HTTP Response Splitting

Overview std/net/http is a Go standard library package std/net/http Affected versions of this package are vulnerable to HTTP Response Splitting. Go Vulnerability Report: The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject...

Changeable Host Values

Lynx has changeable host values. It doesn't parse the authority component of the URL when the url ends with ?. Using this flaw, attackers can trick the application into connecting to a different host value...