HTTP Request Smuggling via Content Length Obfuscation
该报告还没有中文解读。
原文摘录
摘自原文（4277 字符中的一小部分）
**Summary:** The default web service in the most recent version of 18.X seems to have an issue with the interpretation of malformed headers. If a space is left before a content-length header then the header is not read correctly. This leaves the ability to smuggle in a second request as the body of …
原文中的代码
const http = require('http');
const port = 8082;
const server = http.createServer((req, res) => {
if (req.url === '/hello') {
console.log(JSON.stringify(req.headers));
console.log('%s', req.url);
res.writeHead(200, { 'Content-Type': 'text/plain' });
res.end('Hello, World!\n'); …默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Node.js 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @bpingel · 版权归作者与 Node.js 所有