JWT Header (JSON)
'kid' (Key ID) Parameter
Inject characters like ../, \0, or SQL queries to simulate path traversal or SQL injection attacks.
JWT Payload (JSON)
Generated JWT
Server-Side Simulation
Security Warning Detected
The input contains characters often used in Path Traversal or SQL Injection attacks. Ensure your backend strictly validates the kid header against an allowlist and does not pass this value directly into filesystem or database queries.