Writeups
Writeups & Research
Findings, tooling notes, and desync/smuggling research. Newest first.
Content-Length: 0 as a Body Inspection Bypass
Setting Content-Length to zero can get a security filter to skip inspecting the body while the backend still reads it. Confirmed once, not a general finding yet.