地图 / [iOS] URI Obfuscation in iOS application

[iOS] URI Obfuscation in iOS application

注入与走私 / HTTP Response Splitting / #176159

厂商: Brave Software
严重程度: 低危
赏金: —
弱点: HTTP Response Splitting
研究员: @noob-boy
披露日期: 2016-10-17
资产: —
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（557 字符中的一小部分）

you must trick someone into viewing a website they did not want to view by tempting them with something they are familiar with.

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Brave Software 所有。

时间线

2016-10-16报告提交
2016-10-17公开披露

阅读 HackerOne 原文 ↗作者 @noob-boy · 版权归作者与 Brave Software 所有

同类报告

HTTP Response Header Injection in shopify/pitchfork + Rack 3Shopify · 2025-03-27 · $800 HTTP Smuggling multiple issues in Squid 3.x & squid 4.xInternet Bug Bounty · 2021-08-26 Http request splittingNode.js · 2020-01-15 [m.airbnb.com] CRLF InjectionAirbnb · 2018-04-03 · $2,500 [newscdn.starbucks.com] CRLF Injection, XSSStarbucks · 2017-03-09 HTTP/2 and HTTP/3 Header Injection in curlcurl · 2025-12-30