3 ms·
HTTP Response Splitting: A Common, But Frequently Unknown, Security Issue
- Popcorn 16y agoFixed in PHP 5.1.2 and onwards for the interested: http://uk3.php.net/ChangeLog-5.php#5.1.2 http://uk3.php.net/ChangeLog-5.php#5.1.2
- tlack 16y agoCan anyone think of a common case where a request variable is included directly in a header? I can see why it would happen (in terms of the programmer misusing his easily available tools) but I can't think of a likely case for it in practice, other than perhaps including raw request data in a cookie header.