IME: Briony submits her first bit of writing, while still a nurse, to Horizon magazine and Cyril Connolly very untypically writes a five-page rejection letter.
The essential point is the existence of differences between execution pages and rejection pages, and, more precisely, between welcome messages and invalid input error messages, and between PHP and SQL error messages.
The entry point of our algorithm is a set of initial requests that have a common property: it is easy to classify the associated responses (either as execution page or rejection page).
For example: The main issue is to determine whether the response is a rejection page or an execution page.
A server may respond with a rejection page or with an execution page.
Obviously, it is easier to generate requests which lead to rejection pages or execution pages corresponding to invalid input error messages than requests which lead to execution pages associated to welcome messages.
The principle of the approach consists in sending different crafted requests to the Web application and comparing the similarity of the corresponding responses using a textual distance, in order to identify rejection pages among the response pages (i.e., pages that highlight non-sanitized inputs).
They are very likely to generate rejection pages or execution pages associated to invalid input error messages.
Overall, the identification of potential vulnerabilities is generally based on the characterization of responses of a Web server to crafted requests sent via the injection points and the ability to distinguish rejection pages and execution pages.
Since the main assumption is based on the observation that the content of a rejection page is generally different from the content of an execution page, it is important to ensure a wide coverage of the different types of rejection pages that could be generated by the application.
When he opened his mail one morning a few days later, there was the manuscript again, and clipped to the first page was a rejection slip.
