Show HN: Big List of Naughty Strings for testing user-input data
1–10 of 80 posts
Re: Show HN: Big List of Naughty Strings for testing user-input data
#2Looks interesting, but the Script Injection, SQL Injection and Server Code Injection sections need a lot more samples to be remotely useful.
Re: Show HN: Big List of Naughty Strings for testing user-input data
#3Looks interesting, but the Script Injection, SQL Injection and Server Code Injection sections need a lot more samples to be remotely useful.
I definitely agree; hence the open-sourceness. :)
I only added what was off the top of my head for those sections; this list will consistently be updated.
Re: Show HN: Big List of Naughty Strings for testing user-input data
#4Looks interesting, but the Script Injection, SQL Injection and Server Code Injection sections need a lot more samples to be remotely useful.
I definitely agree; hence the open-sourceness. :) I only added what was off the top of my head for those sections; this list will consistently be updated.
Wouldn't it make more sense to define building blocks and automatically generate all sensible combinations? Otherwise I don't think this list can be managed by hand, especially not in a volunteer project.
Re: Show HN: Big List of Naughty Strings for testing user-input data
#5If I put this into my company's tests, we'd end up with no users... I have a lot of work ahead of me. :/
Re: Show HN: Big List of Naughty Strings for testing user-input data
#6Yeah, I would make the SQL injection and command injections test a little less kinetic =). Using a simple SELECT test, like SELECT @@VERSION, would be a little safer... Edit: Forget to say thanks! This is a pretty cool list.
Re: Show HN: Big List of Naughty Strings for testing user-input data
#7Nice; sort of a programming complement to Shutterstock's _List of Dirty, Naughty, Obscene, and Otherwise Bad Words_[0]. So helpful to have a bunch of minds working on useful lists like this. Good to see that GitHub passes this test!
[0] https://github.com/shutterstock/List-of-Dirty-Naughty-Obscen...
Re: Show HN: Big List of Naughty Strings for testing user-input data
#8Nice; sort of a programming complement to Shutterstock's _List of Dirty, Naughty, Obscene, and Otherwise Bad Words_[0]. So helpful to have a bunch of minds working on useful lists like this. Good to see that GitHub passes this test! [0] https://github.com/shutterstock/List-of-Dirty-Naughty-Obscen...
I doubt the value of this repository. The first naughty French word "allumé" can't be considered naughty, dirty, or bad, like, at all. And many others are not naughty under too many circumstances...
Except very few swear words, word filtering is pretty much useless.
Re: Show HN: Big List of Naughty Strings for testing user-input data
#9Is the scope just well-formed strings or would you consider adding binary nasties like null bytes, mal-encoded characters, or even just newlines on their own?
What about XML billion laughs strings, or parser-busting very long runs of parentheses?
Re: Show HN: Big List of Naughty Strings for testing user-input data
#10Is the scope just well-formed strings or would you consider adding binary nasties like null bytes, mal-encoded characters, or even just newlines on their own? What about XML billion laughs strings, or parser-busting very long runs of parentheses?
I've definitely seen NUL bytes in what's supposed to be a text string break many tools.