You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
http parsing
About this tag
The http parsing tag covers discussions about how HTTP requests and responses are interpreted by software, with a focus on security and compliance. Recent threads highlight vulnerabilities like CVE-2026-2708, which involves HTTP request smuggling due to duplicate Content-Length headers in libsoup. Another topic is the HTTP.sys parsing correction in Windows 11 KB5068865, which addresses a subtle parsing issue. Additionally, the same update introduces a registry toggle to enforce RFC 9112 chunked parsing, giving administrators control over strict HTTP/1.1 parsing behavior. These posts emphasize the importance of proper HTTP parsing for security and compatibility in Windows and cross-platform environments.
CVE-2026-2708 is a reminder that some of the most consequential web vulnerabilities still begin with a deceptively small parsing decision: what should a server do when an HTTP request contains more than one Content-Length header? The flaw, assigned to libsoup, concerns HTTP/1 request smuggling...
Microsoft’s November cumulative for Windows 11, version 23H2, has arrived as KB5068865 (OS Build 22631.6199), packing a mix of security fixes and a set of targeted quality improvements that were first floated in the October preview. The release combines the monthly security roll-up with prior...
Microsoft’s November 11, 2025 cumulative update for Windows 11 (KB5068865, OS Build 22621.6199) delivers a targeted networking fix for the HTTP.sys request parser and exposes an important compatibility and security decision for administrators: the update tightens HTTP/1.1 chunk extension parsing...