logoalt Hacker News

jgalt212 • today at 12:34 PM • 1 reply • view on HN

How may web servers only serve brotli?

How many clients only accept brotli?


Replies

michaelbuckbee • today at 12:40 PM

Well it's negotiated, right?

So say you run a SaaS that allows for something like letting people set their Avatar from an image URL which gets downloaded.

As an attacker I setup a new server that serves only brotli and then submit that URL to the SaaS.

➕ show 2 replies