HTTP request smuggling
id:
http-request-smuggling-190-5454854
title:
HTTP request smuggling
text:
HTTP request smuggling (HRS) is a security exploit on the HTTP protocol that takes advantage of an inconsistency between the interpretation of Content-Length and Transfer-Encoding headers between HTTP server implementations in an HTTP proxy server chain. It was first documented in 2005 by Linhart et al. The Transfer-Encoding header works by defining a directive on how to interpret the body of the HTTP request, with the common and necessary directive for this attack being the chunked transfer enc
brand slug:
wiki
category slug:
encyclopedia
description:
Web security vulnerability
original url:
https://en.wikipedia.org/wiki/HTTP_request_smuggling
date created:
2020-03-13T16:18:55Z
date modified:
2024-09-09T15:03:04Z
main entity:
{"identifier":"Q96380193","url":"https://www.wikidata.org/entity/Q96380193"}
image:
{"content_url":"https://upload.wikimedia.org/wikipedia/commons/5/5b/HTTP_logo.svg","width":512,"height":274}
fields total:
13
integrity:
16