HTTP Header Injection

Photo by Jordan Harrison on Unsplash

What is HTTP Header Injection?

HTTP Header Injection is a web Security Vulnerability where the web application dynamically constructs headers from the user’s supplied input.

HTTP works on the Request/Response Model. The user requests a resource from the web server and the web-server resounds accordingly. HTTP headers are used to request the necessary resources. Headers can be categorized into two…