Security
httpspl.txt.html
Associated article: HTTP Response Splitting
Tags: Web Development Security
Published source code accompanying the article by Amit Klein and Steve Orrin in which they describe HTTP Response Splitting, a powerful new attack technique that enables other attacks.
HTTP Response Splitting
by Amit Klein and Steve Orrin
Example 1:
(a)
<%
response.sendRedirect("/by_lang.jsp?lang="+
request.getParameter("lang"));
%>
(b)
HTTP/1.1 302 Moved Temporarily
Date: Wed, 24 Dec 2003 12:53:28 GMT
Location: http://10.1.1.1/by_lang.jsp?lang=...
