Response splitting not working on any host

DarkMantis

New Member
So I was testing a url comparison and while everything that I've coded works on my localhost , none from the webhosts I uploaded my script to does not parse it correctly.http://pastebin.com/fX5Qi4AAI troubleshooted and found what the problem is. Hosts such as 000webhost, cwahi or any at all, fail to execute %0d%0a hexes. They represent a line break and work perfectly on my localhost but not on any public one.For example:\[code\]%0D%0AContent-Type: text/html%0D%0AHTTP/1.1 200 OK%0D%0AContent-Type: text/html%0D%0A --> works on localhost but fails to execute online.\[/code\]Hope somebody can assist. Thanks in advance!
 
Back
Top