Results matrix Entropy

Overview▸

Overview What is HTTP?Message Syntax Headers Connections Body and Framing Caching and Negotiation History and Future RFC Requirement Dashboard RFC Basics Baseline Reachability Test Glossary

Glossary▸

Line Endings 5▸

Bare LF Request Line — HTTP/1.1 Compliance Bare LF Header — HTTP/1.1 Compliance CR Only Line Ending — HTTP/1.1 Compliance Overview Leading CRLF — HTTP/1.1 Compliance

Request Line 27▸

Multi Space Request Line — HTTP/1.1 Compliance Missing Target — HTTP/1.1 Compliance Fragment In Target — HTTP/1.1 Compliance Invalid Version — HTTP/1.1 Compliance Overview HTTP/0.9 Request — HTTP/1.1 Compliance Asterisk With GET — HTTP/1.1 Compliance OPTIONS Star — HTTP/1.1 Compliance Unknown TE 501 — HTTP/1.1 Compliance Absolute Form — HTTP/1.1 Compliance Method Case — HTTP/1.1 Compliance Method CONNECT — HTTP/1.1 Compliance Method TRACE — HTTP/1.1 Compliance Request Line Tab — HTTP/1.1 Compliance HEAD No Body — HTTP/1.1 Compliance Version Missing Minor — HTTP/1.1 Compliance Unknown Method — HTTP/1.1 Compliance Version Leading Zeros — HTTP/1.1 Compliance 405 Allow — HTTP/1.1 Compliance Version Whitespace — HTTP/1.1 Compliance OPTIONS Allow — HTTP/1.1 Compliance HTTP/1.2 Version — HTTP/1.1 Compliance TRACE With Body — HTTP/1.1 Compliance Version Case — HTTP/1.1 Compliance Long URL OK — HTTP/1.1 Compliance Space In Target — HTTP/1.1 Compliance TRACE Sensitive — HTTP/1.1 Compliance

Header Syntax 16▸

Space Before Colon — HTTP/1.1 Compliance Obs Fold — HTTP/1.1 Compliance Empty Header Name — HTTP/1.1 Compliance Invalid Header Name — HTTP/1.1 Compliance Header No Colon — HTTP/1.1 Compliance Overview Connection Close — HTTP/1.1 Compliance Whitespace Before Headers — HTTP/1.1 Compliance Expect Unknown — HTTP/1.1 Compliance HTTP/1.0 Default Close — HTTP/1.1 Compliance Date Header — HTTP/1.1 Compliance No 1xx HTTP/1.0 — HTTP/1.1 Compliance Content Type Presence — HTTP/1.1 Compliance Date Format — HTTP/1.1 Compliance Duplicate Content-Type — HTTP/1.1 Compliance Accept Nonsense — HTTP/1.1 Compliance

Host Header 8▸

Missing Host — HTTP/1.1 Compliance Duplicate Host — HTTP/1.1 Compliance Duplicate Host Same — HTTP/1.1 Compliance Host With Userinfo — HTTP/1.1 Compliance Host With Path — HTTP/1.1 Compliance Host Empty Value — HTTP/1.1 Compliance Overview HTTP/1.0 No Host — HTTP/1.1 Compliance

Content-Length 4▸

CL Non Numeric — HTTP/1.1 Compliance CL Plus Sign — HTTP/1.1 Compliance No CL In 204 — HTTP/1.1 Compliance Overview

Header Normalization 6▸

Underscore CL — Header Normalization Space Before Colon CL — Header Normalization Tab In Name — Header Normalization Case TE — Header Normalization Underscore TE — Header Normalization Overview

Body Handling 16▸

POST CL Body — HTTP/1.1 Compliance POST CL Zero — HTTP/1.1 Compliance POST No CL No TE — HTTP/1.1 Compliance POST CL Undersend — HTTP/1.1 Compliance GET With CL Body — HTTP/1.1 Compliance Chunked Body — HTTP/1.1 Compliance Chunked Multi — HTTP/1.1 Compliance Chunked Empty — HTTP/1.1 Compliance Overview Chunked No Final — HTTP/1.1 Compliance Chunked Extension — HTTP/1.1 Compliance Chunked Trailer Valid — HTTP/1.1 Compliance Chunked Hex Uppercase — HTTP/1.1 Compliance Range POST — HTTP/1.1 Compliance Range Invalid — HTTP/1.1 Compliance POST Unsupported Content-Type — HTTP/1.1 Compliance

Request Smuggling 88▸

Chunk Ext Invalid Token — Request Smuggling Chunk Invalid Size Desync — Request Smuggling Chunk Size Plus — Request Smuggling Chunk Size Trailing OWS — Request Smuggling CL TE Both — Request Smuggling CL0 Body Poison — Request Smuggling Expect 100 CL Desync — Request Smuggling GET CL Body Desync — Request Smuggling OPTIONS CL Body Desync — Request Smuggling OPTIONS TE Obs Fold — Request Smuggling Duplicate CL — Request Smuggling CL Leading Zeros — Request Smuggling CL Negative — Request Smuggling TE X-Chunked — Request Smuggling TE Trailing Space — Request Smuggling TE Space Before Colon — Request Smuggling CL/TE Pipeline — Request Smuggling TE/CL Pipeline — Request Smuggling Overview CL Trailing Space — Request Smuggling CL/TE Conn Close — Request Smuggling CL Extra Leading Space — Request Smuggling TE/CL Conn Close — Request Smuggling CL/TE Desync — Request Smuggling TE Double Chunked — Request Smuggling CL/TE Smuggled GET — Request Smuggling TE Case Mismatch — Request Smuggling TE/CL Desync — Request Smuggling CL Comma Different — Request Smuggling CL/TE Smuggled GET CL Plus — Request Smuggling Pipeline Safe — Request Smuggling CL/TE Smuggled GET CL Non Numeric — Request Smuggling TE Not Final Chunked — Request Smuggling CL/TE Smuggled GET TE Obs Fold — Request Smuggling TE HTTP/1.0 — Request Smuggling Chunk Bare Semicolon — Request Smuggling CL/TE Smuggled HEAD — Request Smuggling Bare CR Header Value — Request Smuggling CL/TE Smuggled GET TE Trailing Space — Request Smuggling CL Octal — Request Smuggling CL/TE Smuggled GET TE Leading Comma — Request Smuggling Chunk Underscore — Request Smuggling CL/TE Smuggled GET TE Case Mismatch — Request Smuggling TE Duplicate Headers Smuggled GET — Request Smuggling TE Empty Value — Request Smuggling TE Leading Comma — Request Smuggling TE/CL Smuggled GET — Request Smuggling Duplicate CL Smuggled GET — Request Smuggling TE Duplicate Headers — Request Smuggling Chunk Ext LF — Request Smuggling Chunk Hex Prefix — Request Smuggling Chunk Spill — Request Smuggling CL Hex Prefix — Request Smuggling Chunk LF Term — Request Smuggling CL Internal Space — Request Smuggling Chunk Ext Ctrl — Request Smuggling Chunk Leading Space — Request Smuggling Chunk LF Trailer — Request Smuggling Chunk Missing Trailing CRLF — Request Smuggling TE Identity — Request Smuggling Transfer Encoding Underscore — Request Smuggling Chunk Negative — Request Smuggling CL Comma Same — Request Smuggling Chunked With Params — Request Smuggling Trailer CL — Request Smuggling Expect 100 CL — Request Smuggling Trailer TE — Request Smuggling Trailer Host — Request Smuggling HEAD CL Body — Request Smuggling OPTIONS CL Body — Request Smuggling CL Underscore — Request Smuggling CL Negative Zero — Request Smuggling CL Double Zero — Request Smuggling CL Leading Zeros Octal — Request Smuggling TE Obs Fold — Request Smuggling Chunk Ext CR — Request Smuggling TE Trailing Comma — Request Smuggling Multiple Host Comma — Request Smuggling TE Vertical-Tab — Request Smuggling Chunk Bare CR Term — Request Smuggling TE Form-Feed — Request Smuggling TE Null — Request Smuggling Trailer Auth — Request Smuggling TE Tab Before Value — Request Smuggling Absolute URI Host Mismatch — Request Smuggling Trailer Content Type — Request Smuggling CL Comma Triple — Request Smuggling GET CL Prefix Desync — Request Smuggling

Malformed Input 27▸

Binary Garbage — Malformed Input Long URL — Malformed Input Long Header Name — Malformed Input Long Header Value — Malformed Input Long Method — Malformed Input Many Headers — Malformed Input NUL In URL — Malformed Input Control Chars Header — Malformed Input Non Ascii Header Name — Malformed Input Non Ascii URL — Malformed Input Overview CL Overflow — Malformed Input Incomplete Request — Malformed Input Empty Request — Malformed Input Whitespace Only Line — Malformed Input NUL In Header Value — Malformed Input Chunk Size Overflow — Malformed Input HTTP/2 Preface — Malformed Input Chunk Extension Long — Malformed Input CL Empty — Malformed Input CL Tab Before Value — Malformed Input URL Backslash — Malformed Input URL Overlong UTF-8 — Malformed Input URL Percent Null — Malformed Input URL Percent CRLF — Malformed Input Range Overlapping — Malformed Input POST CL Huge No Body — Malformed Input

Caching 10▸

ETag 304 — Caching Last Modified 304 — Caching Overview ETag In 304 — Caching If-None-Match Precedence — Caching If-None-Match Wildcard — Caching If-Modified-Since Future — Caching If-Modified-Since Invalid — Caching If-None-Match Unquoted — Caching ETag Weak — Caching

WebSockets 6▸

Upgrade POST — WebSocket Upgrade Upgrade Missing Conn — WebSocket Upgrade Upgrade Unknown — WebSocket Upgrade Upgrade Invalid Version — WebSocket Upgrade Upgrade HTTP/1.0 — WebSocket Upgrade Overview

Cookie Handling 13▸

Echo — Cookie Handling Oversized — Cookie Handling Empty — Cookie Handling Null — Cookie Handling Control Chars — Cookie Handling Many Pairs — Cookie Handling Malformed — Cookie Handling Multi Header — Cookie Handling Parsed Basic — Cookie Handling Parsed Multi — Cookie Handling Parsed Empty Val — Cookie Handling Parsed Special — Cookie Handling Overview

Servers▸

All servers Actix Apache ASP.NET Minimal Bun Caddy Deno Effinitive EmbedIO Envoy Express FastEndpoints FastHTTP Flask GenHTTP Gin Glyph11 Gunicorn H2O HAProxy Hyper Jetty Lighttpd NetCoreServer Nginx Node.js Ntex PHP Pingora Puma Quarkus ServiceStack SimpleW Sisk Spring Boot Tomcat Traefik Trillium Uvicorn uWebSockets Workerman

Contributing▸

Add a Test Add with an AI Agent Add a Framework

Home › Servers

Servers

Configuration and source code for each server tested by Http11Probe.

Http11Probe — HTTP/1.1 compliance & smuggling testerSource on GitHub