HTTP Response Splitting: A Common, But Frequently Unknown, Security Issue
avatraxiom.livejournal.com
HTTP Response Splitting: A Common, But Frequently Unknown, Security Issue
1–3 of 3 posts
Re: HTTP Response Splitting: A Common, But Frequently Unknown, Security Issue
#2Fixed in PHP 5.1.2 and onwards for the interested: http://uk3.php.net/ChangeLog-5.php#5.1.2
Re: HTTP Response Splitting: A Common, But Frequently Unknown, Security Issue
#3Can anyone think of a common case where a request variable is included directly in a header? I can see why it would happen (in terms of the programmer misusing his easily available tools) but I can't think of a likely case for it in practice, other than perhaps including raw request data in a cookie header.