Glossary
Reference documentation for every test in Http11Probe, organized by topic. Each page explains the RFC requirement, what the test sends, what response is expected, and why it matters.
Understanding HTTP
What HTTP is, how HTTP/1.1 works at the wire level, its history from 0.9 to 3, and alternatives.
RFC Requirement Dashboard
Every test classified by RFC 2119 requirement level (MUST/SHOULD/MAY).
RFC Basics
What RFCs are, how to read requirement levels (MUST/SHOULD/MAY), and which RFCs define HTTP/1.1.
Baseline
Sanity request used to confirm the target is reachable before running negative tests.
Line Endings
CRLF requirements, bare LF handling, and bare CR rejection per RFC 9112 Section 2.2.
Request Line
Request-line format, multiple spaces, missing target, fragments, HTTP version validation.
Header Syntax
Obs-fold, space before colon, empty names, invalid characters, missing colon.
Host Header
Missing Host, duplicate Host — the only tests where RFC explicitly mandates 400.
Content-Length
Non-numeric CL, plus sign, integer overflow, leading zeros, negative values.
Body Handling
Content-Length body consumption, chunked transfer encoding, incomplete bodies, chunk extensions.
Request Smuggling
CL+TE conflicts, TE obfuscation, pipeline injection, and why ambiguous framing is dangerous.
Malformed Input
Binary garbage, oversized fields, control characters, incomplete requests.
WebSockets
Protocol upgrade validation, WebSocket handshake method and version checks.
Header Normalization
Echo-based tests checking if servers normalize malformed header names (underscore, tab, casing).
Caching
Optional feature probes — conditional requests, ETag handling, caching behavior.
Http11Probe — HTTP/1.1 compliance & smuggling testerSource on GitHub