Menu
Home
People
Places
Arts
History
Plants & Animals
Science
Life & Culture
Technology
Reference.org
HTTP header injection
open-in-new
<p>HTTP header injection is a general class of <a href="/facts/Web_application/BLkF3BIN">web application</a> <a href="/facts/Security_vulnerability/jg0Gr71M">security vulnerability</a> which occurs when <a href="/facts/Hypertext_Transfer_Protocol/TWtvf7JD">Hypertext Transfer Protocol</a> (HTTP) <a href="/facts/List_of_HTTP_headers/hEkcQe2f">headers</a> are dynamically generated based on user input. Header injection in HTTP responses can allow for <a href="/facts/HTTP_response_splitting/GRFjek5b">HTTP response splitting</a>, <a href="/facts/Session_fixation/tn7DsIPF">session fixation</a> via the Set-Cookie header, <a href="/facts/Cross-site_scripting/dhtusKKm">cross-site scripting</a> (XSS), and malicious redirect attacks via the location header. </p>