One Character in an HTTP Header Just Bypassed Authentication on 325M Servers

This is quite a catastrophic security issue by just using a single character to bypass authentication.

And no-one cares.