Should injection tag be added to all questions about various injections?

Question

There is injection. But except this tag there are also xss, sql-injection, path-injection etc.

Should all questions with those tags be also tagged with injection? If not, when injection should be used?

For example, is usage of injection appropriate in this question?

Community · Accepted Answer · 2017-03-17 10:46:06Z

4

I suggest using injection only for injection attacks where there is not a more specific injection tag available.

For XSS attacks, use xss, not injection.
For SQL injection attacks, use sql-injection, not injection.
For path injection attacks, use path-injection, not injection.
For other injection-style attacks that do not have a more specific tag, you could use injection. For example, you might use injection on a question about a command injection attack.

For instance, you asked about what the tags should be on Should IP addresses be validated to prevent SQL Injection?. By my guidelines above, the right set of tags is sql-injection but not injection.

CommunityBot

3

answered Jul 25, 2012 at 19:19

D.W.

100k15 silver badges13 bronze badges

Definitely agree here - because XSS, SQLi and Path injection are well known, definite types of attack it aids clarity to specify the tag. For others the generic injection tag is useful. If a new class of injection attacks becomes common, it may then make sense to create a new specific one.
– Rory Alsop Mod
Commented Jul 25, 2012 at 20:07
1

Tag descriptions should describe appropriate usage.
– curiousguy
Commented Aug 1, 2012 at 14:43

Add a comment |

Community · Accepted Answer · 2017-03-17 10:46:06Z

Well tagging question, except when the scope of the tag is really obvious, I usually consult the help text of the tag:

inserting malicious content, usually code (like SQL, Javascript) into a vulnerable application

In this case the help text explicitly makes the tag appropriate for both SQL injection and XSS.

(When the help text is too vague, unclear, or even missing, I see which other questions use the tag and try to stay consistent with existing usage.)

2 Answers 2