Go net/HTTP: invalid headers are normalized, allowing request smugglinggithub.com2 points·laumars··0 commentsOpen articleSaveView on HN