You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The current setup requires the HTTP response to completely finish to be able to return the response to the headers. In some situations, a website will reply with a response of unknown length and use it to stream data as response to other events. This will not work and the request will instead just timeout on the attacker side.
PS. Sorry for dropping a batch of issues like this. We have an ambition of providing PRs as well but letting you know about these things straight away in the meantime.
The text was updated successfully, but these errors were encountered:
The current setup requires the HTTP response to completely finish to be able to return the response to the headers. In some situations, a website will reply with a response of unknown length and use it to stream data as response to other events. This will not work and the request will instead just timeout on the attacker side.
PS. Sorry for dropping a batch of issues like this. We have an ambition of providing PRs as well but letting you know about these things straight away in the meantime.
The text was updated successfully, but these errors were encountered: