Revision as of 23:58, 23 March 2024 edit Sohom Datta (talk \| contribs) Edit filter managers, Autopatrolled, Interface administrators, Administrators 10,862 edits 2005 research is not new lol ← Previous edit		Revision as of 23:59, 23 March 2024 edit undo Sohom Datta (talk \| contribs) Edit filter managers, Autopatrolled, Interface administrators, Administrators 10,862 edits Added {{Citation style}} tag Tag: Twinkle Next edit →
Line 1: {{Short description\|Web application security vulnerability}} {{Citation style\|date=March 2024}} {{HTTP}} '''HTTP header injection''' is a general class of [[web application]] [[security vulnerability]] which occurs when [[Hypertext Transfer Protocol]] (HTTP) [[list of HTTP headers\|headers]] are dynamically generated based on user input. Header injection in HTTP responses can allow for [[HTTP response splitting]], [[session fixation]] via the Set-Cookie header, [[cross-site scripting]] (XSS), and malicious redirect attacks via the ___location header.

HTTP header injection: Difference between revisions