> since "Content-Length : 0" is valid. According to which spec? RFC 7230 allows ... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

gmfawcett on Nov 12, 2021 | parent | context | favorite | on: Practical HTTP Header Smuggling: Sneaking Past Rev...

> since "Content-Length : 0" is valid.

According to which spec? RFC 7230 allows optional whitespace (OWS) after the colon, but not before it:

   header-field   = field-name ":" OWS field-value OWS

Join us for AI Startup School this June 16-17 in San Francisco!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact