News for hackers. Stuff that matters.

A comment on Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps. Parent comment

Re:Node2Shell evolves to HTTP2Shell, blast radius affects ma... by cowlevel on Saturday October 24, 2026 @10:32AM (#50221622)
Actually it does, if the server is willing to decompress POST bodies.
[ Parent | on HN ]
Re:Node2Shell evolves to HTTP2Shell, blast radius affects ma... by croes on Saturday October 24, 2026 @10:43AM (#50221743)
Brotli bodies, so Brotli2Shell
[ Parent | on HN ]
Re:Node2Shell evolves to HTTP2Shell, blast radius affects ma... by SkiFire13 on Sunday October 25, 2026 @03:09AM (#50229064)
And only those using Google's Brotli implementation.
[ Parent | on HN ]
Re:Node2Shell evolves to HTTP2Shell, blast radius affects ma... by jwilk on Sunday October 25, 2026 @05:37AM (#50229752)
What are the other implementations?
[ Parent | on HN ]