Tag
request-smuggling
- Jan 29, 2026 Message Delimitation and the Mechanics of Request Smuggling How Content-Length, Transfer-Encoding, and connection close define where a message ends, and how disagreements between parsers turn that boundary into an attack. internet protocols
- Dec 20, 2025 Header Splitting: When a Value Becomes a Field Boundary How CR and LF terminate header fields on the wire, what modern servers do to reject them, and why the response body and the request line need separate treatment. security
- Oct 8, 2025 Application Proxy Firewalls and Parser Differentials What a layer 7 proxy gains by terminating and re-originating a connection, why the parser it runs becomes an attack surface, and how two systems disagreeing about the same bytes creates a bypass. security
- Dec 29, 2023 Proxy Boundaries, Forwarded Headers, and the Hop-by-Hop Contract Which headers stop at an intermediary, how the client address is reconstructed without trusting the wrong hop, and why framing disagreement produces smuggling. backend systems