Python urllib HTTP Header Injection
Posted by deepcore on June 16, 2016 – 10:46 pm
Python’s built-in URL library (“urllib2” in 2.x and “urllib” in 3.x) is vulnerable to protocol stream injection attacks (a.k.a. “smuggling” attacks) via the http scheme.
Post a reply
You must be logged in to post a comment.