HTTP header injection - Reference.org

On this page

HTTP header injection

Web application vulnerability that occurs when HTTP headers are dynamically generated from user input; can allow for HTTP response splitting, session fixation (via Set-Cookie), cross-site scripting, and malicious redirect attacks

HTTP header injection is a general class of web application security vulnerability which occurs when Hypertext Transfer Protocol (HTTP) headers are dynamically generated based on user input. Header injection in HTTP responses can allow for HTTP response splitting, session fixation via the Set-Cookie header, cross-site scripting (XSS), and malicious redirect attacks via the location header.

We don't have any images related to HTTP header injection yet.

You can add one yourself here.

We don't have any YouTube videos related to HTTP header injection yet.

You can add one yourself here.

We don't have any PDF documents related to HTTP header injection yet.

You can add one yourself here.

We don't have any Books related to HTTP header injection yet.

You can add one yourself here.

We don't have any archived web articles related to HTTP header injection yet.

You can submit a link to a page to archive here.

Sources

See also