Get the latest tech news
CRLF Injection in `–proxy-header` allows extra HTTP headers (CWE-93)
Hello Team, There is a bug in `curl` where a user can inject **new HTTP headers** into a proxy request by using special characters in the `--proxy-header` option. This is done by adding `\r\n` (carriage return + line feed) inside the header value. This breaks the HTTP format and lets the user create more headers from a single line # What’s the Problem? The problem happens because `curl`...
Or read this on Hacker News