ITWire

{JS-ON: Security-OFF}: Abusing JSON-based SQL to bypass WAF

GUEST RESEARCH: Web application firewalls (WAF) are designed to safeguard web-based applications and APIs from malicious external HTTPs traffic, most notably cross-site scripting and SQL injection ...