Vulnerabilities
HTTP Headers Enable Indirect Prompt Injection in AI Agents via 30 Sites
Researchers found dozens of sites using HTTP headers to inject malicious instructions into AI agents, though most attempts were harmless pranks.
HTTP headers
Everything Vuln Post has reported about HTTP headers: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
How CRLF Injection Works: Step-by-Step Mechanics and Defense
CRLF injection exploits protocol parsing rules to split headers from bodies, allowing attackers to inject arbitrary HTTP response data or bypass security controls without executing code.