On 08/03/2016 12:05 PM, Jacob Champion wrote:
Right, I was just wondering out loud if condensing into a single space could give anyone the chance to defeat a header length check in a multi-layered system. It's admittedly a pretty "tinfoil hat" concern.
Never mind. It would need to be the other way around (expanding a header value rather than contracting) to cause a problem for a backend.
--Jacob
