diff --git a/library/vulnerabilities/sql-injection/detectSQLInjection.test.ts b/library/vulnerabilities/sql-injection/detectSQLInjection.test.ts index 096336f25..4cd80f859 100644 --- a/library/vulnerabilities/sql-injection/detectSQLInjection.test.ts +++ b/library/vulnerabilities/sql-injection/detectSQLInjection.test.ts @@ -211,6 +211,13 @@ t.test("It does not flag key keyword as SQL injection", async () => { isNotSqlInjection(query, "UPDATE"); isNotSqlInjection(query, "INSERT"); isNotSqlInjection(query, "INTO"); + isNotSqlInjection( + ` + SELECT * FROM users u + WHERE u.status NOT IN ('active', 'pending') + `, + "not in" + ); }); t.test("It flags function calls as SQL injections", async () => { diff --git a/scripts/build.js b/scripts/build.js index e044d2629..1540d725a 100644 --- a/scripts/build.js +++ b/scripts/build.js @@ -23,7 +23,7 @@ async function execAsyncWithPipe(command, options) { } // Zen Internals configuration -const INTERNALS_VERSION = "v0.1.50"; +const INTERNALS_VERSION = "v0.1.55"; const INTERNALS_URL = `https://github.com/AikidoSec/zen-internals/releases/download/${INTERNALS_VERSION}`; // ---