validatefilter.test.1.sas File Reference

testing validatefilter service - input validation (security) More...

Go to the source code of this file.

Detailed Description

The filter_table in the IWANT input table must be a well-formed LIBREF.DATASET. An invalid value aborts the service before it reaches mp_filterstore. The abort shows up as a canceled child job (an aborted service registers no webout).

The payload in test 1 resolves to a REAL table when the request content is executed as macro code, so on a vulnerable service the job completes, and only the validating service cancels it - the assertion cannot pass against a service that does not validate.

SAS Macros

• mp_assert.sas
• mx_execute.sas
• mf_getuniquefileref.sas

Definition in file validatefilter.test.1.sas.