https://nalar.dev/tags/protocol-security/ Recent content in Protocol Security on Nalar Hugo en-us Thu, 17 Sep 2026 00:00:00 +0000 https://nalar.dev/http-request-smuggling-begins-at-a-message-framing-disagreement/ Thu, 17 Sep 2026 00:00:00 +0000 https://nalar.dev/http-request-smuggling-begins-at-a-message-framing-disagreement/ <h1 id="http-request-smuggling-begins-at-a-message-framing-disagreement">HTTP Request Smuggling Begins at a Message-Framing Disagreement</h1> <p>A reverse proxy can validate an HTTP request, route it to an approved application, and still deliver a different request sequence from the one it believed it accepted. The failure does not require the proxy to ignore authentication or the origin to execute malformed syntax. It can arise when the two HTTP processors disagree about the byte at which one request ends and the next begins.</p>