News for hackers. Stuff that matters.

A comment on Practical HTTP Header Smuggling: Sneaking Past Reverse Proxies to Attack AWS. Parent comment

Re:Practical HTTP Header Smuggling: Sneaking Past Reverse Pr... by gmfawcett on Thursday November 11, 2021 @10:54PM (#29196157)
> since "Content-Length : 0" is valid.

According to which spec? RFC 7230 allows optional whitespace (OWS) after the colon, but not before it:

   header-field   = field-name ":" OWS field-value OWS
[ Parent | on HN ]

There are no comments on this comment yet.