Web Hack List

Other nomination

Response Splitting Filter Evasion

A redirector stripped any injection containing a forward slash, blocking both closing HTML tags and the usual Content-Type: text/html header needed to escalate response splitting into HTML injection. Shortening the header to Content-Type: html removes the slash and still gets the browser to parse the split response as markup.

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.