3 ms·
Is that really a legitimate attack vector? I would expect web servers to just discard weird headers and serve the regular page. And, at the same time, I would
by hartator 7y ago
Is that really a legitimate attack vector?
I would expect web servers to just discard weird headers and serve the regular page. And, at the same time, I would also expect CDN to not cache 400 bad requests or 500 server errors.
- stebann 7y agoYes, it is. Many servers/proxies/caches/ad-hoc-header-filters configurations, if they're not handle properly, don't expect that some clients will tamper their headers or people who configure them don't even take them into account, so servers/proxies/caches/ad-hoc-header-filters don't discard them (better approach is to use white-lists but it's not the panacea). CDNs can cache or not, but I have seen a variety of behaviors even for the same CDN, so again I suspect many times this could be caused by misconfiguration.