News for hackers. Stuff that matters.

flightofthefox

Solution seems funky. Attackers could just omit the Content-Length header