diff --git a/.relay.laantungir.net.keys b/.relay.laantungir.net.keys
new file mode 100644
index 0000000..457824b
--- /dev/null
+++ b/.relay.laantungir.net.keys
@@ -0,0 +1,2 @@
+ADMIN_PUBKEY='6a04ab98d9e4774ad806e302dddeb63bea16b5cb5f223ee77478e861bb583eb3'
+SERVER_PRIVKEY='1111111111111111111111111111111111111111111111111111111111111111'
diff --git a/=4 b/=4
deleted file mode 100644
index e69de29..0000000
diff --git a/plans/relay_admin_migration_plan.md b/plans/relay_admin_migration_plan.md
new file mode 100644
index 0000000..3568508
--- /dev/null
+++ b/plans/relay_admin_migration_plan.md
@@ -0,0 +1,297 @@
+# Relay Admin Page Migration Plan
+
+## Goal
+
+Migrate the relay admin functionality from the internally-served `api/index.html` + `api/index.js` (served by the C relay binary) to an externally-hosted `relay-admin.html` page in the `client-ndk` project. This page uses the NDK SharedWorker architecture (template.html pattern) and communicates with the relay via kind 23456/23457/24567 Nostr events.
+
+## Current State
+
+### Working Reference: [`c-relay-pg.html`](/home/user/lt/client-ndk/www/c-relay-pg.html)
+- Successfully receives kind 24567 monitoring events
+- Has `SUBSCRIPTION_ONLY_MODE = true` — admin UI actions are disabled
+- Contains all admin section HTML (Statistics, Subscriptions, Configuration, Authorization, IP Bans, Relay Events, DM, Database Query)
+- Has sidenav with admin page links
+- Has `sendAdminCommand()`, `encryptForRelay()`, `decryptFromRelay()`, `fetchRelayInfo()` functions
+- Has `handleMonitoringEvent()` and `handleAdminResponse()` event handlers
+
+### Target File: [`relay-admin.html`](/home/user/lt/client-ndk/www/relay-admin.html)
+- Currently an exact copy of `template.html`
+- Has full template infrastructure: hamburger menu, sidenav, footer, auth system, relay-ui, blossom-ui, ai-ui
+- Has the newer `injectHeaderLoginButton` import (slightly newer than c-relay-pg.html)
+- Empty `divBody` — ready for admin content
+
+### Legacy Internal Pages: [`api/index.html`](api/index.html) + [`api/index.js`](api/index.js)
+- 6,779 lines of JavaScript — the full admin UI
+- Uses `nostr-tools SimplePool` directly (not NDK)
+- Uses `NOSTR_LOGIN_LITE` for auth (not NDK SharedWorker)
+- Has rich UI: config tables with inline editing, IP ban management with filters, SQL query console with history, WoT management, relay event forms
+- All admin commands go through `sendAdminCommand()` → kind 23456 with NIP-44 encryption
+- Responses come back as kind 23457 events, decrypted and routed to handlers
+
+## Architecture Comparison
+
+```mermaid
+graph TD
+    subgraph Legacy - api/index.html
+        A1[NOSTR_LOGIN_LITE auth] --> A2[SimplePool direct WS]
+        A2 --> A3[Kind 23456 admin commands]
+        A2 --> A4[Kind 24567 monitoring sub]
+        A3 --> A5[Kind 23457 responses]
+    end
+
+    subgraph New - relay-admin.html
+        B1[NDK SharedWorker auth] --> B2[NDK subscribe/publishEvent]
+        B2 --> B3[Kind 23456 admin commands]
+        B2 --> B4[Kind 24567 monitoring sub]
+        B3 --> B5[Kind 23457 responses]
+    end
+```
+
+### Key Difference: NDK vs SimplePool
+
+| Aspect | Legacy api/index.js | New relay-admin.html |
+|--------|-------------------|---------------------|
+| Auth | `NOSTR_LOGIN_LITE` direct | `initNDKPage()` via SharedWorker |
+| Subscriptions | `SimplePool.subscribeMany()` | `subscribe()` from init-ndk.mjs |
+| Publishing | `SimplePool.publish()` + manual signing | `publishEvent()` — auto-signed by worker |
+| Encryption | `window.nostr.nip44.encrypt/decrypt` | Same — `window.nostr.nip44.encrypt/decrypt` |
+| Event listening | SimplePool callbacks | `window.addEventListener('ndkEvent', ...)` |
+| Relay URL | Auto-derived from page URL | Configurable constant `ADMIN_RELAY_WS_URL` |
+
+## Migration Strategy
+
+The approach is to merge the admin functionality from `c-relay-pg.html` into `relay-admin.html`, removing the `SUBSCRIPTION_ONLY_MODE` restriction and enabling full admin UI. We use the NDK `publishEvent()` and `subscribe()` APIs instead of SimplePool.
+
+### What stays from template (relay-admin.html already has)
+- Full hamburger menu + sidenav infrastructure
+- Footer with relay status animations
+- Auth system with required/optional/none modes
+- Relay-ui, blossom-ui, ai-ui sidenav sections
+- Theme toggle, logout, version display
+
+### What gets added from c-relay-pg.html
+- Admin nav items in sidenav
+- Admin section HTML panels in divBody
+- Admin-specific CSS styles
+- Relay pubkey fetch via NIP-11
+- NIP-44 encrypt/decrypt helpers
+- `sendAdminCommand()` for kind 23456
+- Kind 24567 monitoring subscription
+- Kind 23457 response handling with per-section routing
+- All admin UI button handlers
+- Boot diagnostics panel
+- System info panel
+
+## Detailed Implementation Steps
+
+### Step 1: Add Admin Nav Links to Sidenav
+
+The admin links go directly inside `divSideNavBody` as simple styled items — **not** inside a collapsible `.sidenavSection` container. They should be always-visible, non-collapsible links that match the font/styling of the sidenav sections but remain in the open body area. Place them before `divFiles`:
+
+```html
+<div id="divSideNavBody">
+  <!-- Admin nav links - always visible, not collapsible -->
+  <div id="divAdminNav">
+    <div class="adminNavItem active" data-section="statistics">Statistics</div>
+    <div class="adminNavItem" data-section="subscriptions">Subscriptions</div>
+    <div class="adminNavItem" data-section="configuration">Configuration</div>
+    <div class="adminNavItem" data-section="authorization">Authorization</div>
+    <div class="adminNavItem" data-section="ip-bans">IP Bans</div>
+    <div class="adminNavItem" data-section="relay-events">Relay Events</div>
+    <div class="adminNavItem" data-section="dm">DM</div>
+    <div class="adminNavItem" data-section="database">Database Query</div>
+  </div>
+  <div id="divFiles"></div>
+</div>
+```
+
+The `.adminNavItem` styling uses the same font-family and sizing as sidenav section content (`font-size: 70%`, `font-family: var(--font-family)`) with a simple border-bottom separator, hover accent color, and bold+background for the active state. No section title header, no collapse toggle icon.
+
+### Step 2: Add Admin Section HTML Panels
+
+Port the section HTML from `c-relay-pg.html` into `divBody`. Each section follows the pattern:
+
+```html
+<div id="section-{name}" class="adminSection">
+  <div class="adminSectionHeader">{Title}</div>
+  <!-- Section-specific content -->
+</div>
+```
+
+Sections to port:
+1. **Statistics** — CPU metrics, time stats, top pubkeys, event kinds cards
+2. **Subscriptions** — Subscription details log
+3. **Configuration** — Config key/value inputs, fetch/set buttons, log
+4. **Authorization** — Pubkey input, whitelist/blacklist/query buttons, log
+5. **IP Bans** — IP input, duration, ban/query buttons, log
+6. **Relay Events** — Kind 0 metadata form, live event feed
+7. **DM** — Message textarea, send button, log
+8. **Database Query** — SQL textarea, run button, log
+9. **System** (always visible) — Relay WS/HTTP URLs, relay/user pubkeys
+10. **Boot Diagnostics** (always visible) — Boot log
+
+### Step 3: Add Admin CSS
+
+Port the admin-specific styles from `c-relay-pg.html` `<style>` block. These use CSS variables from `client.css` so they integrate with the theme system:
+
+- `#divBody` flex layout overrides
+- `.adminNavItem` styles with hover/active states
+- `.adminSection` show/hide with `.active` class
+- `.adminGrid`, `.adminCard`, `.adminTable` layout
+- `.adminInput`, `.adminTextArea`, `.adminBtn` form elements
+- `.adminLog` scrollable log panels
+
+### Step 4: Add Admin State Variables
+
+```javascript
+const ADMIN_RELAY_WS_URL = 'wss://relay.laantungir.net';
+const ADMIN_RELAY_HTTP_URL = 'https://relay.laantungir.net';
+
+let relayPubkey = '';
+let adminInitialized = false;
+let adminUiBound = false;
+const adminSubscriptions = [];
+const MAX_LOG_LINES = 200;
+```
+
+### Step 5: Add Core Admin Functions
+
+Port from `c-relay-pg.html`:
+
+1. **`appendLog(id, msg)`** — Prepend timestamped messages to log panels
+2. **`setSystemInfo()`** — Populate system info table
+3. **`fetchRelayInfo()`** — NIP-11 fetch to get relay pubkey
+4. **`encryptForRelay(content)`** — NIP-44 encrypt using `window.nostr.nip44.encrypt`
+5. **`decryptFromRelay(content)`** — NIP-44 decrypt using `window.nostr.nip44.decrypt`
+6. **`sendAdminCommand(commandArray, sink)`** — Encrypt + publish kind 23456 event via `publishEvent()`
+
+### Step 6: Add Subscription Setup
+
+```javascript
+async function setupAdminSubscriptions() {
+  // Subscribe to kind 24567 monitoring events
+  const monitoringSub = subscribe(
+    { kinds: [24567], since: Math.floor(Date.now() / 1000) - 60 },
+    { closeOnEose: false, cacheUsage: 'ONLY_RELAY' }
+  );
+  
+  // Subscribe to kind 23457 admin responses
+  const responseSub = subscribe(
+    { kinds: [23457], '#p': [currentPubkey], since: Math.floor(Date.now() / 1000) - 60 },
+    { closeOnEose: false, cacheUsage: 'ONLY_RELAY' }
+  );
+  
+  // Listen for events via ndkEvent window event
+  window.addEventListener('ndkEvent', async (evt) => {
+    const event = evt.detail;
+    if (event.kind === 24567) handleMonitoringEvent(event);
+    else if (event.kind === 23457) await handleAdminResponse(event);
+    else handleLiveEvent(event);
+  });
+}
+```
+
+### Step 7: Add Event Handlers
+
+Port from `c-relay-pg.html`:
+
+1. **`handleMonitoringEvent(event)`** — Route d-tag values to stat cards
+2. **`handleAdminResponse(event)`** — Decrypt kind 23457 and route to logs
+3. **`handleLiveEvent(event)`** — Sample non-admin events to live feed
+4. **`activateSection(sectionKey)`** — Toggle active section visibility
+5. **`bindAdminUi()`** — Wire up all button click handlers
+
+### Step 8: Add Button Handlers
+
+All handlers follow the same pattern: gather input → `sendAdminCommand(array, logId)`:
+
+- **btnRefreshStats** → `['system_command', 'system_status']`
+- **btnConfigRefresh** → `['config_query', 'all']`
+- **btnConfigSet** → `[key, value]`
+- **btnWhitelist** → `['whitelist', 'pubkey', pk]`
+- **btnBlacklist** → `['blacklist', 'pubkey', pk]`
+- **btnAuthQuery** → `['auth_query', 'all']`
+- **btnBanIp** → `['ip_ban', 'add', ip, duration]`
+- **btnIpQuery** → `['ip_ban', 'query', 'all']`
+- **btnPublishKind0** → Direct `publishEvent()` with kind 0
+- **btnSendDm** → `['dm', message]`
+- **btnRunSql** → `['sql_query', query]`
+
+### Step 9: Integration into main() Flow
+
+```javascript
+(async function main() {
+  // 1. Template init (hamburger, theme, auth)
+  initHamburgerMenu();
+  // ... existing template setup ...
+  
+  // 2. Auth
+  await initializeAuthentication(authMode);
+  await initializeAuthenticatedPageFeatures();
+  
+  // 3. Admin init (NEW)
+  await initializeAdminFeatures();
+  
+  // 4. Template finalization
+  await updateVersionDisplay();
+})();
+```
+
+Where `initializeAdminFeatures()`:
+```javascript
+async function initializeAdminFeatures() {
+  if (!isAuthenticated || adminInitialized) return;
+  bindAdminUi();
+  await fetchRelayInfo();
+  await setupAdminSubscriptions();
+  setSystemInfo();
+  adminInitialized = true;
+}
+```
+
+## Response Routing Enhancement
+
+The current `c-relay-pg.html` broadcasts all responses to all logs. For a better UX, we should parse the decrypted response and route to the appropriate log:
+
+```javascript
+async function handleAdminResponse(event) {
+  const plain = await decryptFromRelay(event.content);
+  const parsed = JSON.parse(plain);
+  
+  // Route based on query_type
+  if (parsed.query_type === 'config_all' || parsed.query_type === 'config_update') {
+    appendLog('configLog', plain);
+  } else if (parsed.query_type === 'auth_query' || parsed.query_type === 'auth_rule') {
+    appendLog('authLog', plain);
+  } else if (parsed.query_type === 'sql_query') {
+    appendLog('sqlLog', plain);
+  } else if (parsed.query_type === 'ip_ban') {
+    appendLog('ipBanLog', plain);
+  } else {
+    // Fallback: broadcast to all
+    appendLog('configLog', `RESP <- ${plain}`);
+  }
+}
+```
+
+## Files Modified
+
+| File | Location | Change |
+|------|----------|--------|
+| `relay-admin.html` | `~/lt/client-ndk/www/` | Add admin HTML, CSS, and JavaScript |
+
+## Files NOT Modified
+
+- `template.html` — Stays as the clean template
+- `c-relay-pg.html` — Stays as the debug/test reference
+- `api/index.html` / `api/index.js` — Legacy, stays for now (still served by relay binary)
+- No C code changes needed — the relay already handles kind 23456/23457/24567
+
+## Future Enhancements (Out of Scope)
+
+- Rich config table with inline editing (like api/index.html has)
+- IP ban table with filter tabs
+- SQL query history dropdown
+- WoT management section
+- Event rate chart visualization
+- Admin verification handshake
diff --git a/relay.pid b/relay.pid
index ecc7563..f99ec45 100644
--- a/relay.pid
+++ b/relay.pid
@@ -1 +1 @@
-1661694
+236636
diff --git a/src/api.c b/src/api.c
index db2a6e3..46fcb32 100644
--- a/src/api.c
+++ b/src/api.c
@@ -31,6 +31,7 @@ int get_active_connection_count(void);
 
 // External subscription manager (from main.c via subscriptions.c)
 extern subscription_manager_t g_subscription_manager;
+extern struct lws_context *ws_context;
 
 // Global variables for config change system
 static pending_config_change_t* pending_changes_head = NULL;
@@ -567,52 +568,46 @@ cJSON* query_subscription_details(void) {
     return subscriptions_data;
 }
 
-// Generate event-driven monitoring events (triggered by event storage)
-int generate_event_driven_monitoring(void) {
-    // Generate event_kinds monitoring event
-    if (generate_monitoring_event_for_type("event_kinds", query_event_kind_distribution) != 0) {
-        DEBUG_ERROR("Failed to generate event_kinds monitoring event");
-        return -1;
-    }
+static int generate_round_robin_monitoring_event(void) {
+    static int rr_index = 0;
 
-    // Generate time_stats monitoring event
-    if (generate_monitoring_event_for_type("time_stats", query_time_based_statistics) != 0) {
-        DEBUG_ERROR("Failed to generate time_stats monitoring event");
-        return -1;
-    }
+    struct monitor_event_def {
+        const char* d_tag;
+        cJSON* (*query_func)(void);
+    };
 
-    // Generate top_pubkeys monitoring event
-    if (generate_monitoring_event_for_type("top_pubkeys", query_top_pubkeys) != 0) {
-        DEBUG_ERROR("Failed to generate top_pubkeys monitoring event");
-        return -1;
-    }
+    // Weighted schedule: CPU metrics are emitted more frequently than heavier queries.
+    // Sequence cadence at throttle=20s: cpu(0s), event_kinds(20s), cpu(40s), time_stats(60s), cpu(80s), top_pubkeys(100s)
+    // => cpu every ~40s, others every ~120s.
+    static const struct monitor_event_def events[] = {
+        {"cpu_metrics", query_cpu_metrics},
+        {"event_kinds", query_event_kind_distribution},
+        {"cpu_metrics", query_cpu_metrics},
+        {"time_stats", query_time_based_statistics},
+        {"cpu_metrics", query_cpu_metrics},
+        {"top_pubkeys", query_top_pubkeys}
+    };
 
+    const int event_count = (int)(sizeof(events) / sizeof(events[0]));
+    const struct monitor_event_def* selected = &events[rr_index];
+    rr_index = (rr_index + 1) % event_count;
 
-    // Generate CPU metrics monitoring event (also triggered by event storage)
-    if (generate_monitoring_event_for_type("cpu_metrics", query_cpu_metrics) != 0) {
-        DEBUG_ERROR("Failed to generate cpu_metrics monitoring event");
+    if (generate_monitoring_event_for_type(selected->d_tag, selected->query_func) != 0) {
+        DEBUG_ERROR("Failed to generate %s monitoring event", selected->d_tag);
         return -1;
     }
 
     return 0;
 }
 
+// Generate event-driven monitoring events (triggered by event storage)
+int generate_event_driven_monitoring(void) {
+    return generate_round_robin_monitoring_event();
+}
+
 // Generate subscription-driven monitoring events (triggered by subscription changes)
 int generate_subscription_driven_monitoring(void) {
-
-    // Generate subscription_details monitoring event (admin-only)
-    if (generate_monitoring_event_for_type("subscription_details", query_subscription_details) != 0) {
-        DEBUG_ERROR("Failed to generate subscription_details monitoring event");
-        return -1;
-    }
-
-    // Generate CPU metrics monitoring event (also triggered by subscription changes)
-    if (generate_monitoring_event_for_type("cpu_metrics", query_cpu_metrics) != 0) {
-        DEBUG_ERROR("Failed to generate cpu_metrics monitoring event");
-        return -1;
-    }
-
-    return 0;
+    return generate_round_robin_monitoring_event();
 }
 
 // Generate and broadcast monitoring event (legacy function - now calls event-driven version)
@@ -699,6 +694,11 @@ int generate_monitoring_event_for_type(const char* d_tag_value, cJSON* (*query_f
     // Broadcast the ephemeral event to active subscriptions (no database storage)
     broadcast_event_to_subscriptions(monitoring_event);
 
+    // If running on api-worker thread, wake the lws service loop so queued frames flush promptly.
+    if (ws_context) {
+        lws_cancel_service(ws_context);
+    }
+
     cJSON_Delete(monitoring_event);
     free(content_json);
 
@@ -721,11 +721,7 @@ static int monitoring_on_event_stored_sync(void) {
         return 0;
     }
 
-    // Check if anyone is subscribed to monitoring events (kind 24567)
-    if (!has_subscriptions_for_kind(24567)) {
-        return 0;
-    }
-
+    // Debug mode behavior: generate monitoring events even without active kind 24567 subscribers
     last_monitoring_time = current_time;
     return generate_event_driven_monitoring();
 }
@@ -745,11 +741,7 @@ static int monitoring_on_subscription_change_sync(void) {
         return 0;
     }
 
-    // Check if anyone is subscribed to monitoring events (kind 24567)
-    if (!has_subscriptions_for_kind(24567)) {
-        return 0;
-    }
-
+    // Debug mode behavior: generate monitoring events even without active kind 24567 subscribers
     last_monitoring_time = current_time;
     return generate_subscription_driven_monitoring();
 }
@@ -1316,6 +1308,89 @@ int handle_embedded_file_writeable(struct lws* wsi) {
 
     return 0;
 }
+static void add_relay_thread_snapshot(cJSON* cpu_stats, pid_t relay_pid) {
+    if (!cpu_stats || relay_pid <= 0) return;
+
+    cJSON* threads = cJSON_CreateArray();
+    if (!threads) return;
+
+    char cmd[256];
+    snprintf(cmd, sizeof(cmd), "ps -T -p %d -o tid=,comm=,pcpu=,pmem=,etime=", relay_pid);
+    FILE* fp = popen(cmd, "r");
+    if (!fp) {
+        cJSON_Delete(threads);
+        return;
+    }
+
+    char line[512];
+    int row_count = 0;
+    while (fgets(line, sizeof(line), fp) && row_count < 32) {
+        int tid = 0;
+        char comm[64] = {0};
+        double pcpu = 0.0, pmem = 0.0;
+        char elapsed[64] = {0};
+        if (sscanf(line, "%d %63s %lf %lf %63s", &tid, comm, &pcpu, &pmem, elapsed) == 5) {
+            cJSON* row = cJSON_CreateObject();
+            if (row) {
+                cJSON_AddNumberToObject(row, "tid", tid);
+                cJSON_AddStringToObject(row, "thread", comm);
+                cJSON_AddNumberToObject(row, "cpu_percent", pcpu);
+                cJSON_AddNumberToObject(row, "mem_percent", pmem);
+                cJSON_AddStringToObject(row, "elapsed", elapsed);
+                cJSON_AddItemToArray(threads, row);
+                row_count++;
+            }
+        }
+    }
+    pclose(fp);
+
+    cJSON_AddItemToObject(cpu_stats, "relay_threads", threads);
+}
+
+static void add_postgres_backend_snapshot(cJSON* cpu_stats) {
+    if (!cpu_stats) return;
+
+    cJSON* backends = cJSON_CreateArray();
+    if (!backends) return;
+
+    FILE* fp = popen("ps -C postgres -o pid=,comm=,pcpu=,pmem=,etime=,args=", "r");
+    if (!fp) {
+        cJSON_Delete(backends);
+        return;
+    }
+
+    char line[1024];
+    int row_count = 0;
+    while (fgets(line, sizeof(line), fp) && row_count < 48) {
+        int pid = 0;
+        char comm[64] = {0};
+        double pcpu = 0.0, pmem = 0.0;
+        char elapsed[64] = {0};
+        char args[768] = {0};
+        if (sscanf(line, "%d %63s %lf %lf %63s %767[^\n]", &pid, comm, &pcpu, &pmem, elapsed, args) >= 5) {
+            cJSON* row = cJSON_CreateObject();
+            if (row) {
+                cJSON_AddNumberToObject(row, "pid", pid);
+                cJSON_AddStringToObject(row, "command", comm);
+                cJSON_AddNumberToObject(row, "cpu_percent", pcpu);
+                cJSON_AddNumberToObject(row, "mem_percent", pmem);
+                cJSON_AddStringToObject(row, "elapsed", elapsed);
+                if (args[0] != '\0') {
+                    cJSON_AddStringToObject(row, "args", args);
+                    if (strstr(args, " c-relay-pg ") || strstr(args, " c-relay-pg") || strstr(args, " crelay ")) {
+                        cJSON_AddBoolToObject(row, "is_crelay_connection", 1);
+                    }
+                }
+                cJSON_AddItemToArray(backends, row);
+                row_count++;
+            }
+        }
+    }
+    pclose(fp);
+
+    cJSON_AddItemToObject(cpu_stats, "postgres_backends", backends);
+}
+
 // Query CPU usage metrics
 cJSON* query_cpu_metrics(void) {
     cJSON* cpu_stats = cJSON_CreateObject();
@@ -1358,6 +1433,10 @@ cJSON* query_cpu_metrics(void) {
     pid_t pid = getpid();
     cJSON_AddNumberToObject(cpu_stats, "process_id", (double)pid);
 
+    // Include relay thread/process snapshots (mirrors c-relay-pg-threads.sh style data)
+    add_relay_thread_snapshot(cpu_stats, pid);
+    add_postgres_backend_snapshot(cpu_stats);
+
     // Get active WebSocket connection count
     cJSON_AddNumberToObject(cpu_stats, "active_connections", (double)get_active_connection_count());
 
@@ -1413,13 +1492,17 @@ char* generate_stats_json(void) {
     cJSON_AddStringToObject(response, "query_type", "stats_query");
     cJSON_AddNumberToObject(response, "timestamp", (double)time(NULL));
 
-    // Get database file size
-    const char* db_path = db_get_database_path();
-    struct stat db_stat;
+    // Get database storage size (PostgreSQL only)
     long long db_size = 0;
-    if (db_path && db_path[0] != '\0' && stat(db_path, &db_stat) == 0) {
-        db_size = db_stat.st_size;
+#ifdef DB_BACKEND_POSTGRES
+    db_stmt_t* db_size_stmt = NULL;
+    if (db_prepare("SELECT pg_database_size(current_database())", &db_size_stmt) == DB_OK) {
+        if (db_step_stmt(db_size_stmt) == DB_ROW) {
+            db_size = db_column_int64_value(db_size_stmt, 0);
+        }
+        db_finalize_stmt(db_size_stmt);
     }
+#endif
     cJSON_AddNumberToObject(response, "database_size_bytes", db_size);
 
     // Get active subscriptions count from in-memory manager
@@ -1775,13 +1858,13 @@ char* generate_stats_text(void) {
         // Database Overview section
         offset += snprintf(stats_text + offset, 16384 - offset,
 
- "Database Size  %.2f MB (%lld bytes)\n"
+ "Database Size  %.2f MB\n"
          "Total Events  %lld\n"
          "Active Subscriptions  %d\n"
          "Oldest Event  %s\n"
          "Newest Event  %s\n"
         "\n",
-        db_mb, db_bytes, total, active_subs, oldest_str, newest_str);
+        db_mb, total, active_subs, oldest_str, newest_str);
 
         // Event Kind Distribution section
         offset += snprintf(stats_text + offset, 16384 - offset,
diff --git a/src/config.c b/src/config.c
index a9e4154..82d8c8d 100644
--- a/src/config.c
+++ b/src/config.c
@@ -3908,12 +3908,17 @@ int handle_stats_query_unified(cJSON* event, char* error_message, size_t error_s
     cJSON_AddStringToObject(response, "query_type", "stats_query");
     cJSON_AddNumberToObject(response, "timestamp", (double)time(NULL));
 
-    // Get database file size
-    struct stat db_stat;
+    // Get database storage size (PostgreSQL only)
     long long db_size = 0;
-    if (stat(g_database_path, &db_stat) == 0) {
-        db_size = db_stat.st_size;
+#ifdef DB_BACKEND_POSTGRES
+    db_stmt_t* db_size_stmt = NULL;
+    if (db_prepare("SELECT pg_database_size(current_database())", &db_size_stmt) == DB_OK) {
+        if (db_step_stmt(db_size_stmt) == DB_ROW) {
+            db_size = db_column_int64_value(db_size_stmt, 0);
+        }
+        db_finalize_stmt(db_size_stmt);
     }
+#endif
     cJSON_AddNumberToObject(response, "database_size_bytes", db_size);
 
     // Query total events count
@@ -4676,7 +4681,7 @@ int populate_all_config_values_atomic(const char* admin_pubkey, const char* rela
     // Note: Monitoring is automatically activated when clients subscribe to kind 24567
     db_reset_stmt(stmt);
     db_bind_text_param(stmt, 1, "kind_24567_reporting_throttle_sec");
-    db_bind_text_param(stmt, 2, "5");  // integer, default 5 seconds
+    db_bind_text_param(stmt, 2, "20");  // integer, default 20 seconds
     db_bind_text_param(stmt, 3, "integer");
     db_bind_text_param(stmt, 4, "Minimum seconds between monitoring event reports (ephemeral kind 24567)");
     db_bind_text_param(stmt, 5, "monitoring");
diff --git a/src/db_ops.c b/src/db_ops.c
index e8c933c..0ec0d52 100644
--- a/src/db_ops.c
+++ b/src/db_ops.c
@@ -92,6 +92,9 @@ int db_get_total_event_count_ll(long long* out_count) { return postgres_db_get_t
 int db_get_event_count_since(time_t cutoff, long long* out_count) {
     return postgres_db_get_event_count_since(cutoff, out_count);
 }
+int db_get_storage_size_bytes(long long* out_size) {
+    return postgres_db_get_storage_size_bytes(out_size);
+}
 cJSON* db_get_event_kind_distribution_rows(long long* out_total_events) {
     return postgres_db_get_event_kind_distribution_rows(out_total_events);
 }
@@ -246,6 +249,9 @@ int db_get_total_event_count_ll(long long* out_count) { return sqlite_db_get_tot
 int db_get_event_count_since(time_t cutoff, long long* out_count) {
     return sqlite_db_get_event_count_since(cutoff, out_count);
 }
+int db_get_storage_size_bytes(long long* out_size) {
+    return sqlite_db_get_storage_size_bytes(out_size);
+}
 cJSON* db_get_event_kind_distribution_rows(long long* out_total_events) {
     return sqlite_db_get_event_kind_distribution_rows(out_total_events);
 }
diff --git a/src/db_ops.h b/src/db_ops.h
index c534353..02418ab 100644
--- a/src/db_ops.h
+++ b/src/db_ops.h
@@ -72,6 +72,7 @@ char* db_execute_readonly_query_json(const char* query, const char* request_id,
 // Monitoring/stat helpers (Phase 1 api.c migration)
 int db_get_total_event_count_ll(long long* out_count);
 int db_get_event_count_since(time_t cutoff, long long* out_count);
+int db_get_storage_size_bytes(long long* out_size);
 cJSON* db_get_event_kind_distribution_rows(long long* out_total_events);
 cJSON* db_get_top_pubkeys_rows(int limit);
 cJSON* db_get_subscription_details_rows(void);
diff --git a/src/db_ops_postgres.c b/src/db_ops_postgres.c
index 37e311e..464699a 100644
--- a/src/db_ops_postgres.c
+++ b/src/db_ops_postgres.c
@@ -1090,6 +1090,37 @@ int postgres_db_get_event_count_since(time_t cutoff, long long* out_count) {
 #endif
 }
 
+int postgres_db_get_storage_size_bytes(long long* out_size) {
+#if defined(DB_BACKEND_POSTGRES) && defined(HAVE_LIBPQ)
+    if (!out_size) return DB_MISUSE;
+    *out_size = 0;
+
+    PGconn* conn = postgres_db_active_connection();
+    if (!conn || PQstatus(conn) != CONNECTION_OK) return DB_ERROR;
+
+    PGresult* res = PQexec(conn, "SELECT pg_database_size(current_database())");
+    if (!res || PQresultStatus(res) != PGRES_TUPLES_OK) {
+        if (res) {
+            postgres_set_error_text(PQresultErrorMessage(res));
+            PQclear(res);
+        } else {
+            postgres_set_error_from_conn(conn, "postgres_db_get_storage_size_bytes failed");
+        }
+        return DB_ERROR;
+    }
+
+    if (PQntuples(res) > 0 && !PQgetisnull(res, 0, 0)) {
+        *out_size = strtoll(PQgetvalue(res, 0, 0), NULL, 10);
+    }
+
+    PQclear(res);
+    return DB_OK;
+#else
+    if (out_size) *out_size = 0;
+    return DB_ERROR;
+#endif
+}
+
 cJSON* postgres_db_get_event_kind_distribution_rows(long long* out_total_events) {
 #if defined(DB_BACKEND_POSTGRES) && defined(HAVE_LIBPQ)
     if (out_total_events) *out_total_events = 0;
@@ -1589,11 +1620,34 @@ int postgres_db_insert_event_with_json(const char* id, const char* pubkey, long
         id, pubkey, created_buf, kind_buf, event_type, content, sig, tags_json, event_json
     };
 
-    PGresult* res = PQexecParams(conn,
-                                 "INSERT INTO events (id, pubkey, created_at, kind, event_type, content, sig, tags, event_json) "
-                                 "VALUES ($1, $2, $3::BIGINT, $4::INT, $5, $6, $7, $8::jsonb, $9) "
-                                 "ON CONFLICT (id) DO NOTHING",
-                                 9, NULL, params, NULL, NULL, 0);
+    PGresult* res = NULL;
+    if (strcmp(event_type, "replaceable") == 0) {
+        res = PQexecParams(conn,
+                           "INSERT INTO events (id, pubkey, created_at, kind, event_type, content, sig, tags, event_json) "
+                           "VALUES ($1, $2, $3::BIGINT, $4::INT, $5, $6, $7, $8::jsonb, $9) "
+                           "ON CONFLICT (pubkey, kind) WHERE event_type = 'replaceable' DO UPDATE SET "
+                           "id = EXCLUDED.id, created_at = EXCLUDED.created_at, content = EXCLUDED.content, "
+                           "sig = EXCLUDED.sig, tags = EXCLUDED.tags, event_json = EXCLUDED.event_json "
+                           "WHERE EXCLUDED.created_at > events.created_at "
+                           "OR (EXCLUDED.created_at = events.created_at AND EXCLUDED.id < events.id)",
+                           9, NULL, params, NULL, NULL, 0);
+    } else if (strcmp(event_type, "addressable") == 0) {
+        res = PQexecParams(conn,
+                           "INSERT INTO events (id, pubkey, created_at, kind, event_type, content, sig, tags, event_json) "
+                           "VALUES ($1, $2, $3::BIGINT, $4::INT, $5, $6, $7, $8::jsonb, $9) "
+                           "ON CONFLICT (pubkey, kind, d_tag_value) WHERE event_type = 'addressable' DO UPDATE SET "
+                           "id = EXCLUDED.id, created_at = EXCLUDED.created_at, content = EXCLUDED.content, "
+                           "sig = EXCLUDED.sig, tags = EXCLUDED.tags, event_json = EXCLUDED.event_json "
+                           "WHERE EXCLUDED.created_at > events.created_at "
+                           "OR (EXCLUDED.created_at = events.created_at AND EXCLUDED.id < events.id)",
+                           9, NULL, params, NULL, NULL, 0);
+    } else {
+        res = PQexecParams(conn,
+                           "INSERT INTO events (id, pubkey, created_at, kind, event_type, content, sig, tags, event_json) "
+                           "VALUES ($1, $2, $3::BIGINT, $4::INT, $5, $6, $7, $8::jsonb, $9) "
+                           "ON CONFLICT (id) DO NOTHING",
+                           9, NULL, params, NULL, NULL, 0);
+    }
 
     if (!res) {
         postgres_set_error_from_conn(conn, "postgres_db_insert_event_with_json failed");
diff --git a/src/db_ops_postgres.h b/src/db_ops_postgres.h
index cab8e05..603e626 100644
--- a/src/db_ops_postgres.h
+++ b/src/db_ops_postgres.h
@@ -55,6 +55,7 @@ char* postgres_db_execute_readonly_query_json(const char* query, const char* req
 
 int postgres_db_get_total_event_count_ll(long long* out_count);
 int postgres_db_get_event_count_since(time_t cutoff, long long* out_count);
+int postgres_db_get_storage_size_bytes(long long* out_size);
 cJSON* postgres_db_get_event_kind_distribution_rows(long long* out_total_events);
 cJSON* postgres_db_get_top_pubkeys_rows(int limit);
 cJSON* postgres_db_get_subscription_details_rows(void);
diff --git a/src/db_ops_sqlite.c b/src/db_ops_sqlite.c
index 13d6b45..feb0ff9 100644
--- a/src/db_ops_sqlite.c
+++ b/src/db_ops_sqlite.c
@@ -8,6 +8,7 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
+#include <sys/stat.h>
 
 // Database handle owned by sqlite_db_ops.
 static sqlite3* g_db = NULL;
@@ -661,6 +662,27 @@ int sqlite_db_get_event_count_since(time_t cutoff, long long* out_count) {
     return 0;
 }
 
+int sqlite_db_get_storage_size_bytes(long long* out_size) {
+    sqlite3* db = sqlite_db_active_connection();
+    const char* db_path = sqlite_db_get_database_path();
+    if (!db || !out_size || !db_path || db_path[0] == '\0') return -1;
+
+    long long total_size = 0;
+    struct stat db_stat;
+    if (stat(db_path, &db_stat) == 0) {
+        total_size += (long long)db_stat.st_size;
+    }
+
+    char wal_path[1024];
+    snprintf(wal_path, sizeof(wal_path), "%s-wal", db_path);
+    if (stat(wal_path, &db_stat) == 0) {
+        total_size += (long long)db_stat.st_size;
+    }
+
+    *out_size = total_size;
+    return 0;
+}
+
 cJSON* sqlite_db_get_event_kind_distribution_rows(long long* out_total_events) {
     sqlite3* db = sqlite_db_active_connection();
     if (!db) return NULL;
diff --git a/src/main.h b/src/main.h
index 5cb12d1..a8011e8 100644
--- a/src/main.h
+++ b/src/main.h
@@ -13,8 +13,8 @@
 // Using CRELAY_ prefix to avoid conflicts with nostr_core_lib VERSION macros
 #define CRELAY_VERSION_MAJOR 2
 #define CRELAY_VERSION_MINOR 1
-#define CRELAY_VERSION_PATCH 13
-#define CRELAY_VERSION "v2.1.13"
+#define CRELAY_VERSION_PATCH 14
+#define CRELAY_VERSION "v2.1.14"
 
 // Relay metadata (authoritative source for NIP-11 information)
 #define RELAY_NAME "C-Relay-PG"
diff --git a/src/pg_schema.h b/src/pg_schema.h
index 1e57de5..96e5f82 100644
--- a/src/pg_schema.h
+++ b/src/pg_schema.h
@@ -1,7 +1,7 @@
 #ifndef PG_SCHEMA_H
 #define PG_SCHEMA_H
 
-#define EMBEDDED_PG_SCHEMA_VERSION "2"
+#define EMBEDDED_PG_SCHEMA_VERSION "3"
 
 static const char* const EMBEDDED_PG_SCHEMA_SQL =
 "-- C-Relay-PG PostgreSQL Schema\n"
@@ -237,8 +237,124 @@ static const char* const EMBEDDED_PG_SCHEMA_SQL =
 "    idle_first_failure BIGINT NOT NULL DEFAULT 0\n"
 ");\n"
 "\n"
+"-- Helper views for common queries\n"
+"CREATE OR REPLACE VIEW recent_events AS\n"
+"SELECT id, pubkey, created_at, kind, event_type, content\n"
+"FROM events\n"
+"WHERE event_type <> 'ephemeral'\n"
+"ORDER BY created_at DESC\n"
+"LIMIT 1000;\n"
+"\n"
+"CREATE OR REPLACE VIEW event_stats AS\n"
+"SELECT\n"
+"    event_type,\n"
+"    COUNT(*) AS count,\n"
+"    AVG(char_length(content)) AS avg_content_length,\n"
+"    MIN(created_at) AS earliest,\n"
+"    MAX(created_at) AS latest\n"
+"FROM events\n"
+"GROUP BY event_type;\n"
+"\n"
+"-- Configuration events view (kind 33334)\n"
+"CREATE OR REPLACE VIEW configuration_events AS\n"
+"SELECT\n"
+"    id,\n"
+"    pubkey AS admin_pubkey,\n"
+"    created_at,\n"
+"    content,\n"
+"    tags,\n"
+"    sig\n"
+"FROM events\n"
+"WHERE kind = 33334\n"
+"ORDER BY created_at DESC;\n"
+"\n"
+"-- View for subscription analytics\n"
+"CREATE OR REPLACE VIEW subscription_analytics AS\n"
+"SELECT\n"
+"    to_timestamp(created_at)::date AS date,\n"
+"    COUNT(*) AS subscriptions_created,\n"
+"    COUNT(CASE WHEN ended_at IS NOT NULL THEN 1 END) AS subscriptions_ended,\n"
+"    AVG(CASE WHEN duration IS NOT NULL THEN duration END) AS avg_duration_seconds,\n"
+"    MAX(events_sent) AS max_events_sent,\n"
+"    AVG(events_sent) AS avg_events_sent,\n"
+"    COUNT(DISTINCT client_ip) AS unique_clients\n"
+"FROM subscriptions\n"
+"GROUP BY to_timestamp(created_at)::date\n"
+"ORDER BY date DESC;\n"
+"\n"
+"-- View for current active subscriptions (from log perspective)\n"
+"CREATE OR REPLACE VIEW active_subscriptions_log AS\n"
+"SELECT\n"
+"    subscription_id,\n"
+"    client_ip,\n"
+"    filter_json,\n"
+"    events_sent,\n"
+"    created_at,\n"
+"    (EXTRACT(EPOCH FROM NOW())::BIGINT - created_at) AS duration_seconds,\n"
+"    wsi_pointer\n"
+"FROM subscriptions\n"
+"WHERE event_type = 'created'\n"
+"  AND ended_at IS NULL;\n"
+"\n"
+"-- Event kinds distribution view\n"
+"CREATE OR REPLACE VIEW event_kinds_view AS\n"
+"SELECT\n"
+"    kind,\n"
+"    COUNT(*) AS count,\n"
+"    ROUND((COUNT(*) * 100.0 / NULLIF((SELECT COUNT(*) FROM events), 0))::numeric, 2) AS percentage\n"
+"FROM events\n"
+"GROUP BY kind\n"
+"ORDER BY count DESC;\n"
+"\n"
+"-- Top pubkeys by event count view\n"
+"CREATE OR REPLACE VIEW top_pubkeys_view AS\n"
+"SELECT\n"
+"    pubkey,\n"
+"    COUNT(*) AS event_count,\n"
+"    ROUND((COUNT(*) * 100.0 / NULLIF((SELECT COUNT(*) FROM events), 0))::numeric, 2) AS percentage\n"
+"FROM events\n"
+"GROUP BY pubkey\n"
+"ORDER BY event_count DESC;\n"
+"\n"
+"-- Time-based statistics view\n"
+"CREATE OR REPLACE VIEW time_stats_view AS\n"
+"SELECT\n"
+"    'total' AS period,\n"
+"    COUNT(*) AS total_events,\n"
+"    COUNT(DISTINCT pubkey) AS unique_pubkeys,\n"
+"    MIN(created_at) AS oldest_event,\n"
+"    MAX(created_at) AS newest_event\n"
+"FROM events\n"
+"UNION ALL\n"
+"SELECT\n"
+"    '24h' AS period,\n"
+"    COUNT(*) AS total_events,\n"
+"    COUNT(DISTINCT pubkey) AS unique_pubkeys,\n"
+"    MIN(created_at) AS oldest_event,\n"
+"    MAX(created_at) AS newest_event\n"
+"FROM events\n"
+"WHERE created_at >= (EXTRACT(EPOCH FROM NOW())::BIGINT - 86400)\n"
+"UNION ALL\n"
+"SELECT\n"
+"    '7d' AS period,\n"
+"    COUNT(*) AS total_events,\n"
+"    COUNT(DISTINCT pubkey) AS unique_pubkeys,\n"
+"    MIN(created_at) AS oldest_event,\n"
+"    MAX(created_at) AS newest_event\n"
+"FROM events\n"
+"WHERE created_at >= (EXTRACT(EPOCH FROM NOW())::BIGINT - 604800)\n"
+"UNION ALL\n"
+"SELECT\n"
+"    '30d' AS period,\n"
+"    COUNT(*) AS total_events,\n"
+"    COUNT(DISTINCT pubkey) AS unique_pubkeys,\n"
+"    MIN(created_at) AS oldest_event,\n"
+"    MAX(created_at) AS newest_event\n"
+"FROM events\n"
+"WHERE created_at >= (EXTRACT(EPOCH FROM NOW())::BIGINT - 2592000);\n"
+"\n"
 "INSERT INTO schema_info(key, value, updated_at)\n"
-"VALUES ('version', '2', EXTRACT(EPOCH FROM NOW())::BIGINT)\n"
+"VALUES ('version', '3', EXTRACT(EPOCH FROM NOW())::BIGINT)\n"
 "ON CONFLICT (key) DO UPDATE SET\n"
 "    value = EXCLUDED.value,\n"
 "    updated_at = EXCLUDED.updated_at;\n"
diff --git a/src/sqlite_db_ops.h b/src/sqlite_db_ops.h
index 6b287b3..a9d2d87 100644
--- a/src/sqlite_db_ops.h
+++ b/src/sqlite_db_ops.h
@@ -53,6 +53,7 @@ char* sqlite_db_execute_readonly_query_json(const char* query, const char* reque
 
 int sqlite_db_get_total_event_count_ll(long long* out_count);
 int sqlite_db_get_event_count_since(time_t cutoff, long long* out_count);
+int sqlite_db_get_storage_size_bytes(long long* out_size);
 cJSON* sqlite_db_get_event_kind_distribution_rows(long long* out_total_events);
 cJSON* sqlite_db_get_top_pubkeys_rows(int limit);
 cJSON* sqlite_db_get_subscription_details_rows(void);
diff --git a/tests/test_results_20260401_091107.log b/tests/test_results_20260401_091107.log
deleted file mode 100644
index 9a25b34..0000000
--- a/tests/test_results_20260401_091107.log
+++ /dev/null
@@ -1,392 +0,0 @@
-2026-04-01 09:11:07 - ==========================================
-2026-04-01 09:11:07 - C-Relay Comprehensive Test Suite Runner
-2026-04-01 09:11:07 - ==========================================
-2026-04-01 09:11:07 - Relay URL: ws://127.0.0.1:8888
-2026-04-01 09:11:07 - Log file: test_results_20260401_091107.log
-2026-04-01 09:11:07 - Report file: test_report_20260401_091107.html
-2026-04-01 09:11:07 - 
-2026-04-01 09:11:07 - Checking relay status at ws://127.0.0.1:8888...
-2026-04-01 09:11:07 - \033[0;32m✓ Relay HTTP endpoint is accessible\033[0m
-2026-04-01 09:11:07 - 
-2026-04-01 09:11:07 - Starting comprehensive test execution...
-2026-04-01 09:11:07 - 
-2026-04-01 09:11:07 - \033[0;34m=== SECURITY TEST SUITES ===\033[0m
-2026-04-01 09:11:07 - ==========================================
-2026-04-01 09:11:07 - Running Test Suite: SQL Injection Tests
-2026-04-01 09:11:07 - Description: Comprehensive SQL injection vulnerability testing
-2026-04-01 09:11:07 - ==========================================
-==========================================
-C-Relay SQL Injection Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - Valid query works
-
-=== Authors Filter SQL Injection Tests ===
-Testing Authors filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== IDs Filter SQL Injection Tests ===
-Testing IDs filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Kinds Filter SQL Injection Tests ===
-Testing Kinds filter with string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with negative value... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with very large value... PASSED - SQL injection blocked (rejected with error)
-
-=== Search Filter SQL Injection Tests ===
-Testing Search filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Tag Filter SQL Injection Tests ===
-Testing #e tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-
-=== Timestamp Filter SQL Injection Tests ===
-Testing Since parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Until parameter injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Limit Parameter SQL Injection Tests ===
-Testing Limit parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Limit with UNION... PASSED - SQL injection blocked (rejected with error)
-
-=== Complex Multi-Filter SQL Injection Tests ===
-Testing Multi-filter with authors injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with search injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with tag injection... PASSED - SQL injection blocked (query sanitized)
-
-=== COUNT Message SQL Injection Tests ===
-Testing COUNT with authors payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Edge Case SQL Injection Tests ===
-Testing Empty string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Null byte injection... PASSED - SQL injection blocked (silently rejected)
-Testing Unicode injection... PASSED - SQL injection blocked (rejected with error)
-Testing Very long injection payload... PASSED - SQL injection blocked (rejected with error)
-
-=== Subscription ID SQL Injection Tests ===
-Testing Subscription ID injection... PASSED - SQL injection blocked (rejected with error)
-Testing Subscription ID with quotes... PASSED - SQL injection blocked (silently rejected)
-
-=== CLOSE Message SQL Injection Tests ===
-Testing CLOSE with injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Test Results ===
-Total tests: 318
-Passed: 318
-Failed: 0
-✓ All SQL injection tests passed!
-The relay appears to be protected against SQL injection attacks.
-2026-04-01 09:11:14 - \033[0;32m✓ SQL Injection Tests PASSED\033[0m (Duration: 7s)
-2026-04-01 09:11:14 - ==========================================
-2026-04-01 09:11:14 - Running Test Suite: Filter Validation Tests
-2026-04-01 09:11:14 - Description: Input validation for REQ and COUNT messages
-2026-04-01 09:11:14 - ==========================================
-=== C-Relay Filter Validation Tests ===
-Testing against relay at ws://127.0.0.1:8888
-
-Testing Valid REQ message... PASSED
-Testing Valid COUNT message... PASSED
-
-=== Testing Filter Array Validation ===
-Testing Non-object filter... PASSED
-Testing Too many filters... PASSED
-
-=== Testing Authors Validation ===
-Testing Invalid author type... PASSED
-Testing Invalid author hex... PASSED
-Testing Too many authors... FAILED - Expected error 'error: too many authors', got: ["NOTICE", "error: invalid author hex string"]
-2026-04-01 09:11:14 - \033[0;31m✗ Filter Validation Tests FAILED\033[0m (Duration: 0s)
diff --git a/tests/test_results_20260401_095729.log b/tests/test_results_20260401_095729.log
deleted file mode 100644
index b562c09..0000000
--- a/tests/test_results_20260401_095729.log
+++ /dev/null
@@ -1,733 +0,0 @@
-2026-04-01 09:57:29 - ==========================================
-2026-04-01 09:57:30 - C-Relay Comprehensive Test Suite Runner
-2026-04-01 09:57:30 - ==========================================
-2026-04-01 09:57:30 - Relay URL: ws://127.0.0.1:8888
-2026-04-01 09:57:30 - Log file: test_results_20260401_095729.log
-2026-04-01 09:57:30 - Report file: test_report_20260401_095729.html
-2026-04-01 09:57:30 - 
-2026-04-01 09:57:30 - Checking relay status at ws://127.0.0.1:8888...
-2026-04-01 09:57:30 - \033[0;32m✓ Relay HTTP endpoint is accessible\033[0m
-2026-04-01 09:57:30 - 
-2026-04-01 09:57:30 - Starting comprehensive test execution...
-2026-04-01 09:57:30 - 
-2026-04-01 09:57:30 - \033[0;34m=== SECURITY TEST SUITES ===\033[0m
-2026-04-01 09:57:30 - ==========================================
-2026-04-01 09:57:30 - Running Test Suite: SQL Injection Tests
-2026-04-01 09:57:30 - Description: Comprehensive SQL injection vulnerability testing
-2026-04-01 09:57:30 - ==========================================
-==========================================
-C-Relay SQL Injection Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - Valid query works
-
-=== Authors Filter SQL Injection Tests ===
-Testing Authors filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== IDs Filter SQL Injection Tests ===
-Testing IDs filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Kinds Filter SQL Injection Tests ===
-Testing Kinds filter with string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with negative value... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with very large value... PASSED - SQL injection blocked (rejected with error)
-
-=== Search Filter SQL Injection Tests ===
-Testing Search filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Tag Filter SQL Injection Tests ===
-Testing #e tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-
-=== Timestamp Filter SQL Injection Tests ===
-Testing Since parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Until parameter injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Limit Parameter SQL Injection Tests ===
-Testing Limit parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Limit with UNION... PASSED - SQL injection blocked (rejected with error)
-
-=== Complex Multi-Filter SQL Injection Tests ===
-Testing Multi-filter with authors injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with search injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with tag injection... PASSED - SQL injection blocked (query sanitized)
-
-=== COUNT Message SQL Injection Tests ===
-Testing COUNT with authors payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Edge Case SQL Injection Tests ===
-Testing Empty string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Null byte injection... PASSED - SQL injection blocked (silently rejected)
-Testing Unicode injection... PASSED - SQL injection blocked (rejected with error)
-Testing Very long injection payload... PASSED - SQL injection blocked (rejected with error)
-
-=== Subscription ID SQL Injection Tests ===
-Testing Subscription ID injection... PASSED - SQL injection blocked (rejected with error)
-Testing Subscription ID with quotes... PASSED - SQL injection blocked (silently rejected)
-
-=== CLOSE Message SQL Injection Tests ===
-Testing CLOSE with injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Test Results ===
-Total tests: 318
-Passed: 318
-Failed: 0
-✓ All SQL injection tests passed!
-The relay appears to be protected against SQL injection attacks.
-2026-04-01 09:57:36 - \033[0;32m✓ SQL Injection Tests PASSED\033[0m (Duration: 6s)
-2026-04-01 09:57:36 - ==========================================
-2026-04-01 09:57:36 - Running Test Suite: Filter Validation Tests
-2026-04-01 09:57:36 - Description: Input validation for REQ and COUNT messages
-2026-04-01 09:57:36 - ==========================================
-=== C-Relay Filter Validation Tests ===
-Testing against relay at ws://127.0.0.1:8888
-
-Testing Valid REQ message... PASSED
-Testing Valid COUNT message... PASSED
-
-=== Testing Filter Array Validation ===
-Testing Non-object filter... PASSED
-Testing Too many filters... PASSED
-
-=== Testing Authors Validation ===
-Testing Invalid author type... PASSED
-Testing Invalid author hex... PASSED
-Testing Too many authors... PASSED
-
-=== Testing IDs Validation ===
-Testing Invalid ID type... PASSED
-Testing Invalid ID hex... PASSED
-Testing Too many IDs... PASSED
-
-=== Testing Kinds Validation ===
-Testing Invalid kind type... PASSED
-Testing Negative kind... PASSED
-Testing Too large kind... PASSED
-Testing Too many kinds... PASSED
-
-=== Testing Timestamp Validation ===
-Testing Invalid since type... PASSED
-Testing Negative since... PASSED
-Testing Invalid until type... PASSED
-Testing Negative until... PASSED
-
-=== Testing Limit Validation ===
-Testing Invalid limit type... PASSED
-Testing Negative limit... PASSED
-Testing Too large limit... PASSED
-
-=== Testing Search Validation ===
-Testing Invalid search type... PASSED
-Testing Search too long... PASSED
-Testing Search SQL injection... PASSED
-
-=== Testing Tag Filter Validation ===
-Testing Invalid tag filter type... PASSED
-Testing Too many tag values... PASSED
-Testing Tag value too long... PASSED
-
-=== Testing Rate Limiting ===
-Testing rate limiting with malformed requests... UNCERTAIN - Rate limiting may not have triggered (this could be normal)
-
-=== Test Results ===
-Total tests: 28
-Passed: 28
-Failed: 0
-All tests passed!
-2026-04-01 09:57:39 - \033[0;32m✓ Filter Validation Tests PASSED\033[0m (Duration: 3s)
-2026-04-01 09:57:39 - ==========================================
-2026-04-01 09:57:39 - Running Test Suite: Subscription Validation Tests
-2026-04-01 09:57:39 - Description: Subscription ID and message validation
-2026-04-01 09:57:39 - ==========================================
-Testing subscription ID validation fixes...
-Testing malformed subscription IDs...
-Empty ID test: Connection failed (expected)
-Long ID test: Connection failed (expected)
-Invalid chars test: Connection failed (expected)
-NULL ID test: Connection failed (expected)
-Valid ID test: Failed
-Testing CLOSE message validation...
-CLOSE empty ID test: Connection failed (expected)
-CLOSE valid ID test: Failed
-Subscription validation tests completed.
-2026-04-01 09:57:39 - \033[0;32m✓ Subscription Validation Tests PASSED\033[0m (Duration: 0s)
-2026-04-01 09:57:39 - ==========================================
-2026-04-01 09:57:39 - Running Test Suite: Memory Corruption Tests
-2026-04-01 09:57:39 - Description: Buffer overflow and memory safety testing
-2026-04-01 09:57:39 - ==========================================
-==========================================
-C-Relay Memory Corruption Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-Note: These tests may cause the relay to crash if vulnerabilities exist
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - No memory corruption detected
-
-=== Subscription ID Memory Corruption Tests ===
-Testing Empty subscription ID... UNCERTAIN - Expected error but got normal response
-Testing Very long subscription ID (1KB)... UNCERTAIN - Expected error but got normal response
-Testing Very long subscription ID (10KB)... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with null bytes... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with special chars... UNCERTAIN - Expected error but got normal response
-Testing Unicode subscription ID... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with path traversal... UNCERTAIN - Expected error but got normal response
-
-=== Filter Array Memory Corruption Tests ===
-Testing Too many filters (50)... UNCERTAIN - Expected error but got normal response
-
-=== Concurrent Access Memory Tests ===
-Testing Concurrent subscription creation... ["EVENT","concurrent_1775051860259483357",{"pubkey":"4f355bdcb7cc0af728ef3cceb9615d90684bb5b2ca5f859ab0f0b704075871aa","created_at":1775051826,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"791ebcdcbe58fd5153b9a1f8f39907b0fcc4d86fc189e35fc9b6365031339b53","sig":"4164e20b9169a57c8086a0430b81af9bcabf69082c1d0d9d869673f2f5b0a350fb0ce882f2a19f08b613a0872edb69a0f8d1ccba0675bacff16c19b7282080e6"}]
-["EVENT","concurrent_1775051860259483357",{"pubkey":"4f355bdcb7cc0af728ef3cceb9615d90684bb5b2ca5f859ab0f0b704075871aa","created_at":1775051826,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"791ebcdcbe58fd5153b9a1f8f39907b0fcc4d86fc189e35fc9b6365031339b53","sig":"4164e20b9169a57c8086a0430b81af9bcabf69082c1d0d9d869673f2f5b0a350fb0ce882f2a19f08b613a0872edb69a0f8d1ccba0675bacff16c19b7282080e6"}]
-["EVENT","concurrent_1775051860259483357",{"pubkey":"4f355bdcb7cc0af728ef3cceb9615d90684bb5b2ca5f859ab0f0b704075871aa","created_at":1775051826,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"791ebcdcbe58fd5153b9a1f8f39907b0fcc4d86fc189e35fc9b6365031339b53","sig":"4164e20b9169a57c8086a0430b81af9bcabf69082c1d0d9d869673f2f5b0a350fb0ce882f2a19f08b613a0872edb69a0f8d1ccba0675bacff16c19b7282080e6"}]
-["EVENT","concurrent_1775051860259483357",{"pubkey":"4f355bdcb7cc0af728ef3cceb9615d90684bb5b2ca5f859ab0f0b704075871aa","created_at":1775051826,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"791ebcdcbe58fd5153b9a1f8f39907b0fcc4d86fc189e35fc9b6365031339b53","sig":"4164e20b9169a57c8086a0430b81af9bcabf69082c1d0d9d869673f2f5b0a350fb0ce882f2a19f08b613a0872edb69a0f8d1ccba0675bacff16c19b7282080e6"}]
-["EVENT","concurrent_1775051860259483357",{"pubkey":"4f355bdcb7cc0af728ef3cceb9615d90684bb5b2ca5f859ab0f0b704075871aa","created_at":1775051826,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"791ebcdcbe58fd5153b9a1f8f39907b0fcc4d86fc189e35fc9b6365031339b53","sig":"4164e20b9169a57c8086a0430b81af9bcabf69082c1d0d9d869673f2f5b0a350fb0ce882f2a19f08b613a0872edb69a0f8d1ccba0675bacff16c19b7282080e6"}]
-["EVENT","concurrent_1775051860259483357",{"pubkey":"4f355bdcb7cc0af728ef3cceb9615d90684bb5b2ca5f859ab0f0b704075871aa","created_at":1775051826,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"791ebcdcbe58fd5153b9a1f8f39907b0fcc4d86fc189e35fc9b6365031339b53","sig":"4164e20b9169a57c8086a0430b81af9bcabf69082c1d0d9d869673f2f5b0a350fb0ce882f2a19f08b613a0872edb69a0f8d1ccba0675bacff16c19b7282080e6"}]
-["EVENT","concurrent_1775051860259483357",{"pubkey":"4f355bdcb7cc0af728ef3cceb9615d90684bb5b2ca5f859ab0f0b704075871aa","created_at":1775051826,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"791ebcdcbe58fd5153b9a1f8f39907b0fcc4d86fc189e35fc9b6365031339b53","sig":"4164e20b9169a57c8086a0430b81af9bcabf69082c1d0d9d869673f2f5b0a350fb0ce882f2a19f08b613a0872edb69a0f8d1ccba0675bacff16c19b7282080e6"}]
-["EVENT","concurrent_1775051860259483357",{"pubkey":"4f355bdcb7cc0af728ef3cceb9615d90684bb5b2ca5f859ab0f0b704075871aa","created_at":1775051826,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"791ebcdcbe58fd5153b9a1f8f39907b0fcc4d86fc189e35fc9b6365031339b53","sig":"4164e20b9169a57c8086a0430b81af9bcabf69082c1d0d9d869673f2f5b0a350fb0ce882f2a19f08b613a0872edb69a0f8d1ccba0675bacff16c19b7282080e6"}]
-["EVENT","concurrent_1775051860259483357",{"pubkey":"4f355bdcb7cc0af728ef3cceb9615d90684bb5b2ca5f859ab0f0b704075871aa","created_at":1775051826,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"791ebcdcbe58fd5153b9a1f8f39907b0fcc4d86fc189e35fc9b6365031339b53","sig":"4164e20b9169a57c8086a0430b81af9bcabf69082c1d0d9d869673f2f5b0a350fb0ce882f2a19f08b613a0872edb69a0f8d1ccba0675bacff16c19b7282080e6"}]
-["EVENT","concurrent_1775051860259483357",{"pubkey":"4f355bdcb7cc0af728ef3cceb9615d90684bb5b2ca5f859ab0f0b704075871aa","created_at":1775051826,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"791ebcdcbe58fd5153b9a1f8f39907b0fcc4d86fc189e35fc9b6365031339b53","sig":"4164e20b9169a57c8086a0430b81af9bcabf69082c1d0d9d869673f2f5b0a350fb0ce882f2a19f08b613a0872edb69a0f8d1ccba0675bacff16c19b7282080e6"}]
-PASSED - Concurrent access handled safely
-Testing Concurrent CLOSE operations... 
-
-
-
-
-
-
-
-
-
-PASSED - Concurrent access handled safely
-
-=== Malformed JSON Memory Tests ===
-Testing Unclosed JSON object... UNCERTAIN - Expected error but got normal response
-Testing Mismatched brackets... UNCERTAIN - Expected error but got normal response
-Testing Extra closing brackets... UNCERTAIN - Expected error but got normal response
-Testing Null bytes in JSON... UNCERTAIN - Expected error but got normal response
-
-=== Large Message Memory Tests ===
-Testing Very large filter array... UNCERTAIN - Expected error but got normal response
-Testing Very long search term... UNCERTAIN - Expected error but got normal response
-
-=== Test Results ===
-Total tests: 17
-Passed: 17
-Failed: 0
-✓ All memory corruption tests passed!
-The relay appears to handle memory safely.
-2026-04-01 09:57:40 - \033[0;32m✓ Memory Corruption Tests PASSED\033[0m (Duration: 1s)
-2026-04-01 09:57:40 - ==========================================
-2026-04-01 09:57:40 - Running Test Suite: Input Validation Tests
-2026-04-01 09:57:40 - Description: Comprehensive input boundary testing
-2026-04-01 09:57:40 - ==========================================
-==========================================
-C-Relay Input Validation Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - Input accepted correctly
-
-=== Message Type Validation ===
-Testing Invalid message type - string... PASSED - Invalid input properly rejected
-Testing Invalid message type - number... PASSED - Invalid input properly rejected
-Testing Invalid message type - null... PASSED - Invalid input properly rejected
-Testing Invalid message type - object... PASSED - Invalid input properly rejected
-Testing Empty message type... PASSED - Invalid input properly rejected
-Testing Very long message type... PASSED - Invalid input properly rejected
-
-=== Message Structure Validation ===
-Testing Too few arguments... PASSED - Invalid input properly rejected
-Testing Too many arguments... PASSED - Invalid input properly rejected
-Testing Non-array message... PASSED - Invalid input properly rejected
-Testing Empty array... PASSED - Invalid input properly rejected
-Testing Nested arrays incorrectly... PASSED - Invalid input properly rejected
-
-=== Subscription ID Boundary Tests ===
-Testing Valid subscription ID... PASSED - Input accepted correctly
-Testing Empty subscription ID... PASSED - Invalid input properly rejected
-Testing Subscription ID with spaces... PASSED - Invalid input properly rejected
-Testing Subscription ID with newlines... PASSED - Invalid input properly rejected
-Testing Subscription ID with tabs... PASSED - Invalid input properly rejected
-Testing Subscription ID with control chars... PASSED - Invalid input properly rejected
-Testing Unicode subscription ID... PASSED - Invalid input properly rejected
-Testing Very long subscription ID... PASSED - Invalid input properly rejected
-
-=== Filter Object Validation ===
-Testing Valid empty filter... PASSED - Input accepted correctly
-Testing Non-object filter... PASSED - Invalid input properly rejected
-Testing Null filter... PASSED - Invalid input properly rejected
-Testing Array filter... PASSED - Invalid input properly rejected
-Testing Filter with invalid keys... PASSED - Input accepted correctly
-
-=== Authors Field Validation ===
-Testing Valid authors array... PASSED - Input accepted correctly
-Testing Empty authors array... PASSED - Input accepted correctly
-Testing Non-array authors... PASSED - Invalid input properly rejected
-Testing Invalid hex in authors... PASSED - Invalid input properly rejected
-Testing Short pubkey in authors... PASSED - Invalid input properly rejected
-
-=== IDs Field Validation ===
-Testing Valid ids array... PASSED - Input accepted correctly
-Testing Empty ids array... PASSED - Input accepted correctly
-Testing Non-array ids... PASSED - Invalid input properly rejected
-
-=== Kinds Field Validation ===
-Testing Valid kinds array... PASSED - Input accepted correctly
-Testing Empty kinds array... PASSED - Input accepted correctly
-Testing Non-array kinds... PASSED - Invalid input properly rejected
-Testing String in kinds... PASSED - Invalid input properly rejected
-
-=== Timestamp Field Validation ===
-Testing Valid since timestamp... PASSED - Input accepted correctly
-Testing Valid until timestamp... PASSED - Input accepted correctly
-Testing String since timestamp... PASSED - Invalid input properly rejected
-Testing Negative timestamp... PASSED - Invalid input properly rejected
-
-=== Limit Field Validation ===
-Testing Valid limit... PASSED - Input accepted correctly
-Testing Zero limit... PASSED - Input accepted correctly
-Testing String limit... PASSED - Invalid input properly rejected
-Testing Negative limit... PASSED - Invalid input properly rejected
-
-=== Multiple Filters ===
-Testing Two valid filters... PASSED - Input accepted correctly
-Testing Many filters... PASSED - Input accepted correctly
-
-=== Test Results ===
-Total tests: 47
-Passed: 47
-Failed: 0
-✓ All input validation tests passed!
-The relay properly validates input.
-2026-04-01 09:57:41 - \033[0;32m✓ Input Validation Tests PASSED\033[0m (Duration: 1s)
-2026-04-01 09:57:41 - 
-2026-04-01 09:57:41 - \033[0;34m=== PERFORMANCE TEST SUITES ===\033[0m
-2026-04-01 09:57:41 - ==========================================
-2026-04-01 09:57:41 - Running Test Suite: Subscription Limit Tests
-2026-04-01 09:57:41 - Description: Subscription limit enforcement testing
-2026-04-01 09:57:41 - ==========================================
-=== Subscription Limit Test ===
-[INFO] Testing relay at: ws://127.0.0.1:8888
-[INFO] Note: This test assumes default subscription limits (max 25 per client)
-
-=== Test 1: Basic Connectivity ===
-[INFO] Testing basic WebSocket connection...
-[PASS] Basic connectivity works
-
-=== Test 2: Subscription Limit Enforcement ===
-[INFO] Testing subscription limits by creating multiple subscriptions...
-[INFO] Creating multiple subscriptions within a single connection...
-[INFO] Hit subscription limit at subscription 2
-[PASS] Subscription limit enforcement working (limit hit after 1 subscriptions)
-
-=== Test Complete ===
-2026-04-01 09:57:42 - \033[0;32m✓ Subscription Limit Tests PASSED\033[0m (Duration: 1s)
-2026-04-01 09:57:42 - ==========================================
-2026-04-01 09:57:42 - Running Test Suite: Load Testing
-2026-04-01 09:57:42 - Description: High concurrent connection testing
-2026-04-01 09:57:42 - ==========================================
-==========================================
-C-Relay Load Testing Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-✓ Relay is accessible
-
-==========================================
-Load Test: Light Load Test
-Description: Basic load test with moderate concurrent connections
-Concurrent clients: 10
-Messages per client: 5
-==========================================
-Launching 10 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 1s
-Total connections attempted: 10
-Successful connections: 10
-Failed connections: 0
-Connection success rate: 100%
-Messages expected: 50
-Messages sent: 50
-Messages received: 100
-✓ EXCELLENT: High connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Medium Load Test
-Description: Moderate load test with higher concurrency
-Concurrent clients: 25
-Messages per client: 10
-==========================================
-Launching 25 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 4s
-Total connections attempted: 35
-Successful connections: 25
-Failed connections: 0
-Connection success rate: 71%
-Messages expected: 250
-Messages sent: 250
-Messages received: 500
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Heavy Load Test
-Description: Heavy load test with high concurrency
-Concurrent clients: 50
-Messages per client: 20
-==========================================
-Launching 50 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 15s
-Total connections attempted: 85
-Successful connections: 50
-Failed connections: 0
-Connection success rate: 58%
-Messages expected: 1000
-Messages sent: 1000
-Messages received: 2000
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Stress Test
-Description: Maximum load test to find breaking point
-Concurrent clients: 100
-Messages per client: 50
-==========================================
-Launching 100 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 64s
-Total connections attempted: 185
-Successful connections: 100
-Failed connections: 0
-Connection success rate: 54%
-Messages expected: 5000
-Messages sent: 5000
-Messages received: 7500
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Testing Complete
-==========================================
-All load tests completed. Check individual test results above.
-If any tests failed, the relay may need optimization or have resource limits.
-2026-04-01 09:59:07 - \033[0;32m✓ Load Testing PASSED\033[0m (Duration: 85s)
-2026-04-01 09:59:07 - ==========================================
-2026-04-01 09:59:07 - Running Test Suite: Stress Testing
-2026-04-01 09:59:07 - Description: Resource usage and stability testing
-2026-04-01 09:59:07 - ==========================================
-2026-04-01 09:59:07 - \033[0;31mERROR: Test script stress_tests.sh not found\033[0m
diff --git a/tests/test_results_20260401_110200.log b/tests/test_results_20260401_110200.log
deleted file mode 100644
index c1a47c7..0000000
--- a/tests/test_results_20260401_110200.log
+++ /dev/null
@@ -1,733 +0,0 @@
-2026-04-01 11:02:00 - ==========================================
-2026-04-01 11:02:00 - C-Relay Comprehensive Test Suite Runner
-2026-04-01 11:02:00 - ==========================================
-2026-04-01 11:02:00 - Relay URL: ws://127.0.0.1:8888
-2026-04-01 11:02:00 - Log file: test_results_20260401_110200.log
-2026-04-01 11:02:00 - Report file: test_report_20260401_110200.html
-2026-04-01 11:02:00 - 
-2026-04-01 11:02:00 - Checking relay status at ws://127.0.0.1:8888...
-2026-04-01 11:02:00 - \033[0;32m✓ Relay HTTP endpoint is accessible\033[0m
-2026-04-01 11:02:00 - 
-2026-04-01 11:02:00 - Starting comprehensive test execution...
-2026-04-01 11:02:00 - 
-2026-04-01 11:02:00 - \033[0;34m=== SECURITY TEST SUITES ===\033[0m
-2026-04-01 11:02:00 - ==========================================
-2026-04-01 11:02:00 - Running Test Suite: SQL Injection Tests
-2026-04-01 11:02:00 - Description: Comprehensive SQL injection vulnerability testing
-2026-04-01 11:02:00 - ==========================================
-==========================================
-C-Relay SQL Injection Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - Valid query works
-
-=== Authors Filter SQL Injection Tests ===
-Testing Authors filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== IDs Filter SQL Injection Tests ===
-Testing IDs filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Kinds Filter SQL Injection Tests ===
-Testing Kinds filter with string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with negative value... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with very large value... PASSED - SQL injection blocked (rejected with error)
-
-=== Search Filter SQL Injection Tests ===
-Testing Search filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Tag Filter SQL Injection Tests ===
-Testing #e tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-
-=== Timestamp Filter SQL Injection Tests ===
-Testing Since parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Until parameter injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Limit Parameter SQL Injection Tests ===
-Testing Limit parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Limit with UNION... PASSED - SQL injection blocked (rejected with error)
-
-=== Complex Multi-Filter SQL Injection Tests ===
-Testing Multi-filter with authors injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with search injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with tag injection... PASSED - SQL injection blocked (query sanitized)
-
-=== COUNT Message SQL Injection Tests ===
-Testing COUNT with authors payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Edge Case SQL Injection Tests ===
-Testing Empty string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Null byte injection... PASSED - SQL injection blocked (silently rejected)
-Testing Unicode injection... PASSED - SQL injection blocked (rejected with error)
-Testing Very long injection payload... PASSED - SQL injection blocked (rejected with error)
-
-=== Subscription ID SQL Injection Tests ===
-Testing Subscription ID injection... PASSED - SQL injection blocked (rejected with error)
-Testing Subscription ID with quotes... PASSED - SQL injection blocked (silently rejected)
-
-=== CLOSE Message SQL Injection Tests ===
-Testing CLOSE with injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Test Results ===
-Total tests: 318
-Passed: 318
-Failed: 0
-✓ All SQL injection tests passed!
-The relay appears to be protected against SQL injection attacks.
-2026-04-01 11:02:07 - \033[0;32m✓ SQL Injection Tests PASSED\033[0m (Duration: 7s)
-2026-04-01 11:02:07 - ==========================================
-2026-04-01 11:02:07 - Running Test Suite: Filter Validation Tests
-2026-04-01 11:02:07 - Description: Input validation for REQ and COUNT messages
-2026-04-01 11:02:07 - ==========================================
-=== C-Relay Filter Validation Tests ===
-Testing against relay at ws://127.0.0.1:8888
-
-Testing Valid REQ message... PASSED
-Testing Valid COUNT message... PASSED
-
-=== Testing Filter Array Validation ===
-Testing Non-object filter... PASSED
-Testing Too many filters... PASSED
-
-=== Testing Authors Validation ===
-Testing Invalid author type... PASSED
-Testing Invalid author hex... PASSED
-Testing Too many authors... PASSED
-
-=== Testing IDs Validation ===
-Testing Invalid ID type... PASSED
-Testing Invalid ID hex... PASSED
-Testing Too many IDs... PASSED
-
-=== Testing Kinds Validation ===
-Testing Invalid kind type... PASSED
-Testing Negative kind... PASSED
-Testing Too large kind... PASSED
-Testing Too many kinds... PASSED
-
-=== Testing Timestamp Validation ===
-Testing Invalid since type... PASSED
-Testing Negative since... PASSED
-Testing Invalid until type... PASSED
-Testing Negative until... PASSED
-
-=== Testing Limit Validation ===
-Testing Invalid limit type... PASSED
-Testing Negative limit... PASSED
-Testing Too large limit... PASSED
-
-=== Testing Search Validation ===
-Testing Invalid search type... PASSED
-Testing Search too long... PASSED
-Testing Search SQL injection... PASSED
-
-=== Testing Tag Filter Validation ===
-Testing Invalid tag filter type... PASSED
-Testing Too many tag values... PASSED
-Testing Tag value too long... PASSED
-
-=== Testing Rate Limiting ===
-Testing rate limiting with malformed requests... UNCERTAIN - Rate limiting may not have triggered (this could be normal)
-
-=== Test Results ===
-Total tests: 28
-Passed: 28
-Failed: 0
-All tests passed!
-2026-04-01 11:02:10 - \033[0;32m✓ Filter Validation Tests PASSED\033[0m (Duration: 3s)
-2026-04-01 11:02:10 - ==========================================
-2026-04-01 11:02:10 - Running Test Suite: Subscription Validation Tests
-2026-04-01 11:02:10 - Description: Subscription ID and message validation
-2026-04-01 11:02:10 - ==========================================
-Testing subscription ID validation fixes...
-Testing malformed subscription IDs...
-Empty ID test: Connection failed (expected)
-Long ID test: Connection failed (expected)
-Invalid chars test: Connection failed (expected)
-NULL ID test: Connection failed (expected)
-Valid ID test: Failed
-Testing CLOSE message validation...
-CLOSE empty ID test: Connection failed (expected)
-CLOSE valid ID test: Failed
-Subscription validation tests completed.
-2026-04-01 11:02:10 - \033[0;32m✓ Subscription Validation Tests PASSED\033[0m (Duration: 0s)
-2026-04-01 11:02:10 - ==========================================
-2026-04-01 11:02:10 - Running Test Suite: Memory Corruption Tests
-2026-04-01 11:02:10 - Description: Buffer overflow and memory safety testing
-2026-04-01 11:02:10 - ==========================================
-==========================================
-C-Relay Memory Corruption Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-Note: These tests may cause the relay to crash if vulnerabilities exist
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - No memory corruption detected
-
-=== Subscription ID Memory Corruption Tests ===
-Testing Empty subscription ID... UNCERTAIN - Expected error but got normal response
-Testing Very long subscription ID (1KB)... UNCERTAIN - Expected error but got normal response
-Testing Very long subscription ID (10KB)... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with null bytes... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with special chars... UNCERTAIN - Expected error but got normal response
-Testing Unicode subscription ID... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with path traversal... UNCERTAIN - Expected error but got normal response
-
-=== Filter Array Memory Corruption Tests ===
-Testing Too many filters (50)... UNCERTAIN - Expected error but got normal response
-
-=== Concurrent Access Memory Tests ===
-Testing Concurrent subscription creation... ["EVENT","concurrent_1775055730660028379",{"pubkey":"26a8961265cc6db56d18b95fb54ad16a54259ab4342a2bd83e102846cb120e94","created_at":1775055645,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"f5ac528fb84b75bdef8050a56f0c2b4733389b2d97f91344811a7c3bf7e0bc4d","sig":"8c7480c64a4db80b643f60d4d6d38b5585bd6b10da3dbee0eab7b60796ee18826400162242c7056782a410de0b119860ba3210bffba78f0f6be466634e3b6940"}]
-["EVENT","concurrent_1775055730660028379",{"pubkey":"26a8961265cc6db56d18b95fb54ad16a54259ab4342a2bd83e102846cb120e94","created_at":1775055645,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"f5ac528fb84b75bdef8050a56f0c2b4733389b2d97f91344811a7c3bf7e0bc4d","sig":"8c7480c64a4db80b643f60d4d6d38b5585bd6b10da3dbee0eab7b60796ee18826400162242c7056782a410de0b119860ba3210bffba78f0f6be466634e3b6940"}]
-["EVENT","concurrent_1775055730660028379",{"pubkey":"26a8961265cc6db56d18b95fb54ad16a54259ab4342a2bd83e102846cb120e94","created_at":1775055645,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"f5ac528fb84b75bdef8050a56f0c2b4733389b2d97f91344811a7c3bf7e0bc4d","sig":"8c7480c64a4db80b643f60d4d6d38b5585bd6b10da3dbee0eab7b60796ee18826400162242c7056782a410de0b119860ba3210bffba78f0f6be466634e3b6940"}]
-["EVENT","concurrent_1775055730660028379",{"pubkey":"26a8961265cc6db56d18b95fb54ad16a54259ab4342a2bd83e102846cb120e94","created_at":1775055645,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"f5ac528fb84b75bdef8050a56f0c2b4733389b2d97f91344811a7c3bf7e0bc4d","sig":"8c7480c64a4db80b643f60d4d6d38b5585bd6b10da3dbee0eab7b60796ee18826400162242c7056782a410de0b119860ba3210bffba78f0f6be466634e3b6940"}]
-["EVENT","concurrent_1775055730660028379",{"pubkey":"26a8961265cc6db56d18b95fb54ad16a54259ab4342a2bd83e102846cb120e94","created_at":1775055645,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"f5ac528fb84b75bdef8050a56f0c2b4733389b2d97f91344811a7c3bf7e0bc4d","sig":"8c7480c64a4db80b643f60d4d6d38b5585bd6b10da3dbee0eab7b60796ee18826400162242c7056782a410de0b119860ba3210bffba78f0f6be466634e3b6940"}]
-["EVENT","concurrent_1775055730660028379",{"pubkey":"26a8961265cc6db56d18b95fb54ad16a54259ab4342a2bd83e102846cb120e94","created_at":1775055645,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"f5ac528fb84b75bdef8050a56f0c2b4733389b2d97f91344811a7c3bf7e0bc4d","sig":"8c7480c64a4db80b643f60d4d6d38b5585bd6b10da3dbee0eab7b60796ee18826400162242c7056782a410de0b119860ba3210bffba78f0f6be466634e3b6940"}]
-["EVENT","concurrent_1775055730660028379",{"pubkey":"26a8961265cc6db56d18b95fb54ad16a54259ab4342a2bd83e102846cb120e94","created_at":1775055645,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"f5ac528fb84b75bdef8050a56f0c2b4733389b2d97f91344811a7c3bf7e0bc4d","sig":"8c7480c64a4db80b643f60d4d6d38b5585bd6b10da3dbee0eab7b60796ee18826400162242c7056782a410de0b119860ba3210bffba78f0f6be466634e3b6940"}]
-["EVENT","concurrent_1775055730660028379",{"pubkey":"26a8961265cc6db56d18b95fb54ad16a54259ab4342a2bd83e102846cb120e94","created_at":1775055645,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"f5ac528fb84b75bdef8050a56f0c2b4733389b2d97f91344811a7c3bf7e0bc4d","sig":"8c7480c64a4db80b643f60d4d6d38b5585bd6b10da3dbee0eab7b60796ee18826400162242c7056782a410de0b119860ba3210bffba78f0f6be466634e3b6940"}]
-["EVENT","concurrent_1775055730660028379",{"pubkey":"26a8961265cc6db56d18b95fb54ad16a54259ab4342a2bd83e102846cb120e94","created_at":1775055645,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"f5ac528fb84b75bdef8050a56f0c2b4733389b2d97f91344811a7c3bf7e0bc4d","sig":"8c7480c64a4db80b643f60d4d6d38b5585bd6b10da3dbee0eab7b60796ee18826400162242c7056782a410de0b119860ba3210bffba78f0f6be466634e3b6940"}]
-["EVENT","concurrent_1775055730660028379",{"pubkey":"26a8961265cc6db56d18b95fb54ad16a54259ab4342a2bd83e102846cb120e94","created_at":1775055645,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"f5ac528fb84b75bdef8050a56f0c2b4733389b2d97f91344811a7c3bf7e0bc4d","sig":"8c7480c64a4db80b643f60d4d6d38b5585bd6b10da3dbee0eab7b60796ee18826400162242c7056782a410de0b119860ba3210bffba78f0f6be466634e3b6940"}]
-PASSED - Concurrent access handled safely
-Testing Concurrent CLOSE operations... 
-
-
-
-
-
-
-
-
-
-PASSED - Concurrent access handled safely
-
-=== Malformed JSON Memory Tests ===
-Testing Unclosed JSON object... UNCERTAIN - Expected error but got normal response
-Testing Mismatched brackets... UNCERTAIN - Expected error but got normal response
-Testing Extra closing brackets... UNCERTAIN - Expected error but got normal response
-Testing Null bytes in JSON... UNCERTAIN - Expected error but got normal response
-
-=== Large Message Memory Tests ===
-Testing Very large filter array... UNCERTAIN - Expected error but got normal response
-Testing Very long search term... UNCERTAIN - Expected error but got normal response
-
-=== Test Results ===
-Total tests: 17
-Passed: 17
-Failed: 0
-✓ All memory corruption tests passed!
-The relay appears to handle memory safely.
-2026-04-01 11:02:11 - \033[0;32m✓ Memory Corruption Tests PASSED\033[0m (Duration: 1s)
-2026-04-01 11:02:11 - ==========================================
-2026-04-01 11:02:11 - Running Test Suite: Input Validation Tests
-2026-04-01 11:02:11 - Description: Comprehensive input boundary testing
-2026-04-01 11:02:11 - ==========================================
-==========================================
-C-Relay Input Validation Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - Input accepted correctly
-
-=== Message Type Validation ===
-Testing Invalid message type - string... PASSED - Invalid input properly rejected
-Testing Invalid message type - number... PASSED - Invalid input properly rejected
-Testing Invalid message type - null... PASSED - Invalid input properly rejected
-Testing Invalid message type - object... PASSED - Invalid input properly rejected
-Testing Empty message type... PASSED - Invalid input properly rejected
-Testing Very long message type... PASSED - Invalid input properly rejected
-
-=== Message Structure Validation ===
-Testing Too few arguments... PASSED - Invalid input properly rejected
-Testing Too many arguments... PASSED - Invalid input properly rejected
-Testing Non-array message... PASSED - Invalid input properly rejected
-Testing Empty array... PASSED - Invalid input properly rejected
-Testing Nested arrays incorrectly... PASSED - Invalid input properly rejected
-
-=== Subscription ID Boundary Tests ===
-Testing Valid subscription ID... PASSED - Input accepted correctly
-Testing Empty subscription ID... PASSED - Invalid input properly rejected
-Testing Subscription ID with spaces... PASSED - Invalid input properly rejected
-Testing Subscription ID with newlines... PASSED - Invalid input properly rejected
-Testing Subscription ID with tabs... PASSED - Invalid input properly rejected
-Testing Subscription ID with control chars... PASSED - Invalid input properly rejected
-Testing Unicode subscription ID... PASSED - Invalid input properly rejected
-Testing Very long subscription ID... PASSED - Invalid input properly rejected
-
-=== Filter Object Validation ===
-Testing Valid empty filter... PASSED - Input accepted correctly
-Testing Non-object filter... PASSED - Invalid input properly rejected
-Testing Null filter... PASSED - Invalid input properly rejected
-Testing Array filter... PASSED - Invalid input properly rejected
-Testing Filter with invalid keys... PASSED - Input accepted correctly
-
-=== Authors Field Validation ===
-Testing Valid authors array... PASSED - Input accepted correctly
-Testing Empty authors array... PASSED - Input accepted correctly
-Testing Non-array authors... PASSED - Invalid input properly rejected
-Testing Invalid hex in authors... PASSED - Invalid input properly rejected
-Testing Short pubkey in authors... PASSED - Invalid input properly rejected
-
-=== IDs Field Validation ===
-Testing Valid ids array... PASSED - Input accepted correctly
-Testing Empty ids array... PASSED - Input accepted correctly
-Testing Non-array ids... PASSED - Invalid input properly rejected
-
-=== Kinds Field Validation ===
-Testing Valid kinds array... PASSED - Input accepted correctly
-Testing Empty kinds array... PASSED - Input accepted correctly
-Testing Non-array kinds... PASSED - Invalid input properly rejected
-Testing String in kinds... PASSED - Invalid input properly rejected
-
-=== Timestamp Field Validation ===
-Testing Valid since timestamp... PASSED - Input accepted correctly
-Testing Valid until timestamp... PASSED - Input accepted correctly
-Testing String since timestamp... PASSED - Invalid input properly rejected
-Testing Negative timestamp... PASSED - Invalid input properly rejected
-
-=== Limit Field Validation ===
-Testing Valid limit... PASSED - Input accepted correctly
-Testing Zero limit... PASSED - Input accepted correctly
-Testing String limit... PASSED - Invalid input properly rejected
-Testing Negative limit... PASSED - Invalid input properly rejected
-
-=== Multiple Filters ===
-Testing Two valid filters... PASSED - Input accepted correctly
-Testing Many filters... PASSED - Input accepted correctly
-
-=== Test Results ===
-Total tests: 47
-Passed: 47
-Failed: 0
-✓ All input validation tests passed!
-The relay properly validates input.
-2026-04-01 11:02:12 - \033[0;32m✓ Input Validation Tests PASSED\033[0m (Duration: 1s)
-2026-04-01 11:02:12 - 
-2026-04-01 11:02:12 - \033[0;34m=== PERFORMANCE TEST SUITES ===\033[0m
-2026-04-01 11:02:12 - ==========================================
-2026-04-01 11:02:12 - Running Test Suite: Subscription Limit Tests
-2026-04-01 11:02:12 - Description: Subscription limit enforcement testing
-2026-04-01 11:02:12 - ==========================================
-=== Subscription Limit Test ===
-[INFO] Testing relay at: ws://127.0.0.1:8888
-[INFO] Note: This test assumes default subscription limits (max 25 per client)
-
-=== Test 1: Basic Connectivity ===
-[INFO] Testing basic WebSocket connection...
-[PASS] Basic connectivity works
-
-=== Test 2: Subscription Limit Enforcement ===
-[INFO] Testing subscription limits by creating multiple subscriptions...
-[INFO] Creating multiple subscriptions within a single connection...
-[INFO] Hit subscription limit at subscription 2
-[PASS] Subscription limit enforcement working (limit hit after 1 subscriptions)
-
-=== Test Complete ===
-2026-04-01 11:02:12 - \033[0;32m✓ Subscription Limit Tests PASSED\033[0m (Duration: 0s)
-2026-04-01 11:02:12 - ==========================================
-2026-04-01 11:02:12 - Running Test Suite: Load Testing
-2026-04-01 11:02:12 - Description: High concurrent connection testing
-2026-04-01 11:02:12 - ==========================================
-==========================================
-C-Relay Load Testing Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-✓ Relay is accessible
-
-==========================================
-Load Test: Light Load Test
-Description: Basic load test with moderate concurrent connections
-Concurrent clients: 10
-Messages per client: 5
-==========================================
-Launching 10 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 1s
-Total connections attempted: 10
-Successful connections: 10
-Failed connections: 0
-Connection success rate: 100%
-Messages expected: 50
-Messages sent: 50
-Messages received: 100
-✓ EXCELLENT: High connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Medium Load Test
-Description: Moderate load test with higher concurrency
-Concurrent clients: 25
-Messages per client: 10
-==========================================
-Launching 25 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 4s
-Total connections attempted: 35
-Successful connections: 25
-Failed connections: 0
-Connection success rate: 71%
-Messages expected: 250
-Messages sent: 250
-Messages received: 500
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Heavy Load Test
-Description: Heavy load test with high concurrency
-Concurrent clients: 50
-Messages per client: 20
-==========================================
-Launching 50 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 14s
-Total connections attempted: 85
-Successful connections: 50
-Failed connections: 0
-Connection success rate: 58%
-Messages expected: 1000
-Messages sent: 1000
-Messages received: 2000
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Stress Test
-Description: Maximum load test to find breaking point
-Concurrent clients: 100
-Messages per client: 50
-==========================================
-Launching 100 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 64s
-Total connections attempted: 185
-Successful connections: 100
-Failed connections: 0
-Connection success rate: 54%
-Messages expected: 5000
-Messages sent: 5000
-Messages received: 7500
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Testing Complete
-==========================================
-All load tests completed. Check individual test results above.
-If any tests failed, the relay may need optimization or have resource limits.
-2026-04-01 11:03:37 - \033[0;32m✓ Load Testing PASSED\033[0m (Duration: 85s)
-2026-04-01 11:03:37 - ==========================================
-2026-04-01 11:03:37 - Running Test Suite: Stress Testing
-2026-04-01 11:03:37 - Description: Resource usage and stability testing
-2026-04-01 11:03:37 - ==========================================
-2026-04-01 11:03:37 - \033[0;31mERROR: Test script stress_tests.sh not found\033[0m
diff --git a/tests/test_results_20260401_112924.log b/tests/test_results_20260401_112924.log
deleted file mode 100644
index 3652d61..0000000
--- a/tests/test_results_20260401_112924.log
+++ /dev/null
@@ -1,733 +0,0 @@
-2026-04-01 11:29:24 - ==========================================
-2026-04-01 11:29:24 - C-Relay Comprehensive Test Suite Runner
-2026-04-01 11:29:24 - ==========================================
-2026-04-01 11:29:24 - Relay URL: ws://127.0.0.1:8888
-2026-04-01 11:29:24 - Log file: test_results_20260401_112924.log
-2026-04-01 11:29:24 - Report file: test_report_20260401_112924.html
-2026-04-01 11:29:24 - 
-2026-04-01 11:29:24 - Checking relay status at ws://127.0.0.1:8888...
-2026-04-01 11:29:25 - \033[0;32m✓ Relay HTTP endpoint is accessible\033[0m
-2026-04-01 11:29:25 - 
-2026-04-01 11:29:25 - Starting comprehensive test execution...
-2026-04-01 11:29:25 - 
-2026-04-01 11:29:25 - \033[0;34m=== SECURITY TEST SUITES ===\033[0m
-2026-04-01 11:29:25 - ==========================================
-2026-04-01 11:29:25 - Running Test Suite: SQL Injection Tests
-2026-04-01 11:29:25 - Description: Comprehensive SQL injection vulnerability testing
-2026-04-01 11:29:25 - ==========================================
-==========================================
-C-Relay SQL Injection Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - Valid query works
-
-=== Authors Filter SQL Injection Tests ===
-Testing Authors filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== IDs Filter SQL Injection Tests ===
-Testing IDs filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Kinds Filter SQL Injection Tests ===
-Testing Kinds filter with string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with negative value... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with very large value... PASSED - SQL injection blocked (rejected with error)
-
-=== Search Filter SQL Injection Tests ===
-Testing Search filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Tag Filter SQL Injection Tests ===
-Testing #e tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-
-=== Timestamp Filter SQL Injection Tests ===
-Testing Since parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Until parameter injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Limit Parameter SQL Injection Tests ===
-Testing Limit parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Limit with UNION... PASSED - SQL injection blocked (rejected with error)
-
-=== Complex Multi-Filter SQL Injection Tests ===
-Testing Multi-filter with authors injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with search injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with tag injection... PASSED - SQL injection blocked (query sanitized)
-
-=== COUNT Message SQL Injection Tests ===
-Testing COUNT with authors payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Edge Case SQL Injection Tests ===
-Testing Empty string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Null byte injection... PASSED - SQL injection blocked (silently rejected)
-Testing Unicode injection... PASSED - SQL injection blocked (rejected with error)
-Testing Very long injection payload... PASSED - SQL injection blocked (rejected with error)
-
-=== Subscription ID SQL Injection Tests ===
-Testing Subscription ID injection... PASSED - SQL injection blocked (rejected with error)
-Testing Subscription ID with quotes... PASSED - SQL injection blocked (silently rejected)
-
-=== CLOSE Message SQL Injection Tests ===
-Testing CLOSE with injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Test Results ===
-Total tests: 318
-Passed: 318
-Failed: 0
-✓ All SQL injection tests passed!
-The relay appears to be protected against SQL injection attacks.
-2026-04-01 11:29:32 - \033[0;32m✓ SQL Injection Tests PASSED\033[0m (Duration: 7s)
-2026-04-01 11:29:32 - ==========================================
-2026-04-01 11:29:32 - Running Test Suite: Filter Validation Tests
-2026-04-01 11:29:32 - Description: Input validation for REQ and COUNT messages
-2026-04-01 11:29:32 - ==========================================
-=== C-Relay Filter Validation Tests ===
-Testing against relay at ws://127.0.0.1:8888
-
-Testing Valid REQ message... PASSED
-Testing Valid COUNT message... PASSED
-
-=== Testing Filter Array Validation ===
-Testing Non-object filter... PASSED
-Testing Too many filters... PASSED
-
-=== Testing Authors Validation ===
-Testing Invalid author type... PASSED
-Testing Invalid author hex... PASSED
-Testing Too many authors... PASSED
-
-=== Testing IDs Validation ===
-Testing Invalid ID type... PASSED
-Testing Invalid ID hex... PASSED
-Testing Too many IDs... PASSED
-
-=== Testing Kinds Validation ===
-Testing Invalid kind type... PASSED
-Testing Negative kind... PASSED
-Testing Too large kind... PASSED
-Testing Too many kinds... PASSED
-
-=== Testing Timestamp Validation ===
-Testing Invalid since type... PASSED
-Testing Negative since... PASSED
-Testing Invalid until type... PASSED
-Testing Negative until... PASSED
-
-=== Testing Limit Validation ===
-Testing Invalid limit type... PASSED
-Testing Negative limit... PASSED
-Testing Too large limit... PASSED
-
-=== Testing Search Validation ===
-Testing Invalid search type... PASSED
-Testing Search too long... PASSED
-Testing Search SQL injection... PASSED
-
-=== Testing Tag Filter Validation ===
-Testing Invalid tag filter type... PASSED
-Testing Too many tag values... PASSED
-Testing Tag value too long... PASSED
-
-=== Testing Rate Limiting ===
-Testing rate limiting with malformed requests... UNCERTAIN - Rate limiting may not have triggered (this could be normal)
-
-=== Test Results ===
-Total tests: 28
-Passed: 28
-Failed: 0
-All tests passed!
-2026-04-01 11:29:35 - \033[0;32m✓ Filter Validation Tests PASSED\033[0m (Duration: 3s)
-2026-04-01 11:29:35 - ==========================================
-2026-04-01 11:29:35 - Running Test Suite: Subscription Validation Tests
-2026-04-01 11:29:35 - Description: Subscription ID and message validation
-2026-04-01 11:29:35 - ==========================================
-Testing subscription ID validation fixes...
-Testing malformed subscription IDs...
-Empty ID test: Connection failed (expected)
-Long ID test: Connection failed (expected)
-Invalid chars test: Connection failed (expected)
-NULL ID test: Connection failed (expected)
-Valid ID test: Failed
-Testing CLOSE message validation...
-CLOSE empty ID test: Connection failed (expected)
-CLOSE valid ID test: Failed
-Subscription validation tests completed.
-2026-04-01 11:29:35 - \033[0;32m✓ Subscription Validation Tests PASSED\033[0m (Duration: 0s)
-2026-04-01 11:29:35 - ==========================================
-2026-04-01 11:29:35 - Running Test Suite: Memory Corruption Tests
-2026-04-01 11:29:35 - Description: Buffer overflow and memory safety testing
-2026-04-01 11:29:35 - ==========================================
-==========================================
-C-Relay Memory Corruption Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-Note: These tests may cause the relay to crash if vulnerabilities exist
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - No memory corruption detected
-
-=== Subscription ID Memory Corruption Tests ===
-Testing Empty subscription ID... UNCERTAIN - Expected error but got normal response
-Testing Very long subscription ID (1KB)... UNCERTAIN - Expected error but got normal response
-Testing Very long subscription ID (10KB)... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with null bytes... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with special chars... UNCERTAIN - Expected error but got normal response
-Testing Unicode subscription ID... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with path traversal... UNCERTAIN - Expected error but got normal response
-
-=== Filter Array Memory Corruption Tests ===
-Testing Too many filters (50)... UNCERTAIN - Expected error but got normal response
-
-=== Concurrent Access Memory Tests ===
-Testing Concurrent subscription creation... ["EVENT","concurrent_1775057376377657551",{"pubkey":"7b013abdf0cbc8f994e66018539fbcb750f3be118a70d8bdcf3b3e86dd2ebb40","created_at":1775057288,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"210f21884a3581064f4d181bc10e4088b5161216ddc7088f5c39e570240687b3","sig":"a04a697e6b3a53a1df4e3d7d06da2483f07d45c97a939076bd8b28216425a854af5f7e463542adbed9b71af68d36d7e0296be0048c3156a51ed0defa685a5171"}]
-["EVENT","concurrent_1775057376377657551",{"pubkey":"7b013abdf0cbc8f994e66018539fbcb750f3be118a70d8bdcf3b3e86dd2ebb40","created_at":1775057288,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"210f21884a3581064f4d181bc10e4088b5161216ddc7088f5c39e570240687b3","sig":"a04a697e6b3a53a1df4e3d7d06da2483f07d45c97a939076bd8b28216425a854af5f7e463542adbed9b71af68d36d7e0296be0048c3156a51ed0defa685a5171"}]
-["EVENT","concurrent_1775057376377657551",{"pubkey":"7b013abdf0cbc8f994e66018539fbcb750f3be118a70d8bdcf3b3e86dd2ebb40","created_at":1775057288,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"210f21884a3581064f4d181bc10e4088b5161216ddc7088f5c39e570240687b3","sig":"a04a697e6b3a53a1df4e3d7d06da2483f07d45c97a939076bd8b28216425a854af5f7e463542adbed9b71af68d36d7e0296be0048c3156a51ed0defa685a5171"}]
-["EVENT","concurrent_1775057376377657551",{"pubkey":"7b013abdf0cbc8f994e66018539fbcb750f3be118a70d8bdcf3b3e86dd2ebb40","created_at":1775057288,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"210f21884a3581064f4d181bc10e4088b5161216ddc7088f5c39e570240687b3","sig":"a04a697e6b3a53a1df4e3d7d06da2483f07d45c97a939076bd8b28216425a854af5f7e463542adbed9b71af68d36d7e0296be0048c3156a51ed0defa685a5171"}]
-["EVENT","concurrent_1775057376377657551",{"pubkey":"7b013abdf0cbc8f994e66018539fbcb750f3be118a70d8bdcf3b3e86dd2ebb40","created_at":1775057288,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"210f21884a3581064f4d181bc10e4088b5161216ddc7088f5c39e570240687b3","sig":"a04a697e6b3a53a1df4e3d7d06da2483f07d45c97a939076bd8b28216425a854af5f7e463542adbed9b71af68d36d7e0296be0048c3156a51ed0defa685a5171"}]
-["EVENT","concurrent_1775057376377657551",{"pubkey":"7b013abdf0cbc8f994e66018539fbcb750f3be118a70d8bdcf3b3e86dd2ebb40","created_at":1775057288,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"210f21884a3581064f4d181bc10e4088b5161216ddc7088f5c39e570240687b3","sig":"a04a697e6b3a53a1df4e3d7d06da2483f07d45c97a939076bd8b28216425a854af5f7e463542adbed9b71af68d36d7e0296be0048c3156a51ed0defa685a5171"}]
-["EVENT","concurrent_1775057376377657551",{"pubkey":"7b013abdf0cbc8f994e66018539fbcb750f3be118a70d8bdcf3b3e86dd2ebb40","created_at":1775057288,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"210f21884a3581064f4d181bc10e4088b5161216ddc7088f5c39e570240687b3","sig":"a04a697e6b3a53a1df4e3d7d06da2483f07d45c97a939076bd8b28216425a854af5f7e463542adbed9b71af68d36d7e0296be0048c3156a51ed0defa685a5171"}]
-["EVENT","concurrent_1775057376377657551",{"pubkey":"7b013abdf0cbc8f994e66018539fbcb750f3be118a70d8bdcf3b3e86dd2ebb40","created_at":1775057288,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"210f21884a3581064f4d181bc10e4088b5161216ddc7088f5c39e570240687b3","sig":"a04a697e6b3a53a1df4e3d7d06da2483f07d45c97a939076bd8b28216425a854af5f7e463542adbed9b71af68d36d7e0296be0048c3156a51ed0defa685a5171"}]
-["EVENT","concurrent_1775057376377657551",{"pubkey":"7b013abdf0cbc8f994e66018539fbcb750f3be118a70d8bdcf3b3e86dd2ebb40","created_at":1775057288,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"210f21884a3581064f4d181bc10e4088b5161216ddc7088f5c39e570240687b3","sig":"a04a697e6b3a53a1df4e3d7d06da2483f07d45c97a939076bd8b28216425a854af5f7e463542adbed9b71af68d36d7e0296be0048c3156a51ed0defa685a5171"}]
-["EVENT","concurrent_1775057376377657551",{"pubkey":"7b013abdf0cbc8f994e66018539fbcb750f3be118a70d8bdcf3b3e86dd2ebb40","created_at":1775057288,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (4096 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"210f21884a3581064f4d181bc10e4088b5161216ddc7088f5c39e570240687b3","sig":"a04a697e6b3a53a1df4e3d7d06da2483f07d45c97a939076bd8b28216425a854af5f7e463542adbed9b71af68d36d7e0296be0048c3156a51ed0defa685a5171"}]
-PASSED - Concurrent access handled safely
-Testing Concurrent CLOSE operations... 
-
-
-
-
-
-
-
-
-
-PASSED - Concurrent access handled safely
-
-=== Malformed JSON Memory Tests ===
-Testing Unclosed JSON object... UNCERTAIN - Expected error but got normal response
-Testing Mismatched brackets... UNCERTAIN - Expected error but got normal response
-Testing Extra closing brackets... UNCERTAIN - Expected error but got normal response
-Testing Null bytes in JSON... UNCERTAIN - Expected error but got normal response
-
-=== Large Message Memory Tests ===
-Testing Very large filter array... UNCERTAIN - Expected error but got normal response
-Testing Very long search term... UNCERTAIN - Expected error but got normal response
-
-=== Test Results ===
-Total tests: 17
-Passed: 17
-Failed: 0
-✓ All memory corruption tests passed!
-The relay appears to handle memory safely.
-2026-04-01 11:29:36 - \033[0;32m✓ Memory Corruption Tests PASSED\033[0m (Duration: 1s)
-2026-04-01 11:29:36 - ==========================================
-2026-04-01 11:29:36 - Running Test Suite: Input Validation Tests
-2026-04-01 11:29:36 - Description: Comprehensive input boundary testing
-2026-04-01 11:29:36 - ==========================================
-==========================================
-C-Relay Input Validation Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - Input accepted correctly
-
-=== Message Type Validation ===
-Testing Invalid message type - string... PASSED - Invalid input properly rejected
-Testing Invalid message type - number... PASSED - Invalid input properly rejected
-Testing Invalid message type - null... PASSED - Invalid input properly rejected
-Testing Invalid message type - object... PASSED - Invalid input properly rejected
-Testing Empty message type... PASSED - Invalid input properly rejected
-Testing Very long message type... PASSED - Invalid input properly rejected
-
-=== Message Structure Validation ===
-Testing Too few arguments... PASSED - Invalid input properly rejected
-Testing Too many arguments... PASSED - Invalid input properly rejected
-Testing Non-array message... PASSED - Invalid input properly rejected
-Testing Empty array... PASSED - Invalid input properly rejected
-Testing Nested arrays incorrectly... PASSED - Invalid input properly rejected
-
-=== Subscription ID Boundary Tests ===
-Testing Valid subscription ID... PASSED - Input accepted correctly
-Testing Empty subscription ID... PASSED - Invalid input properly rejected
-Testing Subscription ID with spaces... PASSED - Invalid input properly rejected
-Testing Subscription ID with newlines... PASSED - Invalid input properly rejected
-Testing Subscription ID with tabs... PASSED - Invalid input properly rejected
-Testing Subscription ID with control chars... PASSED - Invalid input properly rejected
-Testing Unicode subscription ID... PASSED - Invalid input properly rejected
-Testing Very long subscription ID... PASSED - Invalid input properly rejected
-
-=== Filter Object Validation ===
-Testing Valid empty filter... PASSED - Input accepted correctly
-Testing Non-object filter... PASSED - Invalid input properly rejected
-Testing Null filter... PASSED - Invalid input properly rejected
-Testing Array filter... PASSED - Invalid input properly rejected
-Testing Filter with invalid keys... PASSED - Input accepted correctly
-
-=== Authors Field Validation ===
-Testing Valid authors array... PASSED - Input accepted correctly
-Testing Empty authors array... PASSED - Input accepted correctly
-Testing Non-array authors... PASSED - Invalid input properly rejected
-Testing Invalid hex in authors... PASSED - Invalid input properly rejected
-Testing Short pubkey in authors... PASSED - Invalid input properly rejected
-
-=== IDs Field Validation ===
-Testing Valid ids array... PASSED - Input accepted correctly
-Testing Empty ids array... PASSED - Input accepted correctly
-Testing Non-array ids... PASSED - Invalid input properly rejected
-
-=== Kinds Field Validation ===
-Testing Valid kinds array... PASSED - Input accepted correctly
-Testing Empty kinds array... PASSED - Input accepted correctly
-Testing Non-array kinds... PASSED - Invalid input properly rejected
-Testing String in kinds... PASSED - Invalid input properly rejected
-
-=== Timestamp Field Validation ===
-Testing Valid since timestamp... PASSED - Input accepted correctly
-Testing Valid until timestamp... PASSED - Input accepted correctly
-Testing String since timestamp... PASSED - Invalid input properly rejected
-Testing Negative timestamp... PASSED - Invalid input properly rejected
-
-=== Limit Field Validation ===
-Testing Valid limit... PASSED - Input accepted correctly
-Testing Zero limit... PASSED - Input accepted correctly
-Testing String limit... PASSED - Invalid input properly rejected
-Testing Negative limit... PASSED - Invalid input properly rejected
-
-=== Multiple Filters ===
-Testing Two valid filters... PASSED - Input accepted correctly
-Testing Many filters... PASSED - Input accepted correctly
-
-=== Test Results ===
-Total tests: 47
-Passed: 47
-Failed: 0
-✓ All input validation tests passed!
-The relay properly validates input.
-2026-04-01 11:29:38 - \033[0;32m✓ Input Validation Tests PASSED\033[0m (Duration: 2s)
-2026-04-01 11:29:38 - 
-2026-04-01 11:29:38 - \033[0;34m=== PERFORMANCE TEST SUITES ===\033[0m
-2026-04-01 11:29:38 - ==========================================
-2026-04-01 11:29:38 - Running Test Suite: Subscription Limit Tests
-2026-04-01 11:29:38 - Description: Subscription limit enforcement testing
-2026-04-01 11:29:38 - ==========================================
-=== Subscription Limit Test ===
-[INFO] Testing relay at: ws://127.0.0.1:8888
-[INFO] Note: This test assumes default subscription limits (max 25 per client)
-
-=== Test 1: Basic Connectivity ===
-[INFO] Testing basic WebSocket connection...
-[PASS] Basic connectivity works
-
-=== Test 2: Subscription Limit Enforcement ===
-[INFO] Testing subscription limits by creating multiple subscriptions...
-[INFO] Creating multiple subscriptions within a single connection...
-[INFO] Hit subscription limit at subscription 2
-[PASS] Subscription limit enforcement working (limit hit after 1 subscriptions)
-
-=== Test Complete ===
-2026-04-01 11:29:38 - \033[0;32m✓ Subscription Limit Tests PASSED\033[0m (Duration: 0s)
-2026-04-01 11:29:38 - ==========================================
-2026-04-01 11:29:38 - Running Test Suite: Load Testing
-2026-04-01 11:29:38 - Description: High concurrent connection testing
-2026-04-01 11:29:38 - ==========================================
-==========================================
-C-Relay Load Testing Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-✓ Relay is accessible
-
-==========================================
-Load Test: Light Load Test
-Description: Basic load test with moderate concurrent connections
-Concurrent clients: 10
-Messages per client: 5
-==========================================
-Launching 10 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 1s
-Total connections attempted: 10
-Successful connections: 10
-Failed connections: 0
-Connection success rate: 100%
-Messages expected: 50
-Messages sent: 50
-Messages received: 100
-✓ EXCELLENT: High connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Medium Load Test
-Description: Moderate load test with higher concurrency
-Concurrent clients: 25
-Messages per client: 10
-==========================================
-Launching 25 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 4s
-Total connections attempted: 35
-Successful connections: 25
-Failed connections: 0
-Connection success rate: 71%
-Messages expected: 250
-Messages sent: 250
-Messages received: 500
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Heavy Load Test
-Description: Heavy load test with high concurrency
-Concurrent clients: 50
-Messages per client: 20
-==========================================
-Launching 50 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 14s
-Total connections attempted: 85
-Successful connections: 50
-Failed connections: 0
-Connection success rate: 58%
-Messages expected: 1000
-Messages sent: 1000
-Messages received: 2000
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Stress Test
-Description: Maximum load test to find breaking point
-Concurrent clients: 100
-Messages per client: 50
-==========================================
-Launching 100 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 64s
-Total connections attempted: 185
-Successful connections: 100
-Failed connections: 0
-Connection success rate: 54%
-Messages expected: 5000
-Messages sent: 5000
-Messages received: 7500
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Testing Complete
-==========================================
-All load tests completed. Check individual test results above.
-If any tests failed, the relay may need optimization or have resource limits.
-2026-04-01 11:31:03 - \033[0;32m✓ Load Testing PASSED\033[0m (Duration: 85s)
-2026-04-01 11:31:03 - ==========================================
-2026-04-01 11:31:03 - Running Test Suite: Stress Testing
-2026-04-01 11:31:03 - Description: Resource usage and stability testing
-2026-04-01 11:31:03 - ==========================================
-2026-04-01 11:31:03 - \033[0;31mERROR: Test script stress_tests.sh not found\033[0m
diff --git a/tests/test_results_20260402_113414.log b/tests/test_results_20260402_113414.log
deleted file mode 100644
index ab81ac0..0000000
--- a/tests/test_results_20260402_113414.log
+++ /dev/null
@@ -1,733 +0,0 @@
-2026-04-02 11:34:15 - ==========================================
-2026-04-02 11:34:15 - C-Relay-PG Comprehensive Test Suite Runner
-2026-04-02 11:34:15 - ==========================================
-2026-04-02 11:34:15 - Relay URL: ws://127.0.0.1:8888
-2026-04-02 11:34:15 - Log file: test_results_20260402_113414.log
-2026-04-02 11:34:15 - Report file: test_report_20260402_113415.html
-2026-04-02 11:34:15 - 
-2026-04-02 11:34:15 - Checking relay status at ws://127.0.0.1:8888...
-2026-04-02 11:34:15 - \033[0;32m✓ Relay HTTP endpoint is accessible\033[0m
-2026-04-02 11:34:15 - 
-2026-04-02 11:34:15 - Starting comprehensive test execution...
-2026-04-02 11:34:15 - 
-2026-04-02 11:34:15 - \033[0;34m=== SECURITY TEST SUITES ===\033[0m
-2026-04-02 11:34:15 - ==========================================
-2026-04-02 11:34:15 - Running Test Suite: SQL Injection Tests
-2026-04-02 11:34:15 - Description: Comprehensive SQL injection vulnerability testing
-2026-04-02 11:34:15 - ==========================================
-==========================================
-C-Relay-PG SQL Injection Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - Valid query works
-
-=== Authors Filter SQL Injection Tests ===
-Testing Authors filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== IDs Filter SQL Injection Tests ===
-Testing IDs filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Kinds Filter SQL Injection Tests ===
-Testing Kinds filter with string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with negative value... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with very large value... PASSED - SQL injection blocked (rejected with error)
-
-=== Search Filter SQL Injection Tests ===
-Testing Search filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Tag Filter SQL Injection Tests ===
-Testing #e tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-
-=== Timestamp Filter SQL Injection Tests ===
-Testing Since parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Until parameter injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Limit Parameter SQL Injection Tests ===
-Testing Limit parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Limit with UNION... PASSED - SQL injection blocked (rejected with error)
-
-=== Complex Multi-Filter SQL Injection Tests ===
-Testing Multi-filter with authors injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with search injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with tag injection... PASSED - SQL injection blocked (query sanitized)
-
-=== COUNT Message SQL Injection Tests ===
-Testing COUNT with authors payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Edge Case SQL Injection Tests ===
-Testing Empty string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Null byte injection... PASSED - SQL injection blocked (silently rejected)
-Testing Unicode injection... PASSED - SQL injection blocked (rejected with error)
-Testing Very long injection payload... PASSED - SQL injection blocked (rejected with error)
-
-=== Subscription ID SQL Injection Tests ===
-Testing Subscription ID injection... PASSED - SQL injection blocked (rejected with error)
-Testing Subscription ID with quotes... PASSED - SQL injection blocked (silently rejected)
-
-=== CLOSE Message SQL Injection Tests ===
-Testing CLOSE with injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Test Results ===
-Total tests: 318
-Passed: 318
-Failed: 0
-✓ All SQL injection tests passed!
-The relay appears to be protected against SQL injection attacks.
-2026-04-02 11:34:24 - \033[0;32m✓ SQL Injection Tests PASSED\033[0m (Duration: 9s)
-2026-04-02 11:34:24 - ==========================================
-2026-04-02 11:34:24 - Running Test Suite: Filter Validation Tests
-2026-04-02 11:34:24 - Description: Input validation for REQ and COUNT messages
-2026-04-02 11:34:24 - ==========================================
-=== C-Relay-PG Filter Validation Tests ===
-Testing against relay at ws://127.0.0.1:8888
-
-Testing Valid REQ message... PASSED
-Testing Valid COUNT message... PASSED
-
-=== Testing Filter Array Validation ===
-Testing Non-object filter... PASSED
-Testing Too many filters... PASSED
-
-=== Testing Authors Validation ===
-Testing Invalid author type... PASSED
-Testing Invalid author hex... PASSED
-Testing Too many authors... PASSED
-
-=== Testing IDs Validation ===
-Testing Invalid ID type... PASSED
-Testing Invalid ID hex... PASSED
-Testing Too many IDs... PASSED
-
-=== Testing Kinds Validation ===
-Testing Invalid kind type... PASSED
-Testing Negative kind... PASSED
-Testing Too large kind... PASSED
-Testing Too many kinds... PASSED
-
-=== Testing Timestamp Validation ===
-Testing Invalid since type... PASSED
-Testing Negative since... PASSED
-Testing Invalid until type... PASSED
-Testing Negative until... PASSED
-
-=== Testing Limit Validation ===
-Testing Invalid limit type... PASSED
-Testing Negative limit... PASSED
-Testing Too large limit... PASSED
-
-=== Testing Search Validation ===
-Testing Invalid search type... PASSED
-Testing Search too long... PASSED
-Testing Search SQL injection... PASSED
-
-=== Testing Tag Filter Validation ===
-Testing Invalid tag filter type... PASSED
-Testing Too many tag values... PASSED
-Testing Tag value too long... PASSED
-
-=== Testing Rate Limiting ===
-Testing rate limiting with malformed requests... UNCERTAIN - Rate limiting may not have triggered (this could be normal)
-
-=== Test Results ===
-Total tests: 28
-Passed: 28
-Failed: 0
-All tests passed!
-2026-04-02 11:34:27 - \033[0;32m✓ Filter Validation Tests PASSED\033[0m (Duration: 3s)
-2026-04-02 11:34:27 - ==========================================
-2026-04-02 11:34:27 - Running Test Suite: Subscription Validation Tests
-2026-04-02 11:34:27 - Description: Subscription ID and message validation
-2026-04-02 11:34:27 - ==========================================
-Testing subscription ID validation fixes...
-Testing malformed subscription IDs...
-Empty ID test: Connection failed (expected)
-Long ID test: Connection failed (expected)
-Invalid chars test: Connection failed (expected)
-NULL ID test: Connection failed (expected)
-Valid ID test: Failed
-Testing CLOSE message validation...
-CLOSE empty ID test: Connection failed (expected)
-CLOSE valid ID test: Failed
-Subscription validation tests completed.
-2026-04-02 11:34:27 - \033[0;32m✓ Subscription Validation Tests PASSED\033[0m (Duration: 0s)
-2026-04-02 11:34:27 - ==========================================
-2026-04-02 11:34:27 - Running Test Suite: Memory Corruption Tests
-2026-04-02 11:34:27 - Description: Buffer overflow and memory safety testing
-2026-04-02 11:34:27 - ==========================================
-==========================================
-C-Relay-PG Memory Corruption Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-Note: These tests may cause the relay to crash if vulnerabilities exist
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - No memory corruption detected
-
-=== Subscription ID Memory Corruption Tests ===
-Testing Empty subscription ID... UNCERTAIN - Expected error but got normal response
-Testing Very long subscription ID (1KB)... UNCERTAIN - Expected error but got normal response
-Testing Very long subscription ID (10KB)... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with null bytes... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with special chars... UNCERTAIN - Expected error but got normal response
-Testing Unicode subscription ID... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with path traversal... UNCERTAIN - Expected error but got normal response
-
-=== Filter Array Memory Corruption Tests ===
-Testing Too many filters (50)... UNCERTAIN - Expected error but got normal response
-
-=== Concurrent Access Memory Tests ===
-Testing Concurrent subscription creation... ["EVENT","concurrent_1775144068210818169",{"kind":1,"id":"a36280322b87a9e9d6687e79d578e1059c9ee016d0e7a7b6e2676943b830955e","pubkey":"79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798","created_at":1775142792,"tags":[],"content":"whoop ","sig":"7a570204107190614c6b70cb36b22c26138a7c45aa807fefb5c504f657b5335d68cf0e6ea8f0845155f4650434c6d52053f92ceaf85637f3a57277fcdad6ce3e"}]
-["EVENT","concurrent_1775144068210818169",{"kind":1,"id":"a36280322b87a9e9d6687e79d578e1059c9ee016d0e7a7b6e2676943b830955e","pubkey":"79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798","created_at":1775142792,"tags":[],"content":"whoop ","sig":"7a570204107190614c6b70cb36b22c26138a7c45aa807fefb5c504f657b5335d68cf0e6ea8f0845155f4650434c6d52053f92ceaf85637f3a57277fcdad6ce3e"}]
-["EVENT","concurrent_1775144068210818169",{"kind":1,"id":"a36280322b87a9e9d6687e79d578e1059c9ee016d0e7a7b6e2676943b830955e","pubkey":"79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798","created_at":1775142792,"tags":[],"content":"whoop ","sig":"7a570204107190614c6b70cb36b22c26138a7c45aa807fefb5c504f657b5335d68cf0e6ea8f0845155f4650434c6d52053f92ceaf85637f3a57277fcdad6ce3e"}]
-["EVENT","concurrent_1775144068210818169",{"kind":1,"id":"a36280322b87a9e9d6687e79d578e1059c9ee016d0e7a7b6e2676943b830955e","pubkey":"79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798","created_at":1775142792,"tags":[],"content":"whoop ","sig":"7a570204107190614c6b70cb36b22c26138a7c45aa807fefb5c504f657b5335d68cf0e6ea8f0845155f4650434c6d52053f92ceaf85637f3a57277fcdad6ce3e"}]
-["EVENT","concurrent_1775144068210818169",{"kind":1,"id":"a36280322b87a9e9d6687e79d578e1059c9ee016d0e7a7b6e2676943b830955e","pubkey":"79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798","created_at":1775142792,"tags":[],"content":"whoop ","sig":"7a570204107190614c6b70cb36b22c26138a7c45aa807fefb5c504f657b5335d68cf0e6ea8f0845155f4650434c6d52053f92ceaf85637f3a57277fcdad6ce3e"}]
-["EVENT","concurrent_1775144068210818169",{"kind":1,"id":"a36280322b87a9e9d6687e79d578e1059c9ee016d0e7a7b6e2676943b830955e","pubkey":"79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798","created_at":1775142792,"tags":[],"content":"whoop ","sig":"7a570204107190614c6b70cb36b22c26138a7c45aa807fefb5c504f657b5335d68cf0e6ea8f0845155f4650434c6d52053f92ceaf85637f3a57277fcdad6ce3e"}]
-["EVENT","concurrent_1775144068210818169",{"kind":1,"id":"a36280322b87a9e9d6687e79d578e1059c9ee016d0e7a7b6e2676943b830955e","pubkey":"79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798","created_at":1775142792,"tags":[],"content":"whoop ","sig":"7a570204107190614c6b70cb36b22c26138a7c45aa807fefb5c504f657b5335d68cf0e6ea8f0845155f4650434c6d52053f92ceaf85637f3a57277fcdad6ce3e"}]
-["EVENT","concurrent_1775144068210818169",{"kind":1,"id":"a36280322b87a9e9d6687e79d578e1059c9ee016d0e7a7b6e2676943b830955e","pubkey":"79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798","created_at":1775142792,"tags":[],"content":"whoop ","sig":"7a570204107190614c6b70cb36b22c26138a7c45aa807fefb5c504f657b5335d68cf0e6ea8f0845155f4650434c6d52053f92ceaf85637f3a57277fcdad6ce3e"}]
-["EVENT","concurrent_1775144068210818169",{"kind":1,"id":"a36280322b87a9e9d6687e79d578e1059c9ee016d0e7a7b6e2676943b830955e","pubkey":"79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798","created_at":1775142792,"tags":[],"content":"whoop ","sig":"7a570204107190614c6b70cb36b22c26138a7c45aa807fefb5c504f657b5335d68cf0e6ea8f0845155f4650434c6d52053f92ceaf85637f3a57277fcdad6ce3e"}]
-["EVENT","concurrent_1775144068210818169",{"kind":1,"id":"a36280322b87a9e9d6687e79d578e1059c9ee016d0e7a7b6e2676943b830955e","pubkey":"79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798","created_at":1775142792,"tags":[],"content":"whoop ","sig":"7a570204107190614c6b70cb36b22c26138a7c45aa807fefb5c504f657b5335d68cf0e6ea8f0845155f4650434c6d52053f92ceaf85637f3a57277fcdad6ce3e"}]
-PASSED - Concurrent access handled safely
-Testing Concurrent CLOSE operations... 
-
-
-
-
-
-
-
-
-
-PASSED - Concurrent access handled safely
-
-=== Malformed JSON Memory Tests ===
-Testing Unclosed JSON object... UNCERTAIN - Expected error but got normal response
-Testing Mismatched brackets... UNCERTAIN - Expected error but got normal response
-Testing Extra closing brackets... UNCERTAIN - Expected error but got normal response
-Testing Null bytes in JSON... UNCERTAIN - Expected error but got normal response
-
-=== Large Message Memory Tests ===
-Testing Very large filter array... UNCERTAIN - Expected error but got normal response
-Testing Very long search term... UNCERTAIN - Expected error but got normal response
-
-=== Test Results ===
-Total tests: 17
-Passed: 17
-Failed: 0
-✓ All memory corruption tests passed!
-The relay appears to handle memory safely.
-2026-04-02 11:34:28 - \033[0;32m✓ Memory Corruption Tests PASSED\033[0m (Duration: 1s)
-2026-04-02 11:34:28 - ==========================================
-2026-04-02 11:34:28 - Running Test Suite: Input Validation Tests
-2026-04-02 11:34:28 - Description: Comprehensive input boundary testing
-2026-04-02 11:34:28 - ==========================================
-==========================================
-C-Relay-PG Input Validation Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - Input accepted correctly
-
-=== Message Type Validation ===
-Testing Invalid message type - string... PASSED - Invalid input properly rejected
-Testing Invalid message type - number... PASSED - Invalid input properly rejected
-Testing Invalid message type - null... PASSED - Invalid input properly rejected
-Testing Invalid message type - object... PASSED - Invalid input properly rejected
-Testing Empty message type... PASSED - Invalid input properly rejected
-Testing Very long message type... PASSED - Invalid input properly rejected
-
-=== Message Structure Validation ===
-Testing Too few arguments... PASSED - Invalid input properly rejected
-Testing Too many arguments... PASSED - Invalid input properly rejected
-Testing Non-array message... PASSED - Invalid input properly rejected
-Testing Empty array... PASSED - Invalid input properly rejected
-Testing Nested arrays incorrectly... PASSED - Invalid input properly rejected
-
-=== Subscription ID Boundary Tests ===
-Testing Valid subscription ID... PASSED - Input accepted correctly
-Testing Empty subscription ID... PASSED - Invalid input properly rejected
-Testing Subscription ID with spaces... PASSED - Invalid input properly rejected
-Testing Subscription ID with newlines... PASSED - Invalid input properly rejected
-Testing Subscription ID with tabs... PASSED - Invalid input properly rejected
-Testing Subscription ID with control chars... PASSED - Invalid input properly rejected
-Testing Unicode subscription ID... PASSED - Invalid input properly rejected
-Testing Very long subscription ID... PASSED - Invalid input properly rejected
-
-=== Filter Object Validation ===
-Testing Valid empty filter... PASSED - Input accepted correctly
-Testing Non-object filter... PASSED - Invalid input properly rejected
-Testing Null filter... PASSED - Invalid input properly rejected
-Testing Array filter... PASSED - Invalid input properly rejected
-Testing Filter with invalid keys... PASSED - Input accepted correctly
-
-=== Authors Field Validation ===
-Testing Valid authors array... PASSED - Input accepted correctly
-Testing Empty authors array... PASSED - Input accepted correctly
-Testing Non-array authors... PASSED - Invalid input properly rejected
-Testing Invalid hex in authors... PASSED - Invalid input properly rejected
-Testing Short pubkey in authors... PASSED - Invalid input properly rejected
-
-=== IDs Field Validation ===
-Testing Valid ids array... PASSED - Input accepted correctly
-Testing Empty ids array... PASSED - Input accepted correctly
-Testing Non-array ids... PASSED - Invalid input properly rejected
-
-=== Kinds Field Validation ===
-Testing Valid kinds array... PASSED - Input accepted correctly
-Testing Empty kinds array... PASSED - Input accepted correctly
-Testing Non-array kinds... PASSED - Invalid input properly rejected
-Testing String in kinds... PASSED - Invalid input properly rejected
-
-=== Timestamp Field Validation ===
-Testing Valid since timestamp... PASSED - Input accepted correctly
-Testing Valid until timestamp... PASSED - Input accepted correctly
-Testing String since timestamp... PASSED - Invalid input properly rejected
-Testing Negative timestamp... PASSED - Invalid input properly rejected
-
-=== Limit Field Validation ===
-Testing Valid limit... PASSED - Input accepted correctly
-Testing Zero limit... PASSED - Input accepted correctly
-Testing String limit... PASSED - Invalid input properly rejected
-Testing Negative limit... PASSED - Invalid input properly rejected
-
-=== Multiple Filters ===
-Testing Two valid filters... PASSED - Input accepted correctly
-Testing Many filters... PASSED - Input accepted correctly
-
-=== Test Results ===
-Total tests: 47
-Passed: 47
-Failed: 0
-✓ All input validation tests passed!
-The relay properly validates input.
-2026-04-02 11:34:30 - \033[0;32m✓ Input Validation Tests PASSED\033[0m (Duration: 2s)
-2026-04-02 11:34:30 - 
-2026-04-02 11:34:30 - \033[0;34m=== PERFORMANCE TEST SUITES ===\033[0m
-2026-04-02 11:34:30 - ==========================================
-2026-04-02 11:34:30 - Running Test Suite: Subscription Limit Tests
-2026-04-02 11:34:30 - Description: Subscription limit enforcement testing
-2026-04-02 11:34:30 - ==========================================
-=== Subscription Limit Test ===
-[INFO] Testing relay at: ws://127.0.0.1:8888
-[INFO] Note: This test assumes default subscription limits (max 25 per client)
-
-=== Test 1: Basic Connectivity ===
-[INFO] Testing basic WebSocket connection...
-[PASS] Basic connectivity works
-
-=== Test 2: Subscription Limit Enforcement ===
-[INFO] Testing subscription limits by creating multiple subscriptions...
-[INFO] Creating multiple subscriptions within a single connection...
-[INFO] Hit subscription limit at subscription 2
-[PASS] Subscription limit enforcement working (limit hit after 1 subscriptions)
-
-=== Test Complete ===
-2026-04-02 11:34:30 - \033[0;32m✓ Subscription Limit Tests PASSED\033[0m (Duration: 0s)
-2026-04-02 11:34:30 - ==========================================
-2026-04-02 11:34:30 - Running Test Suite: Load Testing
-2026-04-02 11:34:30 - Description: High concurrent connection testing
-2026-04-02 11:34:30 - ==========================================
-==========================================
-C-Relay-PG Load Testing Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-✓ Relay is accessible
-
-==========================================
-Load Test: Light Load Test
-Description: Basic load test with moderate concurrent connections
-Concurrent clients: 10
-Messages per client: 5
-==========================================
-Launching 10 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 1s
-Total connections attempted: 10
-Successful connections: 10
-Failed connections: 0
-Connection success rate: 100%
-Messages expected: 50
-Messages sent: 50
-Messages received: 350
-✓ EXCELLENT: High connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Medium Load Test
-Description: Moderate load test with higher concurrency
-Concurrent clients: 25
-Messages per client: 10
-==========================================
-Launching 25 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 5s
-Total connections attempted: 35
-Successful connections: 25
-Failed connections: 0
-Connection success rate: 71%
-Messages expected: 250
-Messages sent: 250
-Messages received: 1750
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Heavy Load Test
-Description: Heavy load test with high concurrency
-Concurrent clients: 50
-Messages per client: 20
-==========================================
-Launching 50 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 15s
-Total connections attempted: 85
-Successful connections: 50
-Failed connections: 0
-Connection success rate: 58%
-Messages expected: 1000
-Messages sent: 1000
-Messages received: 7000
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Stress Test
-Description: Maximum load test to find breaking point
-Concurrent clients: 100
-Messages per client: 50
-==========================================
-Launching 100 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 66s
-Total connections attempted: 185
-Successful connections: 100
-Failed connections: 0
-Connection success rate: 54%
-Messages expected: 5000
-Messages sent: 5000
-Messages received: 20000
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Testing Complete
-==========================================
-All load tests completed. Check individual test results above.
-If any tests failed, the relay may need optimization or have resource limits.
-2026-04-02 11:35:58 - \033[0;32m✓ Load Testing PASSED\033[0m (Duration: 88s)
-2026-04-02 11:35:58 - ==========================================
-2026-04-02 11:35:58 - Running Test Suite: Stress Testing
-2026-04-02 11:35:58 - Description: Resource usage and stability testing
-2026-04-02 11:35:58 - ==========================================
-2026-04-02 11:35:58 - \033[0;31mERROR: Test script stress_tests.sh not found\033[0m
diff --git a/tests/test_results_20260403_055415.log b/tests/test_results_20260403_055415.log
deleted file mode 100644
index 54fccee..0000000
--- a/tests/test_results_20260403_055415.log
+++ /dev/null
@@ -1,25 +0,0 @@
-2026-04-03 05:54:15 - ==========================================
-2026-04-03 05:54:15 - C-Relay-PG Comprehensive Test Suite Runner
-2026-04-03 05:54:15 - ==========================================
-2026-04-03 05:54:15 - Relay URL: ws://127.0.0.1:8888
-2026-04-03 05:54:15 - Log file: test_results_20260403_055415.log
-2026-04-03 05:54:15 - Report file: test_report_20260403_055415.html
-2026-04-03 05:54:15 - 
-2026-04-03 05:54:15 - Checking relay status at ws://127.0.0.1:8888...
-2026-04-03 05:54:16 - \033[0;32m✓ Relay HTTP endpoint is accessible\033[0m
-2026-04-03 05:54:16 - 
-2026-04-03 05:54:16 - Starting comprehensive test execution...
-2026-04-03 05:54:16 - 
-2026-04-03 05:54:16 - \033[0;34m=== SECURITY TEST SUITES ===\033[0m
-2026-04-03 05:54:16 - ==========================================
-2026-04-03 05:54:16 - Running Test Suite: SQL Injection Tests
-2026-04-03 05:54:16 - Description: Comprehensive SQL injection vulnerability testing
-2026-04-03 05:54:16 - ==========================================
-==========================================
-C-Relay-PG SQL Injection Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... FAILED - Valid query failed: 
-2026-04-03 05:54:17 - \033[0;31m✗ SQL Injection Tests FAILED\033[0m (Duration: 1s)
diff --git a/tests/test_results_20260403_055627.log b/tests/test_results_20260403_055627.log
deleted file mode 100644
index bed4911..0000000
--- a/tests/test_results_20260403_055627.log
+++ /dev/null
@@ -1,733 +0,0 @@
-2026-04-03 05:56:27 - ==========================================
-2026-04-03 05:56:27 - C-Relay-PG Comprehensive Test Suite Runner
-2026-04-03 05:56:27 - ==========================================
-2026-04-03 05:56:27 - Relay URL: ws://127.0.0.1:8888
-2026-04-03 05:56:27 - Log file: test_results_20260403_055627.log
-2026-04-03 05:56:27 - Report file: test_report_20260403_055627.html
-2026-04-03 05:56:27 - 
-2026-04-03 05:56:27 - Checking relay status at ws://127.0.0.1:8888...
-2026-04-03 05:56:27 - \033[0;32m✓ Relay HTTP endpoint is accessible\033[0m
-2026-04-03 05:56:27 - 
-2026-04-03 05:56:27 - Starting comprehensive test execution...
-2026-04-03 05:56:27 - 
-2026-04-03 05:56:27 - \033[0;34m=== SECURITY TEST SUITES ===\033[0m
-2026-04-03 05:56:27 - ==========================================
-2026-04-03 05:56:27 - Running Test Suite: SQL Injection Tests
-2026-04-03 05:56:27 - Description: Comprehensive SQL injection vulnerability testing
-2026-04-03 05:56:27 - ==========================================
-==========================================
-C-Relay-PG SQL Injection Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - Valid query works
-
-=== Authors Filter SQL Injection Tests ===
-Testing Authors filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== IDs Filter SQL Injection Tests ===
-Testing IDs filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Kinds Filter SQL Injection Tests ===
-Testing Kinds filter with string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with negative value... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with very large value... PASSED - SQL injection blocked (rejected with error)
-
-=== Search Filter SQL Injection Tests ===
-Testing Search filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Tag Filter SQL Injection Tests ===
-Testing #e tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-
-=== Timestamp Filter SQL Injection Tests ===
-Testing Since parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Until parameter injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Limit Parameter SQL Injection Tests ===
-Testing Limit parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Limit with UNION... PASSED - SQL injection blocked (rejected with error)
-
-=== Complex Multi-Filter SQL Injection Tests ===
-Testing Multi-filter with authors injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with search injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with tag injection... PASSED - SQL injection blocked (query sanitized)
-
-=== COUNT Message SQL Injection Tests ===
-Testing COUNT with authors payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Edge Case SQL Injection Tests ===
-Testing Empty string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Null byte injection... PASSED - SQL injection blocked (silently rejected)
-Testing Unicode injection... PASSED - SQL injection blocked (rejected with error)
-Testing Very long injection payload... PASSED - SQL injection blocked (rejected with error)
-
-=== Subscription ID SQL Injection Tests ===
-Testing Subscription ID injection... PASSED - SQL injection blocked (rejected with error)
-Testing Subscription ID with quotes... PASSED - SQL injection blocked (silently rejected)
-
-=== CLOSE Message SQL Injection Tests ===
-Testing CLOSE with injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Test Results ===
-Total tests: 318
-Passed: 318
-Failed: 0
-✓ All SQL injection tests passed!
-The relay appears to be protected against SQL injection attacks.
-2026-04-03 05:56:38 - \033[0;32m✓ SQL Injection Tests PASSED\033[0m (Duration: 11s)
-2026-04-03 05:56:38 - ==========================================
-2026-04-03 05:56:38 - Running Test Suite: Filter Validation Tests
-2026-04-03 05:56:38 - Description: Input validation for REQ and COUNT messages
-2026-04-03 05:56:38 - ==========================================
-=== C-Relay-PG Filter Validation Tests ===
-Testing against relay at ws://127.0.0.1:8888
-
-Testing Valid REQ message... PASSED
-Testing Valid COUNT message... PASSED
-
-=== Testing Filter Array Validation ===
-Testing Non-object filter... PASSED
-Testing Too many filters... PASSED
-
-=== Testing Authors Validation ===
-Testing Invalid author type... PASSED
-Testing Invalid author hex... PASSED
-Testing Too many authors... PASSED
-
-=== Testing IDs Validation ===
-Testing Invalid ID type... PASSED
-Testing Invalid ID hex... PASSED
-Testing Too many IDs... PASSED
-
-=== Testing Kinds Validation ===
-Testing Invalid kind type... PASSED
-Testing Negative kind... PASSED
-Testing Too large kind... PASSED
-Testing Too many kinds... PASSED
-
-=== Testing Timestamp Validation ===
-Testing Invalid since type... PASSED
-Testing Negative since... PASSED
-Testing Invalid until type... PASSED
-Testing Negative until... PASSED
-
-=== Testing Limit Validation ===
-Testing Invalid limit type... PASSED
-Testing Negative limit... PASSED
-Testing Too large limit... PASSED
-
-=== Testing Search Validation ===
-Testing Invalid search type... PASSED
-Testing Search too long... PASSED
-Testing Search SQL injection... PASSED
-
-=== Testing Tag Filter Validation ===
-Testing Invalid tag filter type... PASSED
-Testing Too many tag values... PASSED
-Testing Tag value too long... PASSED
-
-=== Testing Rate Limiting ===
-Testing rate limiting with malformed requests... UNCERTAIN - Rate limiting may not have triggered (this could be normal)
-
-=== Test Results ===
-Total tests: 28
-Passed: 28
-Failed: 0
-All tests passed!
-2026-04-03 05:56:42 - \033[0;32m✓ Filter Validation Tests PASSED\033[0m (Duration: 4s)
-2026-04-03 05:56:42 - ==========================================
-2026-04-03 05:56:42 - Running Test Suite: Subscription Validation Tests
-2026-04-03 05:56:42 - Description: Subscription ID and message validation
-2026-04-03 05:56:42 - ==========================================
-Testing subscription ID validation fixes...
-Testing malformed subscription IDs...
-Empty ID test: Connection failed (expected)
-Long ID test: Connection failed (expected)
-Invalid chars test: Connection failed (expected)
-NULL ID test: Connection failed (expected)
-Valid ID test: Failed
-Testing CLOSE message validation...
-CLOSE empty ID test: Connection failed (expected)
-CLOSE valid ID test: Failed
-Subscription validation tests completed.
-2026-04-03 05:56:42 - \033[0;32m✓ Subscription Validation Tests PASSED\033[0m (Duration: 0s)
-2026-04-03 05:56:42 - ==========================================
-2026-04-03 05:56:42 - Running Test Suite: Memory Corruption Tests
-2026-04-03 05:56:42 - Description: Buffer overflow and memory safety testing
-2026-04-03 05:56:42 - ==========================================
-==========================================
-C-Relay-PG Memory Corruption Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-Note: These tests may cause the relay to crash if vulnerabilities exist
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - No memory corruption detected
-
-=== Subscription ID Memory Corruption Tests ===
-Testing Empty subscription ID... UNCERTAIN - Expected error but got normal response
-Testing Very long subscription ID (1KB)... UNCERTAIN - Expected error but got normal response
-Testing Very long subscription ID (10KB)... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with null bytes... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with special chars... UNCERTAIN - Expected error but got normal response
-Testing Unicode subscription ID... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with path traversal... UNCERTAIN - Expected error but got normal response
-
-=== Filter Array Memory Corruption Tests ===
-Testing Too many filters (50)... UNCERTAIN - Expected error but got normal response
-
-=== Concurrent Access Memory Tests ===
-Testing Concurrent subscription creation... ["EVENT","concurrent_1775210203430323361",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775210203430323361",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775210203430323361",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775210203430323361",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775210203430323361",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775210203430323361",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775210203430323361",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775210203430323361",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775210203430323361",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775210203430323361",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-PASSED - Concurrent access handled safely
-Testing Concurrent CLOSE operations... 
-
-
-
-
-
-
-
-
-
-PASSED - Concurrent access handled safely
-
-=== Malformed JSON Memory Tests ===
-Testing Unclosed JSON object... UNCERTAIN - Expected error but got normal response
-Testing Mismatched brackets... UNCERTAIN - Expected error but got normal response
-Testing Extra closing brackets... UNCERTAIN - Expected error but got normal response
-Testing Null bytes in JSON... UNCERTAIN - Expected error but got normal response
-
-=== Large Message Memory Tests ===
-Testing Very large filter array... UNCERTAIN - Expected error but got normal response
-Testing Very long search term... UNCERTAIN - Expected error but got normal response
-
-=== Test Results ===
-Total tests: 17
-Passed: 17
-Failed: 0
-✓ All memory corruption tests passed!
-The relay appears to handle memory safely.
-2026-04-03 05:56:44 - \033[0;32m✓ Memory Corruption Tests PASSED\033[0m (Duration: 2s)
-2026-04-03 05:56:44 - ==========================================
-2026-04-03 05:56:44 - Running Test Suite: Input Validation Tests
-2026-04-03 05:56:44 - Description: Comprehensive input boundary testing
-2026-04-03 05:56:44 - ==========================================
-==========================================
-C-Relay-PG Input Validation Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - Input accepted correctly
-
-=== Message Type Validation ===
-Testing Invalid message type - string... PASSED - Invalid input properly rejected
-Testing Invalid message type - number... PASSED - Invalid input properly rejected
-Testing Invalid message type - null... PASSED - Invalid input properly rejected
-Testing Invalid message type - object... PASSED - Invalid input properly rejected
-Testing Empty message type... PASSED - Invalid input properly rejected
-Testing Very long message type... PASSED - Invalid input properly rejected
-
-=== Message Structure Validation ===
-Testing Too few arguments... PASSED - Invalid input properly rejected
-Testing Too many arguments... PASSED - Invalid input properly rejected
-Testing Non-array message... PASSED - Invalid input properly rejected
-Testing Empty array... PASSED - Invalid input properly rejected
-Testing Nested arrays incorrectly... PASSED - Invalid input properly rejected
-
-=== Subscription ID Boundary Tests ===
-Testing Valid subscription ID... PASSED - Input accepted correctly
-Testing Empty subscription ID... PASSED - Invalid input properly rejected
-Testing Subscription ID with spaces... PASSED - Invalid input properly rejected
-Testing Subscription ID with newlines... PASSED - Invalid input properly rejected
-Testing Subscription ID with tabs... PASSED - Invalid input properly rejected
-Testing Subscription ID with control chars... PASSED - Invalid input properly rejected
-Testing Unicode subscription ID... PASSED - Invalid input properly rejected
-Testing Very long subscription ID... PASSED - Invalid input properly rejected
-
-=== Filter Object Validation ===
-Testing Valid empty filter... PASSED - Input accepted correctly
-Testing Non-object filter... PASSED - Invalid input properly rejected
-Testing Null filter... PASSED - Invalid input properly rejected
-Testing Array filter... PASSED - Invalid input properly rejected
-Testing Filter with invalid keys... PASSED - Input accepted correctly
-
-=== Authors Field Validation ===
-Testing Valid authors array... PASSED - Input accepted correctly
-Testing Empty authors array... PASSED - Input accepted correctly
-Testing Non-array authors... PASSED - Invalid input properly rejected
-Testing Invalid hex in authors... PASSED - Invalid input properly rejected
-Testing Short pubkey in authors... PASSED - Invalid input properly rejected
-
-=== IDs Field Validation ===
-Testing Valid ids array... PASSED - Input accepted correctly
-Testing Empty ids array... PASSED - Input accepted correctly
-Testing Non-array ids... PASSED - Invalid input properly rejected
-
-=== Kinds Field Validation ===
-Testing Valid kinds array... PASSED - Input accepted correctly
-Testing Empty kinds array... PASSED - Input accepted correctly
-Testing Non-array kinds... PASSED - Invalid input properly rejected
-Testing String in kinds... PASSED - Invalid input properly rejected
-
-=== Timestamp Field Validation ===
-Testing Valid since timestamp... PASSED - Input accepted correctly
-Testing Valid until timestamp... PASSED - Input accepted correctly
-Testing String since timestamp... PASSED - Invalid input properly rejected
-Testing Negative timestamp... PASSED - Invalid input properly rejected
-
-=== Limit Field Validation ===
-Testing Valid limit... PASSED - Input accepted correctly
-Testing Zero limit... PASSED - Input accepted correctly
-Testing String limit... PASSED - Invalid input properly rejected
-Testing Negative limit... PASSED - Invalid input properly rejected
-
-=== Multiple Filters ===
-Testing Two valid filters... PASSED - Input accepted correctly
-Testing Many filters... PASSED - Input accepted correctly
-
-=== Test Results ===
-Total tests: 47
-Passed: 47
-Failed: 0
-✓ All input validation tests passed!
-The relay properly validates input.
-2026-04-03 05:56:46 - \033[0;32m✓ Input Validation Tests PASSED\033[0m (Duration: 2s)
-2026-04-03 05:56:46 - 
-2026-04-03 05:56:46 - \033[0;34m=== PERFORMANCE TEST SUITES ===\033[0m
-2026-04-03 05:56:46 - ==========================================
-2026-04-03 05:56:46 - Running Test Suite: Subscription Limit Tests
-2026-04-03 05:56:46 - Description: Subscription limit enforcement testing
-2026-04-03 05:56:46 - ==========================================
-=== Subscription Limit Test ===
-[INFO] Testing relay at: ws://127.0.0.1:8888
-[INFO] Note: This test assumes default subscription limits (max 25 per client)
-
-=== Test 1: Basic Connectivity ===
-[INFO] Testing basic WebSocket connection...
-[PASS] Basic connectivity works
-
-=== Test 2: Subscription Limit Enforcement ===
-[INFO] Testing subscription limits by creating multiple subscriptions...
-[INFO] Creating multiple subscriptions within a single connection...
-[INFO] Hit subscription limit at subscription 2
-[PASS] Subscription limit enforcement working (limit hit after 1 subscriptions)
-
-=== Test Complete ===
-2026-04-03 05:56:46 - \033[0;32m✓ Subscription Limit Tests PASSED\033[0m (Duration: 0s)
-2026-04-03 05:56:46 - ==========================================
-2026-04-03 05:56:46 - Running Test Suite: Load Testing
-2026-04-03 05:56:46 - Description: High concurrent connection testing
-2026-04-03 05:56:46 - ==========================================
-==========================================
-C-Relay-PG Load Testing Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-✓ Relay is accessible
-
-==========================================
-Load Test: Light Load Test
-Description: Basic load test with moderate concurrent connections
-Concurrent clients: 10
-Messages per client: 5
-==========================================
-Launching 10 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 1s
-Total connections attempted: 10
-Successful connections: 10
-Failed connections: 0
-Connection success rate: 100%
-Messages expected: 50
-Messages sent: 50
-Messages received: 100
-✓ EXCELLENT: High connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Medium Load Test
-Description: Moderate load test with higher concurrency
-Concurrent clients: 25
-Messages per client: 10
-==========================================
-Launching 25 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 5s
-Total connections attempted: 35
-Successful connections: 25
-Failed connections: 0
-Connection success rate: 71%
-Messages expected: 250
-Messages sent: 250
-Messages received: 500
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Heavy Load Test
-Description: Heavy load test with high concurrency
-Concurrent clients: 50
-Messages per client: 20
-==========================================
-Launching 50 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 17s
-Total connections attempted: 85
-Successful connections: 50
-Failed connections: 0
-Connection success rate: 58%
-Messages expected: 1000
-Messages sent: 1000
-Messages received: 2000
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Stress Test
-Description: Maximum load test to find breaking point
-Concurrent clients: 100
-Messages per client: 50
-==========================================
-Launching 100 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 73s
-Total connections attempted: 185
-Successful connections: 100
-Failed connections: 0
-Connection success rate: 54%
-Messages expected: 5000
-Messages sent: 5000
-Messages received: 7500
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Testing Complete
-==========================================
-All load tests completed. Check individual test results above.
-If any tests failed, the relay may need optimization or have resource limits.
-2026-04-03 05:58:24 - \033[0;32m✓ Load Testing PASSED\033[0m (Duration: 98s)
-2026-04-03 05:58:24 - ==========================================
-2026-04-03 05:58:25 - Running Test Suite: Stress Testing
-2026-04-03 05:58:25 - Description: Resource usage and stability testing
-2026-04-03 05:58:25 - ==========================================
-2026-04-03 05:58:25 - \033[0;31mERROR: Test script stress_tests.sh not found\033[0m
diff --git a/tests/test_results_20260403_062048.log b/tests/test_results_20260403_062048.log
deleted file mode 100644
index f9c0cbc..0000000
--- a/tests/test_results_20260403_062048.log
+++ /dev/null
@@ -1,774 +0,0 @@
-2026-04-03 06:20:48 - ==========================================
-2026-04-03 06:20:48 - C-Relay-PG Comprehensive Test Suite Runner
-2026-04-03 06:20:48 - ==========================================
-2026-04-03 06:20:48 - Relay URL: ws://127.0.0.1:8888
-2026-04-03 06:20:48 - Log file: test_results_20260403_062048.log
-2026-04-03 06:20:48 - Report file: test_report_20260403_062048.html
-2026-04-03 06:20:48 - 
-2026-04-03 06:20:48 - Checking relay status at ws://127.0.0.1:8888...
-2026-04-03 06:20:48 - \033[0;32m✓ Relay HTTP endpoint is accessible\033[0m
-2026-04-03 06:20:48 - 
-2026-04-03 06:20:48 - Starting comprehensive test execution...
-2026-04-03 06:20:48 - 
-2026-04-03 06:20:48 - \033[0;34m=== SECURITY TEST SUITES ===\033[0m
-2026-04-03 06:20:48 - ==========================================
-2026-04-03 06:20:48 - Running Test Suite: SQL Injection Tests
-2026-04-03 06:20:48 - Description: Comprehensive SQL injection vulnerability testing
-2026-04-03 06:20:48 - ==========================================
-==========================================
-C-Relay-PG SQL Injection Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - Valid query works
-
-=== Authors Filter SQL Injection Tests ===
-Testing Authors filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Authors filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== IDs Filter SQL Injection Tests ===
-Testing IDs filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing IDs filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Kinds Filter SQL Injection Tests ===
-Testing Kinds filter with string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with negative value... PASSED - SQL injection blocked (rejected with error)
-Testing Kinds filter with very large value... PASSED - SQL injection blocked (rejected with error)
-
-=== Search Filter SQL Injection Tests ===
-Testing Search filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing Search filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing Search filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Tag Filter SQL Injection Tests ===
-Testing #e tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #e tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #p tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #t tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #r tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' OR 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: admin'--... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /*... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: */... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: /**/... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=1 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND 1=2 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (query sanitized)
-Testing #d tag filter with payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (query sanitized)
-
-=== Timestamp Filter SQL Injection Tests ===
-Testing Since parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Until parameter injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Limit Parameter SQL Injection Tests ===
-Testing Limit parameter injection... PASSED - SQL injection blocked (rejected with error)
-Testing Limit with UNION... PASSED - SQL injection blocked (rejected with error)
-
-=== Complex Multi-Filter SQL Injection Tests ===
-Testing Multi-filter with authors injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with search injection... PASSED - SQL injection blocked (rejected with error)
-Testing Multi-filter with tag injection... PASSED - SQL injection blocked (query sanitized)
-
-=== COUNT Message SQL Injection Tests ===
-Testing COUNT with authors payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' OR '1'='1... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' OR '1'='1... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1; SELECT * FROM sqlite_master; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' OR 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: admin'--... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' UNION SELECT password FROM users --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND SLEEP(5) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=1 WAITFOR DELAY '0:0:5' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CAST((SELECT version()) AS INT) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 1' AND 1=CONVERT(INT, (SELECT @@VERSION)) --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION SELECT 1,2,3 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' UNION ALL SELECT NULL,NULL,NULL --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; SELECT * FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DELETE FROM events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; UPDATE events SET content='hacked' WHERE 1=1; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /*... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: */... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: /**/... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: #... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: #... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: 0x53514C5F494E4A454354494F4E... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: J1NSTCBJTkpFQ1RJT04gLS0=... PASSED - SQL injection blocked (query sanitized)
-Testing COUNT with authors payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '))); DROP TABLE events; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ')) UNION SELECT NULL; --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=1 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND 1=2 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: ' AND (SELECT COUNT(*) FROM events) > 0 --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; EXEC master..xp_cmdshell 'net user' --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with authors payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-Testing COUNT with search payload: '; DECLARE @host varchar(1024); SELECT @host=(SELECT TOP 1 master..sys.fn_varbintohexstr(password_hash) FROM sys.sql_logins WHERE name='sa'); --... PASSED - SQL injection blocked (rejected with error)
-
-=== Edge Case SQL Injection Tests ===
-Testing Empty string injection... PASSED - SQL injection blocked (rejected with error)
-Testing Null byte injection... PASSED - SQL injection blocked (silently rejected)
-Testing Unicode injection... PASSED - SQL injection blocked (rejected with error)
-Testing Very long injection payload... PASSED - SQL injection blocked (rejected with error)
-
-=== Subscription ID SQL Injection Tests ===
-Testing Subscription ID injection... PASSED - SQL injection blocked (rejected with error)
-Testing Subscription ID with quotes... PASSED - SQL injection blocked (silently rejected)
-
-=== CLOSE Message SQL Injection Tests ===
-Testing CLOSE with injection... PASSED - SQL injection blocked (rejected with error)
-
-=== Test Results ===
-Total tests: 318
-Passed: 318
-Failed: 0
-✓ All SQL injection tests passed!
-The relay appears to be protected against SQL injection attacks.
-2026-04-03 06:21:01 - \033[0;32m✓ SQL Injection Tests PASSED\033[0m (Duration: 13s)
-2026-04-03 06:21:01 - ==========================================
-2026-04-03 06:21:01 - Running Test Suite: Filter Validation Tests
-2026-04-03 06:21:01 - Description: Input validation for REQ and COUNT messages
-2026-04-03 06:21:01 - ==========================================
-=== C-Relay-PG Filter Validation Tests ===
-Testing against relay at ws://127.0.0.1:8888
-
-Testing Valid REQ message... PASSED
-Testing Valid COUNT message... PASSED
-
-=== Testing Filter Array Validation ===
-Testing Non-object filter... PASSED
-Testing Too many filters... PASSED
-
-=== Testing Authors Validation ===
-Testing Invalid author type... PASSED
-Testing Invalid author hex... PASSED
-Testing Too many authors... PASSED
-
-=== Testing IDs Validation ===
-Testing Invalid ID type... PASSED
-Testing Invalid ID hex... PASSED
-Testing Too many IDs... PASSED
-
-=== Testing Kinds Validation ===
-Testing Invalid kind type... PASSED
-Testing Negative kind... PASSED
-Testing Too large kind... PASSED
-Testing Too many kinds... PASSED
-
-=== Testing Timestamp Validation ===
-Testing Invalid since type... PASSED
-Testing Negative since... PASSED
-Testing Invalid until type... PASSED
-Testing Negative until... PASSED
-
-=== Testing Limit Validation ===
-Testing Invalid limit type... PASSED
-Testing Negative limit... PASSED
-Testing Too large limit... PASSED
-
-=== Testing Search Validation ===
-Testing Invalid search type... PASSED
-Testing Search too long... PASSED
-Testing Search SQL injection... PASSED
-
-=== Testing Tag Filter Validation ===
-Testing Invalid tag filter type... PASSED
-Testing Too many tag values... PASSED
-Testing Tag value too long... PASSED
-
-=== Testing Rate Limiting ===
-Testing rate limiting with malformed requests... UNCERTAIN - Rate limiting may not have triggered (this could be normal)
-
-=== Test Results ===
-Total tests: 28
-Passed: 28
-Failed: 0
-All tests passed!
-2026-04-03 06:21:05 - \033[0;32m✓ Filter Validation Tests PASSED\033[0m (Duration: 4s)
-2026-04-03 06:21:05 - ==========================================
-2026-04-03 06:21:05 - Running Test Suite: Subscription Validation Tests
-2026-04-03 06:21:05 - Description: Subscription ID and message validation
-2026-04-03 06:21:05 - ==========================================
-Testing subscription ID validation fixes...
-Testing malformed subscription IDs...
-Empty ID test: Connection failed (expected)
-Long ID test: Connection failed (expected)
-Invalid chars test: Connection failed (expected)
-NULL ID test: Connection failed (expected)
-Valid ID test: Failed
-Testing CLOSE message validation...
-CLOSE empty ID test: Connection failed (expected)
-CLOSE valid ID test: Failed
-Subscription validation tests completed.
-2026-04-03 06:21:05 - \033[0;32m✓ Subscription Validation Tests PASSED\033[0m (Duration: 0s)
-2026-04-03 06:21:05 - ==========================================
-2026-04-03 06:21:05 - Running Test Suite: Memory Corruption Tests
-2026-04-03 06:21:05 - Description: Buffer overflow and memory safety testing
-2026-04-03 06:21:05 - ==========================================
-==========================================
-C-Relay-PG Memory Corruption Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-Note: These tests may cause the relay to crash if vulnerabilities exist
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - No memory corruption detected
-
-=== Subscription ID Memory Corruption Tests ===
-Testing Empty subscription ID... UNCERTAIN - Expected error but got normal response
-Testing Very long subscription ID (1KB)... UNCERTAIN - Expected error but got normal response
-Testing Very long subscription ID (10KB)... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with null bytes... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with special chars... UNCERTAIN - Expected error but got normal response
-Testing Unicode subscription ID... UNCERTAIN - Expected error but got normal response
-Testing Subscription ID with path traversal... UNCERTAIN - Expected error but got normal response
-
-=== Filter Array Memory Corruption Tests ===
-Testing Too many filters (50)... UNCERTAIN - Expected error but got normal response
-
-=== Concurrent Access Memory Tests ===
-Testing Concurrent subscription creation... ["EVENT","concurrent_1775211666039683705",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775211666039683705",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775211666039683705",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775211666039683705",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775211666039683705",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775211666039683705",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775211666039683705",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775211666039683705",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775211666039683705",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-["EVENT","concurrent_1775211666039683705",{"pubkey":"de5eab3ab53d96e55f5298ce8b474dcbc7d2c98e273216b56923611963a70777","created_at":1775210022,"kind":1,"tags":[],"content":"\nRelay Statistics\n━━━━━━━━━━━━━━━━━━━━\nDatabase Size  0.00 MB (0 bytes)\nTotal Events  0\nActive Subscriptions  0\nOldest Event  -\nNewest Event  -\n\nEvent_Kind_Distribution:\n\nTime-based Statistics:\n0\tEvents in the last day\n0\tEvents in the last week\n0\tEvents in the last month\n\n\n","id":"fffeb172c1b7e1dae263266c685ca848c354135d8b521c632689cfdf12b07a17","sig":"05c01c533e21ef8f19a75064b3658d5cd46fc030dddb43df927675803598bf1ca37524420b2ee338537a9b26fe1dea9487a35fb4e62a75d58b4b6f3361ba589a"}]
-PASSED - Concurrent access handled safely
-Testing Concurrent CLOSE operations... 
-
-
-
-
-
-
-
-
-
-PASSED - Concurrent access handled safely
-
-=== Malformed JSON Memory Tests ===
-Testing Unclosed JSON object... UNCERTAIN - Expected error but got normal response
-Testing Mismatched brackets... UNCERTAIN - Expected error but got normal response
-Testing Extra closing brackets... UNCERTAIN - Expected error but got normal response
-Testing Null bytes in JSON... UNCERTAIN - Expected error but got normal response
-
-=== Large Message Memory Tests ===
-Testing Very large filter array... UNCERTAIN - Expected error but got normal response
-Testing Very long search term... UNCERTAIN - Expected error but got normal response
-
-=== Test Results ===
-Total tests: 17
-Passed: 17
-Failed: 0
-✓ All memory corruption tests passed!
-The relay appears to handle memory safely.
-2026-04-03 06:21:07 - \033[0;32m✓ Memory Corruption Tests PASSED\033[0m (Duration: 2s)
-2026-04-03 06:21:07 - ==========================================
-2026-04-03 06:21:07 - Running Test Suite: Input Validation Tests
-2026-04-03 06:21:07 - Description: Comprehensive input boundary testing
-2026-04-03 06:21:07 - ==========================================
-==========================================
-C-Relay-PG Input Validation Test Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-Testing Basic connectivity... PASSED - Input accepted correctly
-
-=== Message Type Validation ===
-Testing Invalid message type - string... PASSED - Invalid input properly rejected
-Testing Invalid message type - number... PASSED - Invalid input properly rejected
-Testing Invalid message type - null... PASSED - Invalid input properly rejected
-Testing Invalid message type - object... PASSED - Invalid input properly rejected
-Testing Empty message type... PASSED - Invalid input properly rejected
-Testing Very long message type... PASSED - Invalid input properly rejected
-
-=== Message Structure Validation ===
-Testing Too few arguments... PASSED - Invalid input properly rejected
-Testing Too many arguments... PASSED - Invalid input properly rejected
-Testing Non-array message... PASSED - Invalid input properly rejected
-Testing Empty array... PASSED - Invalid input properly rejected
-Testing Nested arrays incorrectly... PASSED - Invalid input properly rejected
-
-=== Subscription ID Boundary Tests ===
-Testing Valid subscription ID... PASSED - Input accepted correctly
-Testing Empty subscription ID... PASSED - Invalid input properly rejected
-Testing Subscription ID with spaces... PASSED - Invalid input properly rejected
-Testing Subscription ID with newlines... PASSED - Invalid input properly rejected
-Testing Subscription ID with tabs... PASSED - Invalid input properly rejected
-Testing Subscription ID with control chars... PASSED - Invalid input properly rejected
-Testing Unicode subscription ID... PASSED - Invalid input properly rejected
-Testing Very long subscription ID... PASSED - Invalid input properly rejected
-
-=== Filter Object Validation ===
-Testing Valid empty filter... PASSED - Input accepted correctly
-Testing Non-object filter... PASSED - Invalid input properly rejected
-Testing Null filter... PASSED - Invalid input properly rejected
-Testing Array filter... PASSED - Invalid input properly rejected
-Testing Filter with invalid keys... PASSED - Input accepted correctly
-
-=== Authors Field Validation ===
-Testing Valid authors array... PASSED - Input accepted correctly
-Testing Empty authors array... PASSED - Input accepted correctly
-Testing Non-array authors... PASSED - Invalid input properly rejected
-Testing Invalid hex in authors... PASSED - Invalid input properly rejected
-Testing Short pubkey in authors... PASSED - Invalid input properly rejected
-
-=== IDs Field Validation ===
-Testing Valid ids array... PASSED - Input accepted correctly
-Testing Empty ids array... PASSED - Input accepted correctly
-Testing Non-array ids... PASSED - Invalid input properly rejected
-
-=== Kinds Field Validation ===
-Testing Valid kinds array... PASSED - Input accepted correctly
-Testing Empty kinds array... PASSED - Input accepted correctly
-Testing Non-array kinds... PASSED - Invalid input properly rejected
-Testing String in kinds... PASSED - Invalid input properly rejected
-
-=== Timestamp Field Validation ===
-Testing Valid since timestamp... PASSED - Input accepted correctly
-Testing Valid until timestamp... PASSED - Input accepted correctly
-Testing String since timestamp... PASSED - Invalid input properly rejected
-Testing Negative timestamp... PASSED - Invalid input properly rejected
-
-=== Limit Field Validation ===
-Testing Valid limit... PASSED - Input accepted correctly
-Testing Zero limit... PASSED - Input accepted correctly
-Testing String limit... PASSED - Invalid input properly rejected
-Testing Negative limit... PASSED - Invalid input properly rejected
-
-=== Multiple Filters ===
-Testing Two valid filters... PASSED - Input accepted correctly
-Testing Many filters... PASSED - Input accepted correctly
-
-=== Test Results ===
-Total tests: 47
-Passed: 47
-Failed: 0
-✓ All input validation tests passed!
-The relay properly validates input.
-2026-04-03 06:21:08 - \033[0;32m✓ Input Validation Tests PASSED\033[0m (Duration: 1s)
-2026-04-03 06:21:08 - 
-2026-04-03 06:21:08 - \033[0;34m=== PERFORMANCE TEST SUITES ===\033[0m
-2026-04-03 06:21:08 - ==========================================
-2026-04-03 06:21:08 - Running Test Suite: Subscription Limit Tests
-2026-04-03 06:21:08 - Description: Subscription limit enforcement testing
-2026-04-03 06:21:08 - ==========================================
-=== Subscription Limit Test ===
-[INFO] Testing relay at: ws://127.0.0.1:8888
-[INFO] Note: This test assumes default subscription limits (max 25 per client)
-
-=== Test 1: Basic Connectivity ===
-[INFO] Testing basic WebSocket connection...
-[PASS] Basic connectivity works
-
-=== Test 2: Subscription Limit Enforcement ===
-[INFO] Testing subscription limits by creating multiple subscriptions...
-[INFO] Creating multiple subscriptions within a single connection...
-[INFO] Hit subscription limit at subscription 2
-[PASS] Subscription limit enforcement working (limit hit after 1 subscriptions)
-
-=== Test Complete ===
-2026-04-03 06:21:09 - \033[0;32m✓ Subscription Limit Tests PASSED\033[0m (Duration: 1s)
-2026-04-03 06:21:09 - ==========================================
-2026-04-03 06:21:09 - Running Test Suite: Load Testing
-2026-04-03 06:21:09 - Description: High concurrent connection testing
-2026-04-03 06:21:09 - ==========================================
-==========================================
-C-Relay-PG Load Testing Suite
-==========================================
-Testing against relay at ws://127.0.0.1:8888
-
-=== Basic Connectivity Test ===
-✓ Relay is accessible
-
-==========================================
-Load Test: Light Load Test
-Description: Basic load test with moderate concurrent connections
-Concurrent clients: 10
-Messages per client: 5
-==========================================
-Launching 10 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 1s
-Total connections attempted: 10
-Successful connections: 10
-Failed connections: 0
-Connection success rate: 100%
-Messages expected: 50
-Messages sent: 50
-Messages received: 100
-✓ EXCELLENT: High connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Medium Load Test
-Description: Moderate load test with higher concurrency
-Concurrent clients: 25
-Messages per client: 10
-==========================================
-Launching 25 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 5s
-Total connections attempted: 35
-Successful connections: 25
-Failed connections: 0
-Connection success rate: 71%
-Messages expected: 250
-Messages sent: 250
-Messages received: 500
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Heavy Load Test
-Description: Heavy load test with high concurrency
-Concurrent clients: 50
-Messages per client: 20
-==========================================
-Launching 50 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 16s
-Total connections attempted: 85
-Successful connections: 50
-Failed connections: 0
-Connection success rate: 58%
-Messages expected: 1000
-Messages sent: 1000
-Messages received: 2000
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Test: Stress Test
-Description: Maximum load test to find breaking point
-Concurrent clients: 100
-Messages per client: 50
-==========================================
-Launching 100 clients...
-All clients completed. Processing results...
-
-=== Load Test Results ===
-Test duration: 71s
-Total connections attempted: 185
-Successful connections: 100
-Failed connections: 0
-Connection success rate: 54%
-Messages expected: 5000
-Messages sent: 5000
-Messages received: 7500
-✗ POOR: Low connection success rate
-
-Checking relay responsiveness... ✓ Relay is still responsive
-
-==========================================
-Load Testing Complete
-==========================================
-All load tests completed. Check individual test results above.
-If any tests failed, the relay may need optimization or have resource limits.
-2026-04-03 06:22:45 - \033[0;32m✓ Load Testing PASSED\033[0m (Duration: 96s)
-2026-04-03 06:22:45 - ==========================================
-2026-04-03 06:22:45 - Skipping Test Suite: Stress Testing
-2026-04-03 06:22:45 - Reason: Disabled: script missing (stress_tests.sh)
-2026-04-03 06:22:45 - ==========================================
-2026-04-03 06:22:45 - ==========================================
-2026-04-03 06:22:45 - Skipping Test Suite: Rate Limiting Tests
-2026-04-03 06:22:45 - Reason: Disabled: script missing (rate_limiting_tests.sh)
-2026-04-03 06:22:45 - ==========================================
-2026-04-03 06:22:45 - 
-2026-04-03 06:22:45 - \033[0;34m=== INTEGRATION TEST SUITES ===\033[0m
-2026-04-03 06:22:45 - ==========================================
-2026-04-03 06:22:45 - Skipping Test Suite: NIP Protocol Tests
-2026-04-03 06:22:45 - Reason: Disabled: currently failing connectivity checks in CI/local script context
-2026-04-03 06:22:45 - ==========================================
-2026-04-03 06:22:45 - ==========================================
-2026-04-03 06:22:45 - Skipping Test Suite: Configuration Tests
-2026-04-03 06:22:45 - Reason: Disabled: currently failing basic connectivity assertion
-2026-04-03 06:22:45 - ==========================================
-2026-04-03 06:22:45 - ==========================================
-2026-04-03 06:22:46 - Skipping Test Suite: Authentication Tests
-2026-04-03 06:22:46 - Reason: Disabled: script syntax error in auth_tests.sh
-2026-04-03 06:22:46 - ==========================================
-2026-04-03 06:22:46 - 
-2026-04-03 06:22:46 - \033[0;34m=== BENCHMARKING SUITES ===\033[0m
-2026-04-03 06:22:46 - ==========================================
-2026-04-03 06:22:46 - Skipping Test Suite: Performance Benchmarks
-2026-04-03 06:22:46 - Reason: Disabled: currently exits non-zero during benchmark run
-2026-04-03 06:22:46 - ==========================================
-2026-04-03 06:22:46 - ==========================================
-2026-04-03 06:22:46 - Skipping Test Suite: Resource Monitoring
-2026-04-03 06:22:46 - Reason: Disabled: currently exits non-zero
-2026-04-03 06:22:46 - ==========================================
-2026-04-03 06:22:46 - 
-2026-04-03 06:22:46 - ==========================================
-2026-04-03 06:22:46 - TEST EXECUTION COMPLETE
-2026-04-03 06:22:46 - ==========================================
-2026-04-03 06:22:46 - Total test suites: 14
-2026-04-03 06:22:46 - Passed: 7
-2026-04-03 06:22:46 - Failed: 0
-2026-04-03 06:22:46 - Skipped: 7
-2026-04-03 06:22:46 - Total duration: 118s
-2026-04-03 06:22:46 - Success rate: 50%
-2026-04-03 06:22:46 - 
-2026-04-03 06:22:46 - Detailed log: test_results_20260403_062048.log
-2026-04-03 06:22:46 - HTML report generated: test_report_20260403_062048.html
-2026-04-03 06:22:46 - \033[0;32m✓ ALL TESTS PASSED\033[0m
diff --git a/wsb_login_c-relay-pg.sh b/wsb_login_c-relay-pg.sh
new file mode 100755
index 0000000..ac86745
--- /dev/null
+++ b/wsb_login_c-relay-pg.sh
@@ -0,0 +1,28 @@
+#!/bin/bash
+# Script to automate login to c-relay-pg.html using ~/.wsb_key
+# Usage: ./wsb_login_c-relay-pg.sh
+
+SEC=$(tr -d '\n\r' < /home/user/.wsb_key/private_key.txt)
+
+echo "Opening relay admin UI..."
+# Clear browser data by using a fresh profile directory
+rm -rf ./browser-data
+AGENT_BROWSER_HEADED=1 agent-browser open https://laantungir.net/client/c-relay-pg.html
+AGENT_BROWSER_HEADED=1 agent-browser wait --load networkidle
+
+echo "Logging in..."
+# Click "Local Key" button
+AGENT_BROWSER_HEADED=1 agent-browser click "Local Key"
+AGENT_BROWSER_HEADED=1 agent-browser wait 500
+
+# Fill secret key
+AGENT_BROWSER_HEADED=1 agent-browser fill "Enter your secret key" "$SEC"
+AGENT_BROWSER_HEADED=1 agent-browser click "Import Key"
+AGENT_BROWSER_HEADED=1 agent-browser wait 1000
+
+# Click "Continue"
+AGENT_BROWSER_HEADED=1 agent-browser click "Continue"
+AGENT_BROWSER_HEADED=1 agent-browser wait 1800
+
+echo "Login complete. Snapshotting..."
+AGENT_BROWSER_HEADED=1 agent-browser snapshot -i