@@ -21,7 +21,7 @@ strnc(at|py)[[:space:]]*\([^,]+,[^,]+,[[:space:]]*strlen[[:space:]]*\([^\)]+\)[[
2121[\'\" ]+AND[[:space:]]+.*=.*\+[[:space:]]*[Rr]equest\..*
2222(LIKE|like)[[:space:]]+[^\;]+\+[[:space:]]*[Rr]equest\..*
2323(ORDER[[:space:]]+BY|order[[:space:]]+by)[[:space:]]+.*\+[[:space:]]*[Rr]equest
24- (LIMIT|limit)[[:space:]]+.*\+ [[:space:]]*[Rr]equest\..*
24+ (LIMIT|limit)[[:space:]]+([0-9]+, [[:space:]]*[Rr]equest\..*|[Rr]request\..*)
2525Process.Start[[:space:]]*\(.*\+
2626\.Arguments[[:space:]]*=(.*[\'\"][[:space:]]*\+[[:space:]]*[^\'\"]+|.*[^\'\"]+[[:space:]]*\+[[:space:]]*[\'\"])
2727\.SelectNodes[[:space:]]*\(.*[\'\"][[:space:]]*\+[[:space:]]*[^\'\"]+
@@ -40,16 +40,16 @@ ReadAllBytes[[:space:]]*\(.*[Rr]equest
4040response.sendRedirect[[:space:]]*\(.*([Rr]eq(uest)?|\.[Gg]et[Pp]aram).*\)
4141out\.print(ln)?.*([Rr]eq(uest)?|\.[Gg]et[Pp]aram)
4242<%=([Rr]equest|\.[Gg]et[Pp]aram)
43- \.exec[[:space:]]*\([^\;]+[\'\"][[:space:]]*\+.*
43+ \.exec[[:space:]]*\([^\)\ ;]+[\'\"][[:space:]]*\+.*
4444(execute|create|new)Query[[:space:]]*\(.*[\"\'][[:space:]]*\+[[:space:]]*[^\"\']+
4545queryforObject[[:space:]]*\(.*[\"\'][[:space:]]*\+[[:space:]]*[^\"\']+
46- eval[[:space:]]*\(. *([Rr]eq(uest)?|\.[Gg]et[Pp]aram).*\)
47- \.getDocument[[:space:]]*\(.* ([Rr]eq(uest)?|\.g[Gg]et[Pp]aram).*\)
46+ eval[[:space:]]*\([^\)\;] *([Rr]eq(uest)?|\.[Gg]et[Pp]aram).*\)
47+ \.getDocument[[:space:]]*\([^\)\;]+ ([Rr]eq(uest)?|\.g[Gg]et[Pp]aram).*\)
4848(WHERE|where)[[:space:]]+.*=[[:space:]]*[\'\"][\'\"]?[[:space:]]*\+[[:space:]]*[^\"\']+
4949[\'\" ]+AND[[:space:]]+.*=[[:space:]]*[\'\"][\'\"]?[[:space:]]*\+[[:space:]]*[^\"\']
50- (LIKE|like)[[:space:]]+.* [\'\"][\'\"]?[[:space:]]*\+[[:space:]]*[^\"\']
50+ (LIKE|like)[[:space:]]+[\'\"A-Za-z0-9%]+ [\'\"][\'\"]?[[:space:]]*\+[[:space:]]*[^\"\']
5151(ORDER[[:space:]]+BY|order[[:space:]]+by)[[:space:]]+.*[\'\"][\'\"]?[[:space:]]*\+[[:space:]]*[^\"\']
52- (LIMIT|limit)[[:space:]]+. *[\'\"][\'\"]?[[:space:]]*\+[[:space:]]*[^\"\']
52+ (LIMIT|limit)[[:space:]]+([0-9,]+)?[;:space:]] *[\'\"][\'\"]?[[:space:]]*\+[[:space:]]*[^\"\']
5353\.query\(.*[\'\"][[:space:]]*\+.*
5454eval[[:space:]]*\([^\)\;]+[\'\"][[:space:]]*\+[[:space:]]*[^\'\"]+
5555<%-[[:space:]]+.*%>
0 commit comments