3 ms·
"Stop working" here apparently means scheduled release of an exploit of a vulnerability in proxies that do access control and incorrectly handle combinations of
by Kinrany 1y ago
"Stop working" here apparently means scheduled release of an exploit of a vulnerability in proxies that do access control and incorrectly handle combinations of headers Content-Length and Transfer-Encoding: chunked.
- Retr0id 1y ago> incorrectly handle combinations of headers Content-Length and Transfer-Encoding: chunked. I think the article uses this as an example of the concept of Request Smuggling in general. This broad approach has been known for a long time. I assume the new research uses conceptually similar but concretely different approaches to trigger parser desyncs.