Results matrix Entropy

Overview▸

Overview What is HTTP?Message Syntax Headers Connections Body and Framing Caching and Negotiation History and Future RFC Requirement Dashboard RFC Basics BASELINE Glossary

Glossary▸

Line Endings 5▸

BARE-LF-REQUEST-LINE BARE-LF-HEADER CR-ONLY-LINE-ENDING Overview LEADING-CRLF

Request Line 27▸

MULTI-SP-REQUEST-LINE MISSING-TARGET FRAGMENT-IN-TARGET INVALID-VERSION Overview HTTP09-REQUEST ASTERISK-WITH-GET OPTIONS-STAR UNKNOWN-TE-501 ABSOLUTE-FORM METHOD-CASE METHOD-CONNECT METHOD-TRACE REQUEST-LINE-TAB HEAD-NO-BODY VERSION-MISSING-MINOR UNKNOWN-METHOD VERSION-LEADING-ZEROS 405-ALLOW VERSION-WHITESPACE OPTIONS-ALLOW HTTP12-VERSION TRACE-WITH-BODY VERSION-CASE LONG-URL-OK SPACE-IN-TARGET TRACE-SENSITIVE

Header Syntax 16▸

SP-BEFORE-COLON OBS-FOLD EMPTY-HEADER-NAME INVALID-HEADER-NAME HEADER-NO-COLON Overview CONNECTION-CLOSE WHITESPACE-BEFORE-HEADERS EXPECT-UNKNOWN HTTP10-DEFAULT-CLOSE DATE-HEADER NO-1XX-HTTP10 CONTENT-TYPE DATE-FORMAT DUPLICATE-CT ACCEPT-NONSENSE

Host Header 8▸

MISSING-HOST DUPLICATE-HOST DUPLICATE-HOST-SAME HOST-WITH-USERINFO HOST-WITH-PATH HOST-EMPTY-VALUE Overview HTTP10-NO-HOST

Content-Length 4▸

CL-NON-NUMERIC CL-PLUS-SIGN NO-CL-IN-204 Overview

Header Normalization 6▸

UNDERSCORE-CL SP-BEFORE-COLON-CL TAB-IN-NAME CASE-TE UNDERSCORE-TE Overview

Body Handling 16▸

POST-CL-BODY POST-CL-ZERO POST-NO-CL-NO-TE POST-CL-UNDERSEND GET-WITH-CL-BODY CHUNKED-BODY CHUNKED-MULTI CHUNKED-EMPTY Overview CHUNKED-NO-FINAL CHUNKED-EXTENSION CHUNKED-TRAILER-VALID CHUNKED-HEX-UPPERCASE RANGE-POST RANGE-INVALID POST-UNSUPPORTED-CT

Request Smuggling 88▸

CHUNK-EXT-INVALID-TOKEN CHUNK-INVALID-SIZE-DESYNC CHUNK-SIZE-PLUS CHUNK-SIZE-TRAILING-OWS CL-TE-BOTH CL0-BODY-POISON EXPECT-100-CL-DESYNC GET-CL-BODY-DESYNC OPTIONS-CL-BODY-DESYNC OPTIONS-TE-OBS-FOLD DUPLICATE-CL CL-LEADING-ZEROS CL-NEGATIVE TE-XCHUNKED TE-TRAILING-SPACE TE-SP-BEFORE-COLON CLTE-PIPELINE TECL-PIPELINE Overview CL-TRAILING-SPACE CLTE-CONN-CLOSE CL-EXTRA-LEADING-SP TECL-CONN-CLOSE CLTE-DESYNC TE-DOUBLE-CHUNKED CLTE-SMUGGLED-GET TE-CASE-MISMATCH TECL-DESYNC CL-COMMA-DIFFERENT CLTE-SMUGGLED-GET-CL-PLUS PIPELINE-SAFE CLTE-SMUGGLED-GET-CL-NON-NUMERIC TE-NOT-FINAL-CHUNKED CLTE-SMUGGLED-GET-TE-OBS-FOLD TE-HTTP10 CHUNK-BARE-SEMICOLON CLTE-SMUGGLED-HEAD BARE-CR-HEADER-VALUE CLTE-SMUGGLED-GET-TE-TRAILING-SPACE CL-OCTAL CLTE-SMUGGLED-GET-TE-LEADING-COMMA CHUNK-UNDERSCORE CLTE-SMUGGLED-GET-TE-CASE-MISMATCH TE-DUPLICATE-HEADERS-SMUGGLED-GET TE-EMPTY-VALUE TE-LEADING-COMMA TECL-SMUGGLED-GET DUPLICATE-CL-SMUGGLED-GET TE-DUPLICATE-HEADERS CHUNK-EXT-LF CHUNK-HEX-PREFIX CHUNK-SPILL CL-HEX-PREFIX CHUNK-LF-TERM CL-INTERNAL-SPACE CHUNK-EXT-CTRL CHUNK-LEADING-SP CHUNK-LF-TRAILER CHUNK-MISSING-TRAILING-CRLF TE-IDENTITY TRANSFER_ENCODING CHUNK-NEGATIVE CL-COMMA-SAME CHUNKED-WITH-PARAMS TRAILER-CL EXPECT-100-CL TRAILER-TE TRAILER-HOST HEAD-CL-BODY OPTIONS-CL-BODY CL-UNDERSCORE CL-NEGATIVE-ZERO CL-DOUBLE-ZERO CL-LEADING-ZEROS-OCTAL TE-OBS-FOLD CHUNK-EXT-CR TE-TRAILING-COMMA MULTIPLE-HOST-COMMA TE-VTAB CHUNK-BARE-CR-TERM TE-FORMFEED TE-NULL TRAILER-AUTH TE-TAB-BEFORE-VALUE ABSOLUTE-URI-HOST-MISMATCH TRAILER-CONTENT-TYPE CL-COMMA-TRIPLE GET-CL-PREFIX-DESYNC

Malformed Input 27▸

BINARY-GARBAGE LONG-URL LONG-HEADER-NAME LONG-HEADER-VALUE LONG-METHOD MANY-HEADERS NUL-IN-URL CONTROL-CHARS-HEADER NON-ASCII-HEADER-NAME NON-ASCII-URL Overview CL-OVERFLOW INCOMPLETE-REQUEST EMPTY-REQUEST WHITESPACE-ONLY-LINE NUL-IN-HEADER-VALUE CHUNK-SIZE-OVERFLOW H2-PREFACE CHUNK-EXT-64K CL-EMPTY CL-TAB-BEFORE-VALUE URL-BACKSLASH URL-OVERLONG-UTF8 URL-PERCENT-NULL URL-PERCENT-CRLF RANGE-OVERLAPPING POST-CL-HUGE-NO-BODY

Caching 10▸

ETAG-304 LAST-MODIFIED-304 Overview ETAG-IN-304 INM-PRECEDENCE INM-WILDCARD IMS-FUTURE IMS-INVALID INM-UNQUOTED ETAG-WEAK

WebSockets 6▸

UPGRADE-POST UPGRADE-MISSING-CONN UPGRADE-UNKNOWN UPGRADE-INVALID-VER UPGRADE-HTTP10 Overview

Cookie Handling 13▸

ECHO OVERSIZED EMPTY NUL CONTROL-CHARS MANY-PAIRS MALFORMED MULTI-HEADER PARSED-BASIC PARSED-MULTI PARSED-EMPTY-VAL PARSED-SPECIAL Overview

Servers▸

All servers Actix Apache ASP.NET Minimal Bun Caddy Deno Effinitive EmbedIO Envoy Express FastEndpoints FastHTTP Flask GenHTTP Gin Glyph11 Gunicorn H2O HAProxy Hyper Jetty Lighttpd NetCoreServer Nginx Node.js Ntex PHP Pingora Puma Quarkus ServiceStack SimpleW Sisk Spring Boot Tomcat Traefik Trillium Uvicorn Workerman

Contributing▸

Add a Test Add with an AI Agent Add a Framework

Home › Servers

Servers

Configuration and source code for each server tested by Http11Probe.

Http11Probe — HTTP/1.1 compliance & smuggling testerSource on GitHub