Re:Practical HTTP Header Smuggling: Sneaking Past Reverse Pr...
by andrius4669 on Thursday November 11, 2021 @10:43PM
(#29196114)
You definitely shouldn't strip left side of header, as space preceding that is syntax for header splitting over multiple lines at least in email. Not sure if this applies to http though, but some parsers may do that anyway, and some don't.
Just shows how easy it is to be wrong by being lazy with http parsing.
Just shows how easy it is to be wrong by being lazy with http parsing.