4 ms·
Given how widely publicized request smuggling was, I'm surprised it's still a problem for apps with large user bases like Slack.
by JMTQp8lwXL 7y ago
Given how widely publicized request smuggling was, I'm surprised it's still a problem for apps with large user bases like Slack.
- lonelappde 7y agoOther commenters note that some platforms intentionally leave this vuln open because closing it breaks some buggy clients. Convenience over security.
- JMTQp8lwXL 7y agoI suppose if having account takeovers is worth the convenience-- sure, it's a tradeoff each company will have to make individually.