From d9d0c971faafdd8256e10d510786ac9322bfa04b Mon Sep 17 00:00:00 2001
From: Miroslav Stampar <miroslav.stampar@gmail.com>
Date: Wed, 6 Oct 2010 14:37:14 +0000
Subject: [PATCH] new file

---
 xml/injection.xml | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 xml/injection.xml

diff --git a/xml/injection.xml b/xml/injection.xml
new file mode 100644
index 000000000..0a5f19329
--- /dev/null
+++ b/xml/injection.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<root>
+    <case tag="custom" desc="custom">
+        <positive format="%s%s%s AND %s%d=%d %s" params="value, prefix, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randInt, randInt, postfix"/>
+        <negative format="%s%s%s AND %s%d=%d %s" params="value, prefix, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randInt, randInt + 1, postfix"/>
+    </case>
+    <case tag="numeric" desc="unescaped numeric">
+        <positive format="%s%s AND %s%d=%d" params="value, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randInt, randInt"/>
+        <negative format="%s%s AND %s%d=%d" params="value, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randInt, randInt + 1"/>
+    </case>
+    <case tag="stringsingle" desc="single quoted string">
+        <positive format="%s'%s AND %s'%s'='%s" params="value, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randStr, randStr"/>
+        <negative format="%s'%s AND %s'%s'='%s" params="value, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randStr, randStr + randomStr(1)"/>
+    </case>
+    <case tag="likesingle" desc="LIKE single quoted string">
+        <positive format="%s'%s AND %s'%s' LIKE '%s" params="value, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randStr, randStr"/>
+        <negative format="" params=""/>
+    </case>
+    <case tag="custom" desc="custom">
+        <positive format="" params=""/>
+        <negative format="" params=""/>
+    </case>
+    <case tag="custom" desc="custom">
+        <positive format="" params=""/>
+        <negative format="" params=""/>
+    </case>
+
+</root>