Repos-que-me-gustan/devops-exercises
1
0
Fork 0
Code Pull Requests Activity

ANSWERED: Explain HTTP Header Injection.

Browse Source
This commit is contained in:
Austin Songer 2020-01-21 22:03:20 +00:00
parent 1af924ba87
commit db533c891e
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
README.md
View File

@ -5427,6 +5427,9 @@ You can use OWASP ZAP to analyze a "request", and if it appears that there no pr
<details>
<summary>Explain HTTP Header Injection vulnerability</summary><br><b>
HTTP Header Injection vulnerabilities occur when user input is insecurely included within server responses headers. If an attacker can inject newline characters into the header, then they can inject new HTTP headers and also, by injecting an empty line, break out of the headers into the message body and write arbitrary content into the application's response.
</b></details>
<details>