Santandersecurityresearch/DrHeader

Headers are key sensitive

javixeneize opened this issue · 0 comments

  • drHEADer version: 1.2.0
  • Python version: NA
  • Operating System: NA

Description

Headers are case insensitive, according to RFC 2616. Drheader is comparing the header names without ignoring the case, and therefore some headers are not properly validated

What I Did

It was a very simple test. I just created a report file with a header called "server" in lower case. Since this is a header that should not exist, I was expecting Drheader to report it but it didn't as the header it was looking for was "Server"