Stanisław Pitucha viraptor

Vulnerability

mysql-binuuid-rails is vulnerable to SQL injection: Model.where(uuid: "ff' OR ''='") turns into:

SELECT  `model`.* FROM `model` WHERE `model`.`uuid` = x'ff' OR ''='' LIMIT 11

I hereby claim:

I am viraptor on github.
I am viraptor (https://keybase.io/viraptor) on keybase.
I have a public key whose fingerprint is C28C 27BE 0EBC 1D23 34CA 28DB 6A5C 9227 4A99 6B04

To claim this, I am signing this object:

	BEGIN {
	st_waitnewconn = 0
	st_headers = 1
	st_body = 2

	size_threshold = 4000
	}

	function count_headers(headers_string, dir) {
	split(headers_string, headers, "\n")

	#!/usr/bin/env python3

	import sys
	from collections import defaultdict
	import hashlib

	def calc_hash(line, num):
	m = hashlib.sha256()
	m.update(line.encode('ascii'))
	m.update(b",")

	...
	if asbool(static_files):
	# Serve static files
	static_app = StaticURLParser(config['pylons.paths']['static_files'])
	app = Cascade([static_app, app])

	app = CloseConnection(app)
	return app

	class CloseConnection: