{"test":"sql-injection","description":"此端点用于测试 ESA WAF 的 SQL 注入检测能力。尝试传入 SQL payload 如：?q=1 OR 1=1 --","receivedQuery":"test","examplePayloads":["?q=1' OR '1'='1","?q=1; DROP TABLE users --","?q=' UNION SELECT * FROM passwords --","?q=1' AND SLEEP(5) --","?q='; EXEC xp_cmdshell('dir') --"],"note":"源站不会执行任何 SQL，仅回显输入。ESA WAF 应在边缘拦截这些请求","timestamp":"2026-07-22T10:22:43.378Z"}