Two identical body strips have different red end markers: the CL marker follows the full body, while the TE marker follows the zero-chunk segment and leaves a synthetic next request.

Request smuggling desyncs the proxy chain

Request smuggling occurs when components disagree about HTTP message boundaries and an attacker exploits the disagreement. In a proxy chain, bytes treated as one request’s body by the front end may become another request at the back end. The important evidence is inconsistent parsing and forwarding, not simply finding two HTTP status lines in a response capture. ...

October 19, 2027 · 5 min · XB Field Notes