← Back to Baseline

MB-R295

HUMAN VERIFICATION REQUIRED ASVS 4.2.2 Correct Content-Length generation

MB-C18 ASVS Level 3 Human Assurance High

When generating HTTP messages, the Content-Length header field does not conflict with the length of the content as determined by the framing of the HTTP protocol, in order to prevent request smuggling attacks.