=" is a systemcode not attack.