OWASP Periodic Table of Vulnerabilities - HTTP Request Splitting

Return to Periodic Table Working View

HTTP Request Splitting

Root Cause Summary

insecure coding/HTTP parsing errors/caching

Browser / Standards Solution

Sanitize HTTP requests and responses

Perimeter Solution

• Sanitize HTTP headers
  
• Avoid HTTP connection sharing

Generic Framework Solution

Sanitize HTTP headers

Custom Framework Solution

None

Custom Code Solution

None

References

HTTP Message Splitting, Smuggling and Other Animals (Amit Klein, OWASP)