isn't http/1.1 request smuggling a known risk in exactly the scenario you're using it in?
If I understand correctly that only affects reverse proxy chains, which people might just not have. Or not have in a way that is vulnerable to that?
I guess it makes sense that "the cloud" moves to it, but beyond that, it might be fine?
alt Hacker News
If I understand correctly that only affects reverse proxy chains, which people might just not have. Or not have in a way that is vulnerable to that?
I guess it makes sense that "the cloud" moves to it, but beyond that, it might be fine?