mirror of
https://github.com/lunchcat/sif.git
synced 2026-07-28 14:37:01 -07:00
TigahandGitHub
9fce39cd32
checkDatabaseErrors matched db error regexes against each response with no baseline, so a site serving a shared error template, custom 500 or waf block page containing a db error string reported an identical high-severity sql injection finding on every probed path. capture the main-url response as a baseline and skip, per pattern, any error string already present in it while still checking other patterns, so only differential probe-caused errors are reported.