| skipped 1108 lines |
1109 | 1109 | | is_json = conf.is_json |
1110 | 1110 | | is_multipart = conf.is_multipart |
1111 | 1111 | | safe = ( |
1112 | | - | "/=*()&?%;,+\"'" |
| 1112 | + | "/=*()[]&?%;,+\"'" |
1113 | 1113 | | if conf.backend == "Microsoft SQL Server" and injection_type == "POST" |
1114 | | - | else "/=*?&:;,+" |
| 1114 | + | else "[]/=*?&:;,+" |
1115 | 1115 | | ) |
1116 | 1116 | | if not is_json and not key == "#1*": |
1117 | 1117 | | text = urlencode( |
| skipped 921 lines |