Skip to content

This site is still under active development. You may run into bugs, and not all content is available in both languages yet.

#security

1 posts

WebSocket Request SmugglingHow a reverse proxy that trusts the Upgrade header without checking the back-end response can be tricked into tunneling plain HTTP requests through what it believes is a WebSocket connection.