Collected research

HTTP Request Smuggling in the Multiverse of Parsing Flaws

Zeyu Zhang · Zeyu Zhang

Explains how signed and partial integer conversions, generic whitespace stripping and transfer-coding parsing produce different HTTP request boundaries. Worked proxy/backend combinations distinguish exploitable mismatches from permissive behavior alone. The article and slides supply concrete requests and trace the responsible library semantics.

Record

Researcher

Zeyu Zhang

Published by

Zeyu Zhang

Topic

HTTP

In the archive

• Collected in the 2022 research round

Related sources

• HTTP Request Smuggling in the Multiverse of Parsing Flaws (Slides) Slides

Tags

• request-smuggling
• parser-differential
• http

This page is the archive's own catalogue record. The research is the work of Zeyu Zhang, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 29 September 2026.